Deltree "\clients\client1" NT_STATUS_OK
Mkdir "\clients" NT_STATUS_OK
NTCreateX "\clients\client1" 0x1 0x2 16385 NT_STATUS_OK
Close 16385 NT_STATUS_OK
NTCreateX "\clients\client1\mixfile" 0x40 0x1 9935 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\FILLER.*" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp" 0x1 0x2 9937 NT_STATUS_OK
Close 9937 NT_STATUS_OK
NTCreateX "\clients\client1\filler.000" 0x40 0x2 9938 NT_STATUS_OK
QUERY_FS_INFORMATION 1 NT_STATUS_OK
WriteX 9938 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9938 258 NT_STATUS_OK
WriteX 9938 0 65536 65536 NT_STATUS_OK
WriteX 9938 65536 65536 65536 NT_STATUS_OK
WriteX 9938 131072 65536 65536 NT_STATUS_OK
WriteX 9938 196608 65536 65536 NT_STATUS_OK
WriteX 9938 262144 65536 65536 NT_STATUS_OK
WriteX 9938 327680 65536 65536 NT_STATUS_OK
WriteX 9938 393216 65536 65536 NT_STATUS_OK
WriteX 9938 458752 65536 65536 NT_STATUS_OK
WriteX 9938 524288 65536 65536 NT_STATUS_OK
WriteX 9938 589824 65536 65536 NT_STATUS_OK
WriteX 9938 655360 65536 65536 NT_STATUS_OK
WriteX 9938 720896 65536 65536 NT_STATUS_OK
WriteX 9938 786432 65536 65536 NT_STATUS_OK
WriteX 9938 851968 65536 65536 NT_STATUS_OK
WriteX 9938 917504 65536 65536 NT_STATUS_OK
WriteX 9938 983040 65536 65536 NT_STATUS_OK
Close 9938 NT_STATUS_OK
NTCreateX "\clients\client1\filler.001" 0x40 0x2 9939 NT_STATUS_OK
WriteX 9939 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9939 258 NT_STATUS_OK
WriteX 9939 0 65536 65536 NT_STATUS_OK
WriteX 9939 65536 65536 65536 NT_STATUS_OK
WriteX 9939 131072 65536 65536 NT_STATUS_OK
WriteX 9939 196608 65536 65536 NT_STATUS_OK
WriteX 9939 262144 65536 65536 NT_STATUS_OK
WriteX 9939 327680 65536 65536 NT_STATUS_OK
WriteX 9939 393216 65536 65536 NT_STATUS_OK
WriteX 9939 458752 65536 65536 NT_STATUS_OK
WriteX 9939 524288 65536 65536 NT_STATUS_OK
WriteX 9939 589824 65536 65536 NT_STATUS_OK
WriteX 9939 655360 65536 65536 NT_STATUS_OK
WriteX 9939 720896 65536 65536 NT_STATUS_OK
WriteX 9939 786432 65536 65536 NT_STATUS_OK
WriteX 9939 851968 65536 65536 NT_STATUS_OK
WriteX 9939 917504 65536 65536 NT_STATUS_OK
WriteX 9939 983040 65536 65536 NT_STATUS_OK
Close 9939 NT_STATUS_OK
NTCreateX "\clients\client1\filler.002" 0x40 0x2 9940 NT_STATUS_OK
WriteX 9940 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9940 258 NT_STATUS_OK
WriteX 9940 0 65536 65536 NT_STATUS_OK
WriteX 9940 65536 65536 65536 NT_STATUS_OK
WriteX 9940 131072 65536 65536 NT_STATUS_OK
WriteX 9940 196608 65536 65536 NT_STATUS_OK
WriteX 9940 262144 65536 65536 NT_STATUS_OK
WriteX 9940 327680 65536 65536 NT_STATUS_OK
WriteX 9940 393216 65536 65536 NT_STATUS_OK
WriteX 9940 458752 65536 65536 NT_STATUS_OK
WriteX 9940 524288 65536 65536 NT_STATUS_OK
WriteX 9940 589824 65536 65536 NT_STATUS_OK
WriteX 9940 655360 65536 65536 NT_STATUS_OK
WriteX 9940 720896 65536 65536 NT_STATUS_OK
WriteX 9940 786432 65536 65536 NT_STATUS_OK
WriteX 9940 851968 65536 65536 NT_STATUS_OK
WriteX 9940 917504 65536 65536 NT_STATUS_OK
WriteX 9940 983040 65536 65536 NT_STATUS_OK
Close 9940 NT_STATUS_OK
NTCreateX "\clients\client1\filler.003" 0x40 0x2 9941 NT_STATUS_OK
WriteX 9941 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9941 258 NT_STATUS_OK
WriteX 9941 0 65536 65536 NT_STATUS_OK
WriteX 9941 65536 65536 65536 NT_STATUS_OK
WriteX 9941 131072 65536 65536 NT_STATUS_OK
WriteX 9941 196608 65536 65536 NT_STATUS_OK
WriteX 9941 262144 65536 65536 NT_STATUS_OK
WriteX 9941 327680 65536 65536 NT_STATUS_OK
WriteX 9941 393216 65536 65536 NT_STATUS_OK
WriteX 9941 458752 65536 65536 NT_STATUS_OK
WriteX 9941 524288 65536 65536 NT_STATUS_OK
WriteX 9941 589824 65536 65536 NT_STATUS_OK
WriteX 9941 655360 65536 65536 NT_STATUS_OK
WriteX 9941 720896 65536 65536 NT_STATUS_OK
WriteX 9941 786432 65536 65536 NT_STATUS_OK
WriteX 9941 851968 65536 65536 NT_STATUS_OK
WriteX 9941 917504 65536 65536 NT_STATUS_OK
WriteX 9941 983040 65536 65536 NT_STATUS_OK
Close 9941 NT_STATUS_OK
NTCreateX "\clients\client1\filler.004" 0x40 0x2 9942 NT_STATUS_OK
WriteX 9942 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9942 258 NT_STATUS_OK
WriteX 9942 0 65536 65536 NT_STATUS_OK
WriteX 9942 65536 65536 65536 NT_STATUS_OK
WriteX 9942 131072 65536 65536 NT_STATUS_OK
WriteX 9942 196608 65536 65536 NT_STATUS_OK
WriteX 9942 262144 65536 65536 NT_STATUS_OK
WriteX 9942 327680 65536 65536 NT_STATUS_OK
WriteX 9942 393216 65536 65536 NT_STATUS_OK
WriteX 9942 458752 65536 65536 NT_STATUS_OK
WriteX 9942 524288 65536 65536 NT_STATUS_OK
WriteX 9942 589824 65536 65536 NT_STATUS_OK
WriteX 9942 655360 65536 65536 NT_STATUS_OK
WriteX 9942 720896 65536 65536 NT_STATUS_OK
WriteX 9942 786432 65536 65536 NT_STATUS_OK
WriteX 9942 851968 65536 65536 NT_STATUS_OK
WriteX 9942 917504 65536 65536 NT_STATUS_OK
WriteX 9942 983040 65536 65536 NT_STATUS_OK
Close 9942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD" 0x1 0x2 9943 NT_STATUS_OK
Close 9943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x2 9944 NT_STATUS_OK
WriteX 9944 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9944 258 NT_STATUS_OK
WriteX 9944 0 65536 65536 NT_STATUS_OK
WriteX 9944 65536 65536 65536 NT_STATUS_OK
WriteX 9944 131072 65536 65536 NT_STATUS_OK
WriteX 9944 196608 63488 63488 NT_STATUS_OK
Close 9944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x2 9945 NT_STATUS_OK
WriteX 9945 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9945 258 NT_STATUS_OK
WriteX 9945 0 65536 65536 NT_STATUS_OK
WriteX 9945 65536 65536 65536 NT_STATUS_OK
WriteX 9945 131072 65536 65536 NT_STATUS_OK
WriteX 9945 196608 63488 63488 NT_STATUS_OK
Close 9945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x2 9946 NT_STATUS_OK
WriteX 9946 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9946 258 NT_STATUS_OK
WriteX 9946 0 65536 65536 NT_STATUS_OK
WriteX 9946 65536 65536 65536 NT_STATUS_OK
WriteX 9946 131072 65536 65536 NT_STATUS_OK
WriteX 9946 196608 63488 63488 NT_STATUS_OK
Close 9946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL" 0x1 0x2 9947 NT_STATUS_OK
Close 9947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x2 9948 NT_STATUS_OK
WriteX 9948 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9948 258 NT_STATUS_OK
WriteX 9948 0 65536 65536 NT_STATUS_OK
WriteX 9948 65536 65536 65536 NT_STATUS_OK
WriteX 9948 131072 65536 65536 NT_STATUS_OK
WriteX 9948 196608 63488 63488 NT_STATUS_OK
Close 9948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x2 9949 NT_STATUS_OK
WriteX 9949 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9949 258 NT_STATUS_OK
WriteX 9949 0 65536 65536 NT_STATUS_OK
WriteX 9949 65536 65536 65536 NT_STATUS_OK
WriteX 9949 131072 65536 65536 NT_STATUS_OK
WriteX 9949 196608 63488 63488 NT_STATUS_OK
Close 9949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT" 0x1 0x2 9950 NT_STATUS_OK
Close 9950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x2 9951 NT_STATUS_OK
WriteX 9951 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9951 258 NT_STATUS_OK
WriteX 9951 0 65536 65536 NT_STATUS_OK
WriteX 9951 65536 65536 65536 NT_STATUS_OK
WriteX 9951 131072 65536 65536 NT_STATUS_OK
WriteX 9951 196608 63488 63488 NT_STATUS_OK
Close 9951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x2 9952 NT_STATUS_OK
WriteX 9952 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9952 258 NT_STATUS_OK
WriteX 9952 0 65536 65536 NT_STATUS_OK
WriteX 9952 65536 65536 65536 NT_STATUS_OK
WriteX 9952 131072 65536 65536 NT_STATUS_OK
WriteX 9952 196608 63488 63488 NT_STATUS_OK
Close 9952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x2 9953 NT_STATUS_OK
WriteX 9953 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9953 258 NT_STATUS_OK
WriteX 9953 0 65536 65536 NT_STATUS_OK
WriteX 9953 65536 65536 65536 NT_STATUS_OK
WriteX 9953 131072 65536 65536 NT_STATUS_OK
WriteX 9953 196608 63488 63488 NT_STATUS_OK
Close 9953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x2 9954 NT_STATUS_OK
WriteX 9954 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9954 258 NT_STATUS_OK
WriteX 9954 0 65536 65536 NT_STATUS_OK
WriteX 9954 65536 65536 65536 NT_STATUS_OK
WriteX 9954 131072 65536 65536 NT_STATUS_OK
WriteX 9954 196608 63488 63488 NT_STATUS_OK
Close 9954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x2 9955 NT_STATUS_OK
WriteX 9955 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9955 258 NT_STATUS_OK
WriteX 9955 0 65536 65536 NT_STATUS_OK
WriteX 9955 65536 65536 65536 NT_STATUS_OK
WriteX 9955 131072 65536 65536 NT_STATUS_OK
WriteX 9955 196608 63488 63488 NT_STATUS_OK
Close 9955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL" 0x1 0x2 9956 NT_STATUS_OK
Close 9956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x2 9957 NT_STATUS_OK
WriteX 9957 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9957 258 NT_STATUS_OK
WriteX 9957 0 65536 65536 NT_STATUS_OK
WriteX 9957 65536 65536 65536 NT_STATUS_OK
WriteX 9957 131072 65536 65536 NT_STATUS_OK
WriteX 9957 196608 63488 63488 NT_STATUS_OK
Close 9957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x2 9958 NT_STATUS_OK
WriteX 9958 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9958 258 NT_STATUS_OK
WriteX 9958 0 65536 65536 NT_STATUS_OK
WriteX 9958 65536 65536 65536 NT_STATUS_OK
WriteX 9958 131072 65536 65536 NT_STATUS_OK
WriteX 9958 196608 63488 63488 NT_STATUS_OK
Close 9958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x2 9959 NT_STATUS_OK
WriteX 9959 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9959 258 NT_STATUS_OK
WriteX 9959 0 65536 65536 NT_STATUS_OK
WriteX 9959 65536 65536 65536 NT_STATUS_OK
WriteX 9959 131072 65536 65536 NT_STATUS_OK
WriteX 9959 196608 63488 63488 NT_STATUS_OK
Close 9959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x2 9960 NT_STATUS_OK
WriteX 9960 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9960 258 NT_STATUS_OK
WriteX 9960 0 65536 65536 NT_STATUS_OK
WriteX 9960 65536 65536 65536 NT_STATUS_OK
WriteX 9960 131072 65536 65536 NT_STATUS_OK
WriteX 9960 196608 63488 63488 NT_STATUS_OK
Close 9960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x2 9961 NT_STATUS_OK
WriteX 9961 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9961 258 NT_STATUS_OK
WriteX 9961 0 65536 65536 NT_STATUS_OK
WriteX 9961 65536 65536 65536 NT_STATUS_OK
WriteX 9961 131072 65536 65536 NT_STATUS_OK
WriteX 9961 196608 63488 63488 NT_STATUS_OK
Close 9961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x2 9962 NT_STATUS_OK
WriteX 9962 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9962 258 NT_STATUS_OK
WriteX 9962 0 65536 65536 NT_STATUS_OK
WriteX 9962 65536 65536 65536 NT_STATUS_OK
WriteX 9962 131072 65536 65536 NT_STATUS_OK
WriteX 9962 196608 63488 63488 NT_STATUS_OK
Close 9962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x2 9963 NT_STATUS_OK
WriteX 9963 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9963 258 NT_STATUS_OK
WriteX 9963 0 65536 65536 NT_STATUS_OK
WriteX 9963 65536 65536 65536 NT_STATUS_OK
WriteX 9963 131072 65536 65536 NT_STATUS_OK
WriteX 9963 196608 63488 63488 NT_STATUS_OK
Close 9963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x2 9964 NT_STATUS_OK
WriteX 9964 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9964 258 NT_STATUS_OK
WriteX 9964 0 65536 65536 NT_STATUS_OK
WriteX 9964 65536 65536 65536 NT_STATUS_OK
WriteX 9964 131072 65536 65536 NT_STATUS_OK
WriteX 9964 196608 63488 63488 NT_STATUS_OK
Close 9964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x2 9965 NT_STATUS_OK
WriteX 9965 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9965 258 NT_STATUS_OK
WriteX 9965 0 65536 65536 NT_STATUS_OK
WriteX 9965 65536 65536 65536 NT_STATUS_OK
WriteX 9965 131072 65536 65536 NT_STATUS_OK
WriteX 9965 196608 63488 63488 NT_STATUS_OK
Close 9965 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x2 9966 NT_STATUS_OK
WriteX 9966 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9966 258 NT_STATUS_OK
WriteX 9966 0 65536 65536 NT_STATUS_OK
WriteX 9966 65536 65536 65536 NT_STATUS_OK
WriteX 9966 131072 65536 65536 NT_STATUS_OK
WriteX 9966 196608 63488 63488 NT_STATUS_OK
Close 9966 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x2 9967 NT_STATUS_OK
WriteX 9967 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9967 258 NT_STATUS_OK
WriteX 9967 0 65536 65536 NT_STATUS_OK
WriteX 9967 65536 65536 65536 NT_STATUS_OK
WriteX 9967 131072 65536 65536 NT_STATUS_OK
WriteX 9967 196608 63488 63488 NT_STATUS_OK
Close 9967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO" 0x1 0x2 9968 NT_STATUS_OK
Close 9968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x2 9969 NT_STATUS_OK
WriteX 9969 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9969 258 NT_STATUS_OK
WriteX 9969 0 65536 65536 NT_STATUS_OK
WriteX 9969 65536 65536 65536 NT_STATUS_OK
WriteX 9969 131072 65536 65536 NT_STATUS_OK
WriteX 9969 196608 63488 63488 NT_STATUS_OK
Close 9969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x2 9970 NT_STATUS_OK
WriteX 9970 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9970 258 NT_STATUS_OK
WriteX 9970 0 65536 65536 NT_STATUS_OK
WriteX 9970 65536 65536 65536 NT_STATUS_OK
WriteX 9970 131072 65536 65536 NT_STATUS_OK
WriteX 9970 196608 63488 63488 NT_STATUS_OK
Close 9970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x2 9971 NT_STATUS_OK
WriteX 9971 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9971 258 NT_STATUS_OK
WriteX 9971 0 65536 65536 NT_STATUS_OK
WriteX 9971 65536 65536 65536 NT_STATUS_OK
WriteX 9971 131072 65536 65536 NT_STATUS_OK
WriteX 9971 196608 63488 63488 NT_STATUS_OK
Close 9971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM" 0x1 0x2 9972 NT_STATUS_OK
Close 9972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x2 9973 NT_STATUS_OK
WriteX 9973 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9973 258 NT_STATUS_OK
WriteX 9973 0 65536 65536 NT_STATUS_OK
WriteX 9973 65536 65536 65536 NT_STATUS_OK
WriteX 9973 131072 65536 65536 NT_STATUS_OK
WriteX 9973 196608 63488 63488 NT_STATUS_OK
Close 9973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x2 9974 NT_STATUS_OK
WriteX 9974 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9974 258 NT_STATUS_OK
WriteX 9974 0 65536 65536 NT_STATUS_OK
WriteX 9974 65536 65536 65536 NT_STATUS_OK
WriteX 9974 131072 65536 65536 NT_STATUS_OK
WriteX 9974 196608 63488 63488 NT_STATUS_OK
Close 9974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x2 9975 NT_STATUS_OK
WriteX 9975 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9975 258 NT_STATUS_OK
WriteX 9975 0 65536 65536 NT_STATUS_OK
WriteX 9975 65536 65536 65536 NT_STATUS_OK
WriteX 9975 131072 65536 65536 NT_STATUS_OK
WriteX 9975 196608 63488 63488 NT_STATUS_OK
Close 9975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX" 0x1 0x2 9976 NT_STATUS_OK
Close 9976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x2 9977 NT_STATUS_OK
WriteX 9977 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9977 258 NT_STATUS_OK
WriteX 9977 0 65536 65536 NT_STATUS_OK
WriteX 9977 65536 65536 65536 NT_STATUS_OK
WriteX 9977 131072 65536 65536 NT_STATUS_OK
WriteX 9977 196608 63488 63488 NT_STATUS_OK
Close 9977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x2 9978 NT_STATUS_OK
WriteX 9978 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9978 258 NT_STATUS_OK
WriteX 9978 0 65536 65536 NT_STATUS_OK
WriteX 9978 65536 65536 65536 NT_STATUS_OK
WriteX 9978 131072 65536 65536 NT_STATUS_OK
WriteX 9978 196608 63488 63488 NT_STATUS_OK
Close 9978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x2 9979 NT_STATUS_OK
WriteX 9979 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9979 258 NT_STATUS_OK
WriteX 9979 0 65536 65536 NT_STATUS_OK
WriteX 9979 65536 65536 65536 NT_STATUS_OK
WriteX 9979 131072 65536 65536 NT_STATUS_OK
WriteX 9979 196608 63488 63488 NT_STATUS_OK
Close 9979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x2 9980 NT_STATUS_OK
WriteX 9980 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9980 258 NT_STATUS_OK
WriteX 9980 0 65536 65536 NT_STATUS_OK
WriteX 9980 65536 65536 65536 NT_STATUS_OK
WriteX 9980 131072 65536 65536 NT_STATUS_OK
WriteX 9980 196608 63488 63488 NT_STATUS_OK
Close 9980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x2 9981 NT_STATUS_OK
WriteX 9981 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9981 258 NT_STATUS_OK
WriteX 9981 0 65536 65536 NT_STATUS_OK
WriteX 9981 65536 65536 65536 NT_STATUS_OK
WriteX 9981 131072 65536 65536 NT_STATUS_OK
WriteX 9981 196608 63488 63488 NT_STATUS_OK
Close 9981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x2 9982 NT_STATUS_OK
WriteX 9982 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9982 258 NT_STATUS_OK
WriteX 9982 0 65536 65536 NT_STATUS_OK
WriteX 9982 65536 65536 65536 NT_STATUS_OK
WriteX 9982 131072 65536 65536 NT_STATUS_OK
WriteX 9982 196608 63488 63488 NT_STATUS_OK
Close 9982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x2 9983 NT_STATUS_OK
WriteX 9983 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9983 258 NT_STATUS_OK
WriteX 9983 0 65536 65536 NT_STATUS_OK
WriteX 9983 65536 65536 65536 NT_STATUS_OK
WriteX 9983 131072 65536 65536 NT_STATUS_OK
WriteX 9983 196608 63488 63488 NT_STATUS_OK
Close 9983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x2 9984 NT_STATUS_OK
WriteX 9984 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9984 258 NT_STATUS_OK
WriteX 9984 0 65536 65536 NT_STATUS_OK
WriteX 9984 65536 65536 65536 NT_STATUS_OK
WriteX 9984 131072 65536 65536 NT_STATUS_OK
WriteX 9984 196608 63488 63488 NT_STATUS_OK
Close 9984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x2 9985 NT_STATUS_OK
WriteX 9985 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9985 258 NT_STATUS_OK
WriteX 9985 0 65536 65536 NT_STATUS_OK
WriteX 9985 65536 65536 65536 NT_STATUS_OK
WriteX 9985 131072 65536 65536 NT_STATUS_OK
WriteX 9985 196608 63488 63488 NT_STATUS_OK
Close 9985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x2 9986 NT_STATUS_OK
WriteX 9986 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9986 258 NT_STATUS_OK
WriteX 9986 0 65536 65536 NT_STATUS_OK
WriteX 9986 65536 65536 65536 NT_STATUS_OK
WriteX 9986 131072 65536 65536 NT_STATUS_OK
WriteX 9986 196608 63488 63488 NT_STATUS_OK
Close 9986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x2 9987 NT_STATUS_OK
WriteX 9987 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9987 258 NT_STATUS_OK
WriteX 9987 0 65536 65536 NT_STATUS_OK
WriteX 9987 65536 65536 65536 NT_STATUS_OK
WriteX 9987 131072 65536 65536 NT_STATUS_OK
WriteX 9987 196608 63488 63488 NT_STATUS_OK
Close 9987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x2 9988 NT_STATUS_OK
WriteX 9988 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9988 258 NT_STATUS_OK
WriteX 9988 0 65536 65536 NT_STATUS_OK
WriteX 9988 65536 65536 65536 NT_STATUS_OK
WriteX 9988 131072 65536 65536 NT_STATUS_OK
WriteX 9988 196608 63488 63488 NT_STATUS_OK
Close 9988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x2 9989 NT_STATUS_OK
WriteX 9989 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9989 258 NT_STATUS_OK
WriteX 9989 0 65536 65536 NT_STATUS_OK
WriteX 9989 65536 65536 65536 NT_STATUS_OK
WriteX 9989 131072 65536 65536 NT_STATUS_OK
WriteX 9989 196608 63488 63488 NT_STATUS_OK
Close 9989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x2 9990 NT_STATUS_OK
WriteX 9990 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9990 258 NT_STATUS_OK
WriteX 9990 0 65536 65536 NT_STATUS_OK
WriteX 9990 65536 65536 65536 NT_STATUS_OK
WriteX 9990 131072 65536 65536 NT_STATUS_OK
WriteX 9990 196608 63488 63488 NT_STATUS_OK
Close 9990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x2 9991 NT_STATUS_OK
WriteX 9991 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9991 258 NT_STATUS_OK
WriteX 9991 0 65536 65536 NT_STATUS_OK
WriteX 9991 65536 65536 65536 NT_STATUS_OK
WriteX 9991 131072 65536 65536 NT_STATUS_OK
WriteX 9991 196608 63488 63488 NT_STATUS_OK
Close 9991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x2 9992 NT_STATUS_OK
WriteX 9992 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9992 258 NT_STATUS_OK
WriteX 9992 0 65536 65536 NT_STATUS_OK
WriteX 9992 65536 65536 65536 NT_STATUS_OK
WriteX 9992 131072 65536 65536 NT_STATUS_OK
WriteX 9992 196608 63488 63488 NT_STATUS_OK
Close 9992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x2 9993 NT_STATUS_OK
WriteX 9993 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9993 258 NT_STATUS_OK
WriteX 9993 0 65536 65536 NT_STATUS_OK
WriteX 9993 65536 65536 65536 NT_STATUS_OK
WriteX 9993 131072 65536 65536 NT_STATUS_OK
WriteX 9993 196608 63488 63488 NT_STATUS_OK
Close 9993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x2 9994 NT_STATUS_OK
WriteX 9994 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9994 258 NT_STATUS_OK
WriteX 9994 0 65536 65536 NT_STATUS_OK
WriteX 9994 65536 65536 65536 NT_STATUS_OK
WriteX 9994 131072 65536 65536 NT_STATUS_OK
WriteX 9994 196608 63488 63488 NT_STATUS_OK
Close 9994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x2 9995 NT_STATUS_OK
WriteX 9995 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9995 258 NT_STATUS_OK
WriteX 9995 0 65536 65536 NT_STATUS_OK
WriteX 9995 65536 65536 65536 NT_STATUS_OK
WriteX 9995 131072 65536 65536 NT_STATUS_OK
WriteX 9995 196608 63488 63488 NT_STATUS_OK
Close 9995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x2 9996 NT_STATUS_OK
WriteX 9996 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9996 258 NT_STATUS_OK
WriteX 9996 0 65536 65536 NT_STATUS_OK
WriteX 9996 65536 65536 65536 NT_STATUS_OK
WriteX 9996 131072 65536 65536 NT_STATUS_OK
WriteX 9996 196608 63488 63488 NT_STATUS_OK
Close 9996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS" 0x1 0x2 9997 NT_STATUS_OK
Close 9997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x2 9998 NT_STATUS_OK
WriteX 9998 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9998 258 NT_STATUS_OK
WriteX 9998 0 65536 65536 NT_STATUS_OK
WriteX 9998 65536 65536 65536 NT_STATUS_OK
WriteX 9998 131072 65536 65536 NT_STATUS_OK
WriteX 9998 196608 63488 63488 NT_STATUS_OK
Close 9998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED" 0x1 0x2 9999 NT_STATUS_OK
Close 9999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x2 10000 NT_STATUS_OK
WriteX 10000 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10000 258 NT_STATUS_OK
WriteX 10000 0 65536 65536 NT_STATUS_OK
WriteX 10000 65536 65536 65536 NT_STATUS_OK
WriteX 10000 131072 65536 65536 NT_STATUS_OK
WriteX 10000 196608 65536 65536 NT_STATUS_OK
WriteX 10000 262144 65536 65536 NT_STATUS_OK
Close 10000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x2 10001 NT_STATUS_OK
WriteX 10001 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10001 258 NT_STATUS_OK
WriteX 10001 0 65536 65536 NT_STATUS_OK
WriteX 10001 65536 65536 65536 NT_STATUS_OK
WriteX 10001 131072 65536 65536 NT_STATUS_OK
WriteX 10001 196608 65536 65536 NT_STATUS_OK
WriteX 10001 262144 65536 65536 NT_STATUS_OK
WriteX 10001 327680 65536 65536 NT_STATUS_OK
WriteX 10001 393216 65536 65536 NT_STATUS_OK
WriteX 10001 458752 65536 65536 NT_STATUS_OK
WriteX 10001 524288 65536 65536 NT_STATUS_OK
WriteX 10001 589824 65536 65536 NT_STATUS_OK
WriteX 10001 655360 65536 65536 NT_STATUS_OK
WriteX 10001 720896 65536 65536 NT_STATUS_OK
WriteX 10001 786432 65536 65536 NT_STATUS_OK
WriteX 10001 851968 65536 65536 NT_STATUS_OK
WriteX 10001 917504 65536 65536 NT_STATUS_OK
WriteX 10001 983040 65536 65536 NT_STATUS_OK
Close 10001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x2 10002 NT_STATUS_OK
WriteX 10002 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1114094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1179629 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1245164 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1310699 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1376234 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1441769 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1507304 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1572839 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1638374 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1703909 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1769444 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1834979 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1867775 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 0 65536 65536 NT_STATUS_OK
WriteX 10002 65536 65536 65536 NT_STATUS_OK
WriteX 10002 131072 65536 65536 NT_STATUS_OK
WriteX 10002 196608 65536 65536 NT_STATUS_OK
WriteX 10002 262144 65536 65536 NT_STATUS_OK
WriteX 10002 327680 65536 65536 NT_STATUS_OK
WriteX 10002 393216 65536 65536 NT_STATUS_OK
WriteX 10002 458752 65536 65536 NT_STATUS_OK
WriteX 10002 524288 65536 65536 NT_STATUS_OK
WriteX 10002 589824 65536 65536 NT_STATUS_OK
WriteX 10002 655360 65536 65536 NT_STATUS_OK
WriteX 10002 720896 65536 65536 NT_STATUS_OK
WriteX 10002 786432 65536 65536 NT_STATUS_OK
WriteX 10002 851968 65536 65536 NT_STATUS_OK
WriteX 10002 917504 65536 65536 NT_STATUS_OK
WriteX 10002 983040 65536 65536 NT_STATUS_OK
WriteX 10002 1048576 65536 65536 NT_STATUS_OK
WriteX 10002 1114112 65536 65536 NT_STATUS_OK
WriteX 10002 1179648 65536 65536 NT_STATUS_OK
WriteX 10002 1245184 65536 65536 NT_STATUS_OK
WriteX 10002 1310720 65536 65536 NT_STATUS_OK
WriteX 10002 1376256 65536 65536 NT_STATUS_OK
WriteX 10002 1441792 65536 65536 NT_STATUS_OK
WriteX 10002 1507328 65536 65536 NT_STATUS_OK
WriteX 10002 1572864 65536 65536 NT_STATUS_OK
WriteX 10002 1638400 65536 65536 NT_STATUS_OK
WriteX 10002 1703936 65536 65536 NT_STATUS_OK
WriteX 10002 1769472 65536 65536 NT_STATUS_OK
WriteX 10002 1835008 32768 32768 NT_STATUS_OK
Close 10002 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10003 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10003 0 4096 4096 NT_STATUS_OK
Close 10003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10004 NT_STATUS_OK
ReadX 10004 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10005 NT_STATUS_OK
ReadX 10005 0 4096 4096 NT_STATUS_OK
ReadX 10005 4096 4096 4096 NT_STATUS_OK
ReadX 10005 8192 4096 4096 NT_STATUS_OK
ReadX 10005 12288 4096 4096 NT_STATUS_OK
ReadX 10005 16384 4096 4096 NT_STATUS_OK
ReadX 10005 20480 4096 4096 NT_STATUS_OK
ReadX 10005 24576 4096 4096 NT_STATUS_OK
ReadX 10005 28672 4096 4096 NT_STATUS_OK
ReadX 10005 32768 4096 4096 NT_STATUS_OK
ReadX 10005 36864 4096 4096 NT_STATUS_OK
ReadX 10005 40960 4096 4096 NT_STATUS_OK
ReadX 10005 45056 4096 4096 NT_STATUS_OK
ReadX 10005 49152 4096 4096 NT_STATUS_OK
ReadX 10005 53248 4096 4096 NT_STATUS_OK
ReadX 10005 57344 4096 4096 NT_STATUS_OK
ReadX 10005 61440 4096 4096 NT_STATUS_OK
ReadX 10005 65536 4096 4096 NT_STATUS_OK
ReadX 10005 69632 4096 4096 NT_STATUS_OK
ReadX 10005 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10005 1004 NT_STATUS_OK
WriteX 10005 0 4096 4096 NT_STATUS_OK
Close 10005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10006 NT_STATUS_OK
SET_FILE_INFORMATION 10006 1004 NT_STATUS_OK
Close 10006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10007 NT_STATUS_OK
ReadX 10007 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10008 NT_STATUS_OK
Close 10008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 18432 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10011 NT_STATUS_OK
WriteX 10011 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10011 258 NT_STATUS_OK
WriteX 10011 0 65536 65536 NT_STATUS_OK
WriteX 10011 65536 19979 19979 NT_STATUS_OK
Close 10011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10012 NT_STATUS_OK
ReadX 10012 0 4096 4096 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
QUERY_FILE_INFORMATION 10012 1004 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
SET_FILE_INFORMATION 10012 1004 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
Close 10012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10013 NT_STATUS_OK
ReadX 10013 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10014 NT_STATUS_OK
ReadX 10014 0 4096 4096 NT_STATUS_OK
Close 10013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10015 NT_STATUS_OK
ReadX 10015 0 4096 4096 NT_STATUS_OK
Close 10015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10016 NT_STATUS_OK
ReadX 10016 0 4096 4096 NT_STATUS_OK
Close 10016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10017 NT_STATUS_OK
ReadX 10017 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10017 1004 NT_STATUS_OK
WriteX 10017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10018 NT_STATUS_OK
Close 10018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10014 NT_STATUS_OK
Close 10017 NT_STATUS_OK
Close 10007 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10020 NT_STATUS_OK
Close 10020 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10023 NT_STATUS_OK
WriteX 10023 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10023 258 NT_STATUS_OK
WriteX 10023 0 65536 65536 NT_STATUS_OK
WriteX 10023 65536 17654 17654 NT_STATUS_OK
Close 10023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10024 NT_STATUS_OK
ReadX 10024 0 4096 4096 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
QUERY_FILE_INFORMATION 10024 1004 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
SET_FILE_INFORMATION 10024 1004 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
Close 10024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10025 NT_STATUS_OK
SET_FILE_INFORMATION 10025 1004 NT_STATUS_OK
Close 10025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10026 NT_STATUS_OK
ReadX 10026 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10027 NT_STATUS_OK
Close 10027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10029 NT_STATUS_OK
ReadX 10029 0 4096 4096 NT_STATUS_OK
ReadX 10029 4096 4096 4096 NT_STATUS_OK
ReadX 10029 8192 4096 4096 NT_STATUS_OK
ReadX 10029 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10029 16384 4096 4096 NT_STATUS_OK
ReadX 10029 20480 4096 4096 NT_STATUS_OK
ReadX 10029 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10030 NT_STATUS_OK
ReadX 10030 0 4096 4096 NT_STATUS_OK
Close 10030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10031 NT_STATUS_OK
ReadX 10031 0 4096 4096 NT_STATUS_OK
Close 10031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10032 NT_STATUS_OK
ReadX 10032 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10032 1004 NT_STATUS_OK
WriteX 10032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10033 NT_STATUS_OK
Close 10033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10032 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10035 NT_STATUS_OK
Close 10035 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10038 NT_STATUS_OK
WriteX 10038 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10038 258 NT_STATUS_OK
WriteX 10038 0 65536 65536 NT_STATUS_OK
WriteX 10038 65536 19490 19490 NT_STATUS_OK
Close 10038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10039 NT_STATUS_OK
ReadX 10039 0 4096 4096 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Flush 10039 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Flush 10039 NT_STATUS_OK
QUERY_FILE_INFORMATION 10039 1004 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Flush 10039 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Flush 10039 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Flush 10039 NT_STATUS_OK
SET_FILE_INFORMATION 10039 1004 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Flush 10039 NT_STATUS_OK
Close 10039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10040 NT_STATUS_OK
SET_FILE_INFORMATION 10040 1004 NT_STATUS_OK
Close 10040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10041 NT_STATUS_OK
ReadX 10041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10042 NT_STATUS_OK
Close 10042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10044 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10044 0 4096 4096 NT_STATUS_OK
Close 10044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10045 NT_STATUS_OK
ReadX 10045 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10046 NT_STATUS_OK
ReadX 10046 0 4096 4096 NT_STATUS_OK
ReadX 10046 4096 4096 4096 NT_STATUS_OK
ReadX 10046 8192 4096 4096 NT_STATUS_OK
ReadX 10046 12288 4096 4096 NT_STATUS_OK
ReadX 10046 16384 4096 4096 NT_STATUS_OK
ReadX 10046 20480 4096 4096 NT_STATUS_OK
ReadX 10046 24576 4096 4096 NT_STATUS_OK
ReadX 10046 28672 4096 4096 NT_STATUS_OK
ReadX 10046 32768 4096 4096 NT_STATUS_OK
ReadX 10046 36864 4096 4096 NT_STATUS_OK
ReadX 10046 40960 4096 4096 NT_STATUS_OK
ReadX 10046 45056 4096 4096 NT_STATUS_OK
ReadX 10046 49152 4096 4096 NT_STATUS_OK
ReadX 10046 53248 4096 4096 NT_STATUS_OK
ReadX 10046 57344 4096 4096 NT_STATUS_OK
ReadX 10046 61440 4096 4096 NT_STATUS_OK
ReadX 10046 65536 4096 4096 NT_STATUS_OK
ReadX 10046 69632 4096 4096 NT_STATUS_OK
ReadX 10046 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10046 1004 NT_STATUS_OK
WriteX 10046 0 4096 4096 NT_STATUS_OK
Close 10046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10047 NT_STATUS_OK
SET_FILE_INFORMATION 10047 1004 NT_STATUS_OK
Close 10047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10048 NT_STATUS_OK
ReadX 10048 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10049 NT_STATUS_OK
Close 10049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10041 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 18432 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10052 NT_STATUS_OK
WriteX 10052 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10052 258 NT_STATUS_OK
WriteX 10052 0 65536 65536 NT_STATUS_OK
WriteX 10052 65536 8866 8866 NT_STATUS_OK
Close 10052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10053 NT_STATUS_OK
ReadX 10053 0 4096 4096 NT_STATUS_OK
WriteX 10053 0 4096 4096 NT_STATUS_OK
Flush 10053 NT_STATUS_OK
SET_FILE_INFORMATION 10053 1004 NT_STATUS_OK
WriteX 10053 0 4096 4096 NT_STATUS_OK
Flush 10053 NT_STATUS_OK
Close 10053 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10054 NT_STATUS_OK
ReadX 10054 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10055 NT_STATUS_OK
ReadX 10055 0 4096 4096 NT_STATUS_OK
Close 10055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10056 NT_STATUS_OK
ReadX 10056 0 4096 4096 NT_STATUS_OK
Close 10056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10057 NT_STATUS_OK
ReadX 10057 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10057 1004 NT_STATUS_OK
WriteX 10057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10058 NT_STATUS_OK
Close 10058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10057 NT_STATUS_OK
Close 10048 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10060 NT_STATUS_OK
Close 10060 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10063 NT_STATUS_OK
WriteX 10063 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10063 258 NT_STATUS_OK
WriteX 10063 0 65536 65536 NT_STATUS_OK
WriteX 10063 65536 9298 9298 NT_STATUS_OK
Close 10063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10064 NT_STATUS_OK
ReadX 10064 0 4096 4096 NT_STATUS_OK
WriteX 10064 0 4096 4096 NT_STATUS_OK
Flush 10064 NT_STATUS_OK
SET_FILE_INFORMATION 10064 1004 NT_STATUS_OK
WriteX 10064 0 4096 4096 NT_STATUS_OK
Flush 10064 NT_STATUS_OK
Close 10064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10065 NT_STATUS_OK
SET_FILE_INFORMATION 10065 1004 NT_STATUS_OK
Close 10065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10066 NT_STATUS_OK
ReadX 10066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10067 NT_STATUS_OK
Close 10067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10070 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10070 0 4096 4096 NT_STATUS_OK
Close 10070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10071 NT_STATUS_OK
ReadX 10071 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10071 4096 4096 4096 NT_STATUS_OK
ReadX 10071 8192 4096 4096 NT_STATUS_OK
ReadX 10071 12288 4096 4096 NT_STATUS_OK
ReadX 10071 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10072 NT_STATUS_OK
ReadX 10072 0 4096 4096 NT_STATUS_OK
Close 10072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10073 NT_STATUS_OK
ReadX 10073 0 4096 4096 NT_STATUS_OK
Close 10073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10074 NT_STATUS_OK
ReadX 10074 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10074 1004 NT_STATUS_OK
WriteX 10074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10075 NT_STATUS_OK
Close 10075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10071 NT_STATUS_OK
Close 10074 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10077 NT_STATUS_OK
Close 10077 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10080 NT_STATUS_OK
WriteX 10080 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10080 258 NT_STATUS_OK
WriteX 10080 0 65536 65536 NT_STATUS_OK
WriteX 10080 65536 11540 11540 NT_STATUS_OK
Close 10080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10081 NT_STATUS_OK
ReadX 10081 0 4096 4096 NT_STATUS_OK
WriteX 10081 0 4096 4096 NT_STATUS_OK
Flush 10081 NT_STATUS_OK
SET_FILE_INFORMATION 10081 1004 NT_STATUS_OK
WriteX 10081 0 4096 4096 NT_STATUS_OK
Flush 10081 NT_STATUS_OK
Close 10081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10082 NT_STATUS_OK
SET_FILE_INFORMATION 10082 1004 NT_STATUS_OK
Close 10082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10083 NT_STATUS_OK
ReadX 10083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10084 NT_STATUS_OK
Close 10084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10086 NT_STATUS_OK
ReadX 10086 61440 4096 4096 NT_STATUS_OK
ReadX 10086 126976 4096 4096 NT_STATUS_OK
WriteX 10086 0 65536 65536 NT_STATUS_OK
WriteX 10086 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10087 NT_STATUS_OK
ReadX 10087 61440 4096 4096 NT_STATUS_OK
ReadX 10087 126976 4096 4096 NT_STATUS_OK
ReadX 10087 192512 4096 4096 NT_STATUS_OK
ReadX 10087 258048 4096 4096 NT_STATUS_OK
WriteX 10087 0 65536 65536 NT_STATUS_OK
WriteX 10087 65536 65536 65536 NT_STATUS_OK
WriteX 10087 131072 65536 65536 NT_STATUS_OK
WriteX 10087 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10088 NT_STATUS_OK
ReadX 10088 61440 4096 4096 NT_STATUS_OK
ReadX 10088 126976 4096 4096 NT_STATUS_OK
ReadX 10088 192512 4096 4096 NT_STATUS_OK
ReadX 10088 258048 4096 4096 NT_STATUS_OK
ReadX 10088 323584 4096 4096 NT_STATUS_OK
ReadX 10088 389120 4096 4096 NT_STATUS_OK
ReadX 10088 454656 4096 4096 NT_STATUS_OK
ReadX 10088 520192 4096 4096 NT_STATUS_OK
WriteX 10088 0 65536 65536 NT_STATUS_OK
WriteX 10088 65536 65536 65536 NT_STATUS_OK
WriteX 10088 131072 65536 65536 NT_STATUS_OK
WriteX 10088 196608 65536 65536 NT_STATUS_OK
WriteX 10088 262144 65536 65536 NT_STATUS_OK
WriteX 10088 327680 65536 65536 NT_STATUS_OK
WriteX 10088 393216 65536 65536 NT_STATUS_OK
WriteX 10088 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10089 NT_STATUS_OK
ReadX 10089 0 4096 4096 NT_STATUS_OK
ReadX 10089 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10090 NT_STATUS_OK
WriteX 10090 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10090 258 NT_STATUS_OK
WriteX 10090 0 53 53 NT_STATUS_OK
Close 10090 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10091 NT_STATUS_OK
Close 10091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10083 NT_STATUS_OK
Close 10029 NT_STATUS_OK
Close 10086 NT_STATUS_OK
Close 10087 NT_STATUS_OK
Close 10088 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10089 8192 4096 4096 NT_STATUS_OK
ReadX 10089 12288 4096 4096 NT_STATUS_OK
WriteX 10093 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10093 258 NT_STATUS_OK
ReadX 10089 16384 4096 4096 NT_STATUS_OK
ReadX 10089 20480 4096 4096 NT_STATUS_OK
WriteX 10093 0 15360 15360 NT_STATUS_OK
Close 10093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10094 NT_STATUS_OK
ReadX 10094 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10094 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10094 1004 NT_STATUS_OK
WriteX 10094 0 4096 4096 NT_STATUS_OK
Close 10094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10095 NT_STATUS_OK
Close 10095 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10097 NT_STATUS_OK
ReadX 10097 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10098 NT_STATUS_OK
Close 10098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10097 4096 4096 4096 NT_STATUS_OK
ReadX 10097 8192 4096 4096 NT_STATUS_OK
ReadX 10097 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10100 NT_STATUS_OK
ReadX 10100 0 4096 4096 NT_STATUS_OK
ReadX 10100 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10101 NT_STATUS_OK
ReadX 10101 0 4096 4096 NT_STATUS_OK
ReadX 10101 4096 4096 4096 NT_STATUS_OK
ReadX 10101 8192 4096 4096 NT_STATUS_OK
Close 10100 NT_STATUS_OK
Close 10101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10102 NT_STATUS_OK
WriteX 10102 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10102 258 NT_STATUS_OK
WriteX 10102 0 15360 15360 NT_STATUS_OK
Close 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10103 NT_STATUS_OK
ReadX 10103 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10103 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10103 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10104 NT_STATUS_OK
Close 10104 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10106 NT_STATUS_OK
ReadX 10106 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10107 NT_STATUS_OK
SET_FILE_INFORMATION 10107 1004 NT_STATUS_OK
Close 10107 NT_STATUS_OK
WriteX 10103 0 4096 4096 NT_STATUS_OK
Close 10103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10108 NT_STATUS_OK
Close 10108 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10110 NT_STATUS_OK
ReadX 10110 0 4096 4096 NT_STATUS_OK
ReadX 10110 4096 4096 4096 NT_STATUS_OK
ReadX 10110 8192 4096 4096 NT_STATUS_OK
ReadX 10110 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10110 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10110 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10111 NT_STATUS_OK
ReadX 10111 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10112 NT_STATUS_OK
WriteX 10112 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10112 258 NT_STATUS_OK
WriteX 10112 0 53 53 NT_STATUS_OK
Close 10112 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10113 NT_STATUS_OK
Close 10113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10111 4096 4096 4096 NT_STATUS_OK
ReadX 10111 8192 4096 4096 NT_STATUS_OK
ReadX 10111 12288 4096 4096 NT_STATUS_OK
WriteX 10115 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10115 258 NT_STATUS_OK
WriteX 10115 0 12006 12006 NT_STATUS_OK
Close 10115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10116 NT_STATUS_OK
ReadX 10116 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10116 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10116 1004 NT_STATUS_OK
WriteX 10116 0 4096 4096 NT_STATUS_OK
Close 10116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10117 NT_STATUS_OK
Close 10117 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10119 NT_STATUS_OK
ReadX 10119 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10120 NT_STATUS_OK
Close 10120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10119 4096 4096 4096 NT_STATUS_OK
ReadX 10119 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10122 NT_STATUS_OK
WriteX 10122 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10122 258 NT_STATUS_OK
WriteX 10122 0 11991 11991 NT_STATUS_OK
Close 10122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10123 NT_STATUS_OK
ReadX 10123 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10123 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10123 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10124 NT_STATUS_OK
Close 10124 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10126 NT_STATUS_OK
ReadX 10126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10127 NT_STATUS_OK
SET_FILE_INFORMATION 10127 1004 NT_STATUS_OK
Close 10127 NT_STATUS_OK
WriteX 10123 0 4096 4096 NT_STATUS_OK
Close 10123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10128 NT_STATUS_OK
Close 10128 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10130 NT_STATUS_OK
ReadX 10130 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10131 NT_STATUS_OK
Close 10131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10130 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10130 1004 NT_STATUS_OK
ReadX 10130 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10130 1004 NT_STATUS_OK
WriteX 10130 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10130 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10130 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10130 1004 NT_STATUS_OK
Close 10106 NT_STATUS_OK
WriteX 10110 0 19054 19054 NT_STATUS_OK
WriteX 10130 0 12288 12288 NT_STATUS_OK
Close 10126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10133 NT_STATUS_OK
Close 10133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10110 NT_STATUS_OK
Close 10130 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10135 NT_STATUS_OK
Close 10135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10137 NT_STATUS_OK
ReadX 10137 0 61440 61440 NT_STATUS_OK
ReadX 10137 61440 4096 4096 NT_STATUS_OK
ReadX 10137 65536 61440 61440 NT_STATUS_OK
ReadX 10137 126976 4096 4096 NT_STATUS_OK
ReadX 10137 131072 61440 61440 NT_STATUS_OK
ReadX 10137 192512 4096 4096 NT_STATUS_OK
ReadX 10137 196608 61440 61440 NT_STATUS_OK
ReadX 10137 258048 4096 4096 NT_STATUS_OK
ReadX 10137 262144 61440 61440 NT_STATUS_OK
ReadX 10137 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10138 NT_STATUS_OK
ReadX 10138 0 61440 61440 NT_STATUS_OK
ReadX 10138 61440 4096 4096 NT_STATUS_OK
ReadX 10138 65536 61440 61440 NT_STATUS_OK
ReadX 10138 126976 4096 4096 NT_STATUS_OK
ReadX 10138 131072 61440 61440 NT_STATUS_OK
ReadX 10138 192512 4096 4096 NT_STATUS_OK
ReadX 10138 196608 61440 61440 NT_STATUS_OK
ReadX 10138 258048 4096 4096 NT_STATUS_OK
ReadX 10138 262144 61440 61440 NT_STATUS_OK
ReadX 10138 323584 4096 4096 NT_STATUS_OK
ReadX 10138 327680 61440 61440 NT_STATUS_OK
ReadX 10138 389120 4096 4096 NT_STATUS_OK
ReadX 10138 393216 61440 61440 NT_STATUS_OK
ReadX 10138 454656 4096 4096 NT_STATUS_OK
ReadX 10138 458752 61440 61440 NT_STATUS_OK
ReadX 10138 520192 4096 4096 NT_STATUS_OK
ReadX 10138 524288 61440 61440 NT_STATUS_OK
ReadX 10138 585728 4096 4096 NT_STATUS_OK
ReadX 10138 589824 61440 61440 NT_STATUS_OK
ReadX 10138 651264 4096 4096 NT_STATUS_OK
ReadX 10138 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10139 NT_STATUS_OK
ReadX 10139 0 61440 61440 NT_STATUS_OK
ReadX 10139 61440 4096 4096 NT_STATUS_OK
ReadX 10139 65536 61440 61440 NT_STATUS_OK
ReadX 10139 126976 4096 4096 NT_STATUS_OK
ReadX 10139 131072 61440 61440 NT_STATUS_OK
ReadX 10139 192512 4096 4096 NT_STATUS_OK
ReadX 10139 196608 61440 61440 NT_STATUS_OK
ReadX 10139 258048 4096 4096 NT_STATUS_OK
ReadX 10139 262144 61440 61440 NT_STATUS_OK
ReadX 10139 323584 4096 4096 NT_STATUS_OK
ReadX 10139 327680 61440 61440 NT_STATUS_OK
ReadX 10139 389120 4096 4096 NT_STATUS_OK
ReadX 10139 393216 61440 61440 NT_STATUS_OK
ReadX 10139 454656 4096 4096 NT_STATUS_OK
ReadX 10139 458752 61440 61440 NT_STATUS_OK
ReadX 10139 520192 4096 4096 NT_STATUS_OK
ReadX 10139 524288 61440 61440 NT_STATUS_OK
ReadX 10139 585728 4096 4096 NT_STATUS_OK
ReadX 10139 589824 61440 61440 NT_STATUS_OK
ReadX 10139 651264 4096 4096 NT_STATUS_OK
ReadX 10139 655360 61440 61440 NT_STATUS_OK
ReadX 10139 716800 4096 4096 NT_STATUS_OK
ReadX 10139 720896 61440 61440 NT_STATUS_OK
ReadX 10139 782336 4096 4096 NT_STATUS_OK
ReadX 10139 786432 61440 61440 NT_STATUS_OK
ReadX 10139 847872 4096 4096 NT_STATUS_OK
ReadX 10139 851968 61440 61440 NT_STATUS_OK
ReadX 10139 913408 4096 4096 NT_STATUS_OK
ReadX 10139 917504 61440 61440 NT_STATUS_OK
ReadX 10139 978944 4096 4096 NT_STATUS_OK
ReadX 10139 983040 61440 61440 NT_STATUS_OK
ReadX 10139 1044480 4096 4096 NT_STATUS_OK
ReadX 10139 1048576 61440 61440 NT_STATUS_OK
ReadX 10139 1110016 4096 4096 NT_STATUS_OK
ReadX 10139 1114112 61440 61440 NT_STATUS_OK
ReadX 10139 1175552 4096 4096 NT_STATUS_OK
ReadX 10139 1179648 61440 61440 NT_STATUS_OK
ReadX 10139 1241088 4096 4096 NT_STATUS_OK
ReadX 10139 1245184 61440 61440 NT_STATUS_OK
ReadX 10139 1306624 4096 4096 NT_STATUS_OK
ReadX 10139 1310720 61440 61440 NT_STATUS_OK
ReadX 10139 1372160 4096 4096 NT_STATUS_OK
ReadX 10139 1376256 61440 61440 NT_STATUS_OK
ReadX 10139 1437696 4096 4096 NT_STATUS_OK
ReadX 10139 1441792 61440 61440 NT_STATUS_OK
ReadX 10139 1503232 4096 4096 NT_STATUS_OK
ReadX 10139 1507328 61440 61440 NT_STATUS_OK
ReadX 10139 1568768 4096 4096 NT_STATUS_OK
ReadX 10139 1572864 61440 61440 NT_STATUS_OK
ReadX 10139 1634304 4096 4096 NT_STATUS_OK
ReadX 10139 1638400 61440 61440 NT_STATUS_OK
ReadX 10139 1699840 4096 4096 NT_STATUS_OK
ReadX 10139 1703936 61440 61440 NT_STATUS_OK
ReadX 10139 1765376 4096 4096 NT_STATUS_OK
ReadX 10139 1769472 61440 61440 NT_STATUS_OK
ReadX 10139 1830912 4096 4096 NT_STATUS_OK
ReadX 10139 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10140 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10141 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10142 NT_STATUS_OK
ReadX 10142 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10143 NT_STATUS_OK
ReadX 10143 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10144 NT_STATUS_OK
ReadX 10144 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10145 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10146 NT_STATUS_OK
QUERY_FILE_INFORMATION 10146 1004 NT_STATUS_OK
WriteX 10146 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10146 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10147 NT_STATUS_OK
Close 10147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10148 NT_STATUS_OK
WriteX 10148 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10148 258 NT_STATUS_OK
WriteX 10148 0 491 491 NT_STATUS_OK
Close 10148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10149 NT_STATUS_OK
ReadX 10149 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10146 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10151 NT_STATUS_OK
Close 10151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10152 NT_STATUS_OK
WriteX 10152 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10152 258 NT_STATUS_OK
WriteX 10152 0 543 543 NT_STATUS_OK
Close 10152 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10153 NT_STATUS_OK
ReadX 10153 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10137 NT_STATUS_OK
Close 10138 NT_STATUS_OK
Close 10139 NT_STATUS_OK
Close 10153 NT_STATUS_OK
Close 10141 NT_STATUS_OK
Close 10142 NT_STATUS_OK
Close 10143 NT_STATUS_OK
Close 10144 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10156 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10158 NT_STATUS_OK
ReadX 10158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10159 NT_STATUS_OK
ReadX 10159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10160 NT_STATUS_OK
ReadX 10160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10161 NT_STATUS_OK
ReadX 10161 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10165 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10166 NT_STATUS_OK
QUERY_FILE_INFORMATION 10166 1004 NT_STATUS_OK
WriteX 10166 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10166 258 NT_STATUS_OK
WriteX 10166 0 2048 2048 NT_STATUS_OK
Close 10166 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10167 NT_STATUS_OK
ReadX 10167 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10167 0 4096 4096 NT_STATUS_OK
Flush 10167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10167 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 29816 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10171 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10172 NT_STATUS_OK
WriteX 10172 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10172 258 NT_STATUS_OK
WriteX 10172 0 2048 2048 NT_STATUS_OK
Close 10172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10173 NT_STATUS_OK
ReadX 10173 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10177 NT_STATUS_OK
Close 10177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10178 NT_STATUS_OK
WriteX 10178 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10178 258 NT_STATUS_OK
WriteX 10178 0 2048 2048 NT_STATUS_OK
Close 10178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10179 NT_STATUS_OK
ReadX 10179 0 2048 2048 NT_STATUS_OK
ReadX 10157 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10161 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10173 0 4096 4096 NT_STATUS_OK
WriteX 10157 0 8192 8192 NT_STATUS_OK
WriteX 10158 0 4096 4096 NT_STATUS_OK
WriteX 10159 0 4096 4096 NT_STATUS_OK
ReadX 10173 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10182 NT_STATUS_OK
ReadX 10182 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10183 NT_STATUS_OK
QUERY_FILE_INFORMATION 10183 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10182 NT_STATUS_OK
Close 10158 NT_STATUS_OK
Close 10159 NT_STATUS_OK
Close 10160 NT_STATUS_OK
Close 10173 NT_STATUS_OK
Close 10157 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10185 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10186 NT_STATUS_OK
ReadX 10186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10187 NT_STATUS_OK
ReadX 10187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10188 NT_STATUS_OK
ReadX 10188 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10189 NT_STATUS_OK
ReadX 10189 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10190 NT_STATUS_OK
ReadX 10190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10191 NT_STATUS_OK
ReadX 10191 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10192 NT_STATUS_OK
ReadX 10192 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10193 NT_STATUS_OK
ReadX 10193 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10194 NT_STATUS_OK
ReadX 10194 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10195 NT_STATUS_OK
ReadX 10195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10196 NT_STATUS_OK
ReadX 10196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10197 NT_STATUS_OK
ReadX 10197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10198 NT_STATUS_OK
ReadX 10198 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10202 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10202 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10203 NT_STATUS_OK
QUERY_FILE_INFORMATION 10203 1004 NT_STATUS_OK
WriteX 10203 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10203 258 NT_STATUS_OK
WriteX 10203 0 2048 2048 NT_STATUS_OK
Close 10203 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10204 NT_STATUS_OK
ReadX 10204 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10205 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10206 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10206 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10210 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10211 NT_STATUS_OK
QUERY_FILE_INFORMATION 10211 1004 NT_STATUS_OK
WriteX 10211 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10211 258 NT_STATUS_OK
WriteX 10211 0 2048 2048 NT_STATUS_OK
Close 10211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10212 NT_STATUS_OK
ReadX 10212 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10204 0 4096 4096 NT_STATUS_OK
Flush 10204 NT_STATUS_OK
WriteX 10212 0 4096 4096 NT_STATUS_OK
Flush 10212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10204 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10212 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10206 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10213 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10214 NT_STATUS_OK
WriteX 10214 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10214 258 NT_STATUS_OK
WriteX 10214 0 4096 4096 NT_STATUS_OK
Close 10214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10215 NT_STATUS_OK
ReadX 10215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10216 NT_STATUS_OK
Close 10216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10217 NT_STATUS_OK
WriteX 10217 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10217 258 NT_STATUS_OK
WriteX 10217 0 4096 4096 NT_STATUS_OK
Close 10217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10218 NT_STATUS_OK
ReadX 10218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10218 0 4096 4096 NT_STATUS_OK
Close 10215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10198 NT_STATUS_OK
Close 10192 NT_STATUS_OK
Close 10206 NT_STATUS_OK
Close 10195 NT_STATUS_OK
Close 10196 NT_STATUS_OK
Close 10197 NT_STATUS_OK
Close 10193 NT_STATUS_OK
Close 10186 NT_STATUS_OK
Close 10187 NT_STATUS_OK
Close 10190 NT_STATUS_OK
Close 10191 NT_STATUS_OK
Close 10188 NT_STATUS_OK
Close 10189 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10221 NT_STATUS_OK
Close 10221 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10223 NT_STATUS_OK
ReadX 10223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10224 NT_STATUS_OK
Close 10224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10225 NT_STATUS_OK
WriteX 10225 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10225 258 NT_STATUS_OK
WriteX 10225 0 2048 2048 NT_STATUS_OK
Close 10225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10226 NT_STATUS_OK
ReadX 10226 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10227 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10228 NT_STATUS_OK
ReadX 10228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10229 NT_STATUS_OK
ReadX 10229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10230 NT_STATUS_OK
ReadX 10230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10232 NT_STATUS_OK
ReadX 10232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10234 NT_STATUS_OK
ReadX 10234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10235 NT_STATUS_OK
ReadX 10235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10236 NT_STATUS_OK
ReadX 10236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10237 NT_STATUS_OK
ReadX 10237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10238 NT_STATUS_OK
ReadX 10238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10239 NT_STATUS_OK
ReadX 10239 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10240 NT_STATUS_OK
QUERY_FILE_INFORMATION 10240 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10223 NT_STATUS_OK
Close 10226 NT_STATUS_OK
Close 10238 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Close 10234 NT_STATUS_OK
Close 10235 NT_STATUS_OK
Close 10236 NT_STATUS_OK
Close 10237 NT_STATUS_OK
Close 10239 NT_STATUS_OK
Close 10227 NT_STATUS_OK
Close 10228 NT_STATUS_OK
Close 10231 NT_STATUS_OK
Close 10232 NT_STATUS_OK
Close 10229 NT_STATUS_OK
Close 10230 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10242 NT_STATUS_OK
QUERY_FILE_INFORMATION 10242 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10242 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10244 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10245 NT_STATUS_OK
ReadX 10245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10246 NT_STATUS_OK
ReadX 10246 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10247 NT_STATUS_OK
ReadX 10247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10248 NT_STATUS_OK
ReadX 10248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10249 NT_STATUS_OK
ReadX 10249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10250 NT_STATUS_OK
ReadX 10250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10251 NT_STATUS_OK
ReadX 10251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10252 NT_STATUS_OK
ReadX 10252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10253 NT_STATUS_OK
ReadX 10253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10254 NT_STATUS_OK
ReadX 10254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10255 NT_STATUS_OK
ReadX 10255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10256 NT_STATUS_OK
ReadX 10256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10257 NT_STATUS_OK
ReadX 10257 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10261 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10262 NT_STATUS_OK
QUERY_FILE_INFORMATION 10262 1004 NT_STATUS_OK
WriteX 10262 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10262 258 NT_STATUS_OK
WriteX 10262 0 2048 2048 NT_STATUS_OK
Close 10262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10263 NT_STATUS_OK
ReadX 10263 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10264 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10265 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10266 NT_STATUS_OK
ReadX 10266 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10267 NT_STATUS_OK
ReadX 10267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10268 NT_STATUS_OK
ReadX 10268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10269 NT_STATUS_OK
ReadX 10269 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10273 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10274 NT_STATUS_OK
QUERY_FILE_INFORMATION 10274 1004 NT_STATUS_OK
WriteX 10274 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10274 258 NT_STATUS_OK
WriteX 10274 0 2048 2048 NT_STATUS_OK
Close 10274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10275 NT_STATUS_OK
ReadX 10275 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10276 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10277 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10277 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10281 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10282 NT_STATUS_OK
QUERY_FILE_INFORMATION 10282 1004 NT_STATUS_OK
WriteX 10282 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10282 258 NT_STATUS_OK
WriteX 10282 0 2048 2048 NT_STATUS_OK
Close 10282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10283 NT_STATUS_OK
ReadX 10283 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10263 0 4096 4096 NT_STATUS_OK
Flush 10263 NT_STATUS_OK
WriteX 10275 0 4096 4096 NT_STATUS_OK
Flush 10275 NT_STATUS_OK
WriteX 10283 0 4096 4096 NT_STATUS_OK
Flush 10283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10263 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10275 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10283 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10265 4096 16384 16384 NT_STATUS_OK
ReadX 10245 4096 16384 16384 NT_STATUS_OK
ReadX 10277 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10284 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10285 NT_STATUS_OK
ReadX 10285 0 2048 2048 NT_STATUS_OK
WriteX 10285 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10286 NT_STATUS_OK
QUERY_FILE_INFORMATION 10286 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10285 NT_STATUS_OK
Close 10269 NT_STATUS_OK
Close 10257 NT_STATUS_OK
Close 10249 NT_STATUS_OK
Close 10265 NT_STATUS_OK
Close 10266 NT_STATUS_OK
Close 10267 NT_STATUS_OK
Close 10268 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10277 NT_STATUS_OK
Close 10251 NT_STATUS_OK
Close 10254 NT_STATUS_OK
Close 10255 NT_STATUS_OK
Close 10252 NT_STATUS_OK
Close 10253 NT_STATUS_OK
Close 10245 NT_STATUS_OK
Close 10246 NT_STATUS_OK
Close 10247 NT_STATUS_OK
Close 10248 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10288 NT_STATUS_OK
QUERY_FILE_INFORMATION 10288 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10290 NT_STATUS_OK
QUERY_FILE_INFORMATION 10290 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10292 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10293 NT_STATUS_OK
ReadX 10293 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10294 NT_STATUS_OK
ReadX 10294 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10295 NT_STATUS_OK
ReadX 10295 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10296 NT_STATUS_OK
ReadX 10296 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10297 NT_STATUS_OK
ReadX 10297 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10293 4096 16384 16384 NT_STATUS_OK
WriteX 10293 0 4096 4096 NT_STATUS_OK
WriteX 10294 0 4096 4096 NT_STATUS_OK
WriteX 10295 0 4096 4096 NT_STATUS_OK
WriteX 10296 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10298 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10299 NT_STATUS_OK
ReadX 10299 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10300 NT_STATUS_OK
ReadX 10300 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10301 NT_STATUS_OK
ReadX 10301 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10302 NT_STATUS_OK
ReadX 10302 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10303 NT_STATUS_OK
ReadX 10303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10304 NT_STATUS_OK
ReadX 10304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10305 NT_STATUS_OK
ReadX 10305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10306 NT_STATUS_OK
ReadX 10306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10307 NT_STATUS_OK
ReadX 10307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10308 NT_STATUS_OK
ReadX 10308 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10309 NT_STATUS_OK
ReadX 10309 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10310 NT_STATUS_OK
ReadX 10310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10311 NT_STATUS_OK
ReadX 10311 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10312 NT_STATUS_OK
ReadX 10312 0 8192 8192 NT_STATUS_OK
ReadX 10299 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10313 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10313 0 4096 4096 NT_STATUS_OK
ReadX 10313 4096 4096 4096 NT_STATUS_OK
ReadX 10313 8192 4096 4096 NT_STATUS_OK
WriteX 10299 0 4096 4096 NT_STATUS_OK
WriteX 10300 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10314 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10314 0 4096 4096 NT_STATUS_OK
ReadX 10314 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10293 0 4096 4096 NT_STATUS_OK
WriteX 10294 0 4096 4096 NT_STATUS_OK
WriteX 10295 0 4096 4096 NT_STATUS_OK
WriteX 10296 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12660 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12660 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12660 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10318 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10319 NT_STATUS_OK
QUERY_FILE_INFORMATION 10319 1004 NT_STATUS_OK
WriteX 10319 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10319 258 NT_STATUS_OK
WriteX 10319 0 2048 2048 NT_STATUS_OK
Close 10319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10320 NT_STATUS_OK
ReadX 10320 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10320 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10320 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10321 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10322 NT_STATUS_OK
ReadX 10322 0 4096 4096 NT_STATUS_OK
ReadX 10322 4096 4096 4096 NT_STATUS_OK
WriteX 10322 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10320 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10322 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10323 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10324 NT_STATUS_OK
ReadX 10324 0 4096 4096 NT_STATUS_OK
ReadX 10324 4096 4096 4096 NT_STATUS_OK
WriteX 10324 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10325 NT_STATUS_OK
QUERY_FILE_INFORMATION 10325 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10312 NT_STATUS_OK
Close 10297 NT_STATUS_OK
Close 10293 NT_STATUS_OK
Close 10294 NT_STATUS_OK
Close 10295 NT_STATUS_OK
Close 10296 NT_STATUS_OK
Close 10305 NT_STATUS_OK
Close 10310 NT_STATUS_OK
Close 10306 NT_STATUS_OK
Close 10307 NT_STATUS_OK
Close 10308 NT_STATUS_OK
Close 10309 NT_STATUS_OK
Close 10311 NT_STATUS_OK
Close 10299 NT_STATUS_OK
Close 10300 NT_STATUS_OK
Close 10303 NT_STATUS_OK
Close 10304 NT_STATUS_OK
Close 10301 NT_STATUS_OK
Close 10302 NT_STATUS_OK
Close 10324 NT_STATUS_OK
Close 10313 NT_STATUS_OK
Close 10314 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10327 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10327 0 4096 4096 NT_STATUS_OK
ReadX 10327 4096 4096 4096 NT_STATUS_OK
ReadX 10327 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10328 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10329 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10330 NT_STATUS_OK
ReadX 10330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10331 NT_STATUS_OK
ReadX 10331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10332 NT_STATUS_OK
ReadX 10332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10333 NT_STATUS_OK
ReadX 10333 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10334 NT_STATUS_OK
ReadX 10334 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10335 NT_STATUS_OK
ReadX 10335 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10336 NT_STATUS_OK
ReadX 10336 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10337 NT_STATUS_OK
ReadX 10337 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10338 NT_STATUS_OK
ReadX 10338 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10339 NT_STATUS_OK
ReadX 10339 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10340 NT_STATUS_OK
ReadX 10340 0 4096 4096 NT_STATUS_OK
ReadX 10328 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10345 NT_STATUS_OK
QUERY_FILE_INFORMATION 10345 1004 NT_STATUS_OK
WriteX 10345 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10345 258 NT_STATUS_OK
WriteX 10345 0 2048 2048 NT_STATUS_OK
Close 10345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10346 NT_STATUS_OK
ReadX 10346 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10346 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10350 NT_STATUS_OK
Close 10350 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10351 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 1004 NT_STATUS_OK
WriteX 10351 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 258 NT_STATUS_OK
WriteX 10351 0 2048 2048 NT_STATUS_OK
Close 10351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10352 NT_STATUS_OK
ReadX 10352 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10352 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10335 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10346 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10353 NT_STATUS_OK
QUERY_FILE_INFORMATION 10353 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10339 NT_STATUS_OK
Close 10334 NT_STATUS_OK
Close 10340 NT_STATUS_OK
Close 10328 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Close 10332 NT_STATUS_OK
Close 10333 NT_STATUS_OK
Close 10330 NT_STATUS_OK
Close 10331 NT_STATUS_OK
Close 10335 NT_STATUS_OK
Close 10336 NT_STATUS_OK
Close 10337 NT_STATUS_OK
Close 10338 NT_STATUS_OK
Close 10327 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10355 NT_STATUS_OK
QUERY_FILE_INFORMATION 10355 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10355 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10357 NT_STATUS_OK
ReadX 10357 61440 4096 4096 NT_STATUS_OK
ReadX 10357 126976 4096 4096 NT_STATUS_OK
WriteX 10357 0 65536 65536 NT_STATUS_OK
WriteX 10357 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10358 NT_STATUS_OK
ReadX 10358 61440 4096 4096 NT_STATUS_OK
ReadX 10358 126976 4096 4096 NT_STATUS_OK
ReadX 10358 192512 4096 4096 NT_STATUS_OK
ReadX 10358 258048 4096 4096 NT_STATUS_OK
WriteX 10358 0 65536 65536 NT_STATUS_OK
WriteX 10358 65536 65536 65536 NT_STATUS_OK
WriteX 10358 131072 65536 65536 NT_STATUS_OK
WriteX 10358 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10359 NT_STATUS_OK
ReadX 10359 61440 4096 4096 NT_STATUS_OK
ReadX 10359 126976 4096 4096 NT_STATUS_OK
ReadX 10359 192512 4096 4096 NT_STATUS_OK
ReadX 10359 258048 4096 4096 NT_STATUS_OK
ReadX 10359 323584 4096 4096 NT_STATUS_OK
ReadX 10359 389120 4096 4096 NT_STATUS_OK
ReadX 10359 454656 4096 4096 NT_STATUS_OK
ReadX 10359 520192 4096 4096 NT_STATUS_OK
WriteX 10359 0 65536 65536 NT_STATUS_OK
WriteX 10359 65536 65536 65536 NT_STATUS_OK
WriteX 10359 131072 65536 65536 NT_STATUS_OK
WriteX 10359 196608 65536 65536 NT_STATUS_OK
WriteX 10359 262144 65536 65536 NT_STATUS_OK
WriteX 10359 327680 65536 65536 NT_STATUS_OK
WriteX 10359 393216 65536 65536 NT_STATUS_OK
WriteX 10359 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10360 NT_STATUS_OK
ReadX 10360 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10360 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10360 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10360 8192 4096 4096 NT_STATUS_OK
ReadX 10360 12288 4096 4096 NT_STATUS_OK
ReadX 10360 16384 4096 4096 NT_STATUS_OK
ReadX 10360 20480 4096 4096 NT_STATUS_OK
ReadX 10360 24576 4096 4096 NT_STATUS_OK
ReadX 10360 28672 4096 4096 NT_STATUS_OK
ReadX 10360 32768 4096 4096 NT_STATUS_OK
ReadX 10360 36864 4096 4096 NT_STATUS_OK
ReadX 10360 40960 4096 4096 NT_STATUS_OK
ReadX 10360 45056 4096 4096 NT_STATUS_OK
ReadX 10360 49152 4096 4096 NT_STATUS_OK
ReadX 10360 53248 4096 4096 NT_STATUS_OK
ReadX 10360 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10360 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10361 NT_STATUS_OK
Close 10361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10357 NT_STATUS_OK
Close 10358 NT_STATUS_OK
Close 10359 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10363 NT_STATUS_OK
WriteX 10363 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10363 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10363 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10363 1004 NT_STATUS_OK
WriteX 10363 0 57088 57088 NT_STATUS_OK
WriteX 10363 0 4096 4096 NT_STATUS_OK
Flush 10363 NT_STATUS_OK
Close 10360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10364 NT_STATUS_OK
SET_FILE_INFORMATION 10364 1004 NT_STATUS_OK
Close 10364 NT_STATUS_OK
SET_FILE_INFORMATION 10363 1004 NT_STATUS_OK
WriteX 10363 0 4096 4096 NT_STATUS_OK
Close 10363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10365 NT_STATUS_OK
Close 10365 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10367 NT_STATUS_OK
ReadX 10367 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10367 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10368 NT_STATUS_OK
WriteX 10368 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10368 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10368 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10368 1004 NT_STATUS_OK
WriteX 10368 0 51456 51456 NT_STATUS_OK
WriteX 10368 0 4096 4096 NT_STATUS_OK
Flush 10368 NT_STATUS_OK
SET_FILE_INFORMATION 10368 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10368 1004 NT_STATUS_OK
WriteX 10368 0 4096 4096 NT_STATUS_OK
Close 10368 NT_STATUS_OK
Close 10367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10370 NT_STATUS_OK
Close 10370 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10372 NT_STATUS_OK
ReadX 10372 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10372 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 69 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10374 NT_STATUS_OK
Close 10374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10377 NT_STATUS_OK
WriteX 10377 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10377 258 NT_STATUS_OK
WriteX 10377 0 53077 53077 NT_STATUS_OK
Close 10377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10378 NT_STATUS_OK
WriteX 10378 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10378 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10378 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10378 1004 NT_STATUS_OK
WriteX 10378 0 65536 65536 NT_STATUS_OK
WriteX 10378 65536 1856 1856 NT_STATUS_OK
WriteX 10378 0 4096 4096 NT_STATUS_OK
Flush 10378 NT_STATUS_OK
SET_FILE_INFORMATION 10378 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10378 1004 NT_STATUS_OK
WriteX 10378 0 4096 4096 NT_STATUS_OK
Close 10378 NT_STATUS_OK
Close 10372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10380 NT_STATUS_OK
Close 10380 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10382 NT_STATUS_OK
ReadX 10382 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 69 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10384 NT_STATUS_OK
Close 10384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10387 NT_STATUS_OK
WriteX 10387 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10387 258 NT_STATUS_OK
WriteX 10387 0 7983 7983 NT_STATUS_OK
Close 10387 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 69 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10389 NT_STATUS_OK
Close 10389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10392 NT_STATUS_OK
WriteX 10392 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10392 258 NT_STATUS_OK
WriteX 10392 0 65536 65536 NT_STATUS_OK
WriteX 10392 65536 65536 65536 NT_STATUS_OK
WriteX 10392 131072 65536 65536 NT_STATUS_OK
WriteX 10392 196608 65536 65536 NT_STATUS_OK
WriteX 10392 262144 65536 65536 NT_STATUS_OK
WriteX 10392 327680 65536 65536 NT_STATUS_OK
WriteX 10392 393216 65536 65536 NT_STATUS_OK
WriteX 10392 458752 46731 46731 NT_STATUS_OK
Close 10392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10393 NT_STATUS_OK
WriteX 10393 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10393 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10382 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10393 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10393 1004 NT_STATUS_OK
WriteX 10393 0 65536 65536 NT_STATUS_OK
WriteX 10393 65536 22848 22848 NT_STATUS_OK
WriteX 10393 0 4096 4096 NT_STATUS_OK
Flush 10393 NT_STATUS_OK
SET_FILE_INFORMATION 10393 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10393 1004 NT_STATUS_OK
WriteX 10393 0 4096 4096 NT_STATUS_OK
Close 10393 NT_STATUS_OK
Close 10382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10395 NT_STATUS_OK
Close 10395 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10397 NT_STATUS_OK
ReadX 10397 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10397 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10398 NT_STATUS_OK
ReadX 10398 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10398 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10398 1004 NT_STATUS_OK
ReadX 10398 8192 4096 4096 NT_STATUS_OK
ReadX 10398 12288 4096 4096 NT_STATUS_OK
ReadX 10398 16384 4096 4096 NT_STATUS_OK
ReadX 10398 20480 4096 4096 NT_STATUS_OK
ReadX 10398 24576 4096 4096 NT_STATUS_OK
ReadX 10398 28672 4096 4096 NT_STATUS_OK
ReadX 10398 32768 4096 4096 NT_STATUS_OK
ReadX 10398 36864 4096 4096 NT_STATUS_OK
ReadX 10398 40960 4096 4096 NT_STATUS_OK
ReadX 10398 45056 4096 4096 NT_STATUS_OK
ReadX 10398 49152 4096 4096 NT_STATUS_OK
ReadX 10398 53248 4096 4096 NT_STATUS_OK
ReadX 10398 57344 4096 4096 NT_STATUS_OK
ReadX 10398 61440 4096 4096 NT_STATUS_OK
ReadX 10398 65536 4096 4096 NT_STATUS_OK
ReadX 10398 69632 4096 4096 NT_STATUS_OK
ReadX 10398 73728 4096 4096 NT_STATUS_OK
ReadX 10398 77824 4096 4096 NT_STATUS_OK
ReadX 10398 81920 4096 4096 NT_STATUS_OK
ReadX 10398 86016 4096 4096 NT_STATUS_OK
ReadX 10398 90112 4096 4096 NT_STATUS_OK
ReadX 10398 94208 4096 4096 NT_STATUS_OK
ReadX 10398 98304 4096 4096 NT_STATUS_OK
ReadX 10398 102400 4096 4096 NT_STATUS_OK
ReadX 10398 106496 4096 4096 NT_STATUS_OK
ReadX 10398 110592 4096 4096 NT_STATUS_OK
ReadX 10398 114688 4096 4096 NT_STATUS_OK
ReadX 10398 118784 4096 4096 NT_STATUS_OK
ReadX 10398 122880 4096 4096 NT_STATUS_OK
ReadX 10398 126976 4096 4096 NT_STATUS_OK
ReadX 10398 131072 4096 4096 NT_STATUS_OK
ReadX 10398 135168 4096 4096 NT_STATUS_OK
ReadX 10398 139264 4096 4096 NT_STATUS_OK
ReadX 10398 143360 4096 4096 NT_STATUS_OK
ReadX 10398 147456 4096 4096 NT_STATUS_OK
ReadX 10398 151552 4096 4096 NT_STATUS_OK
ReadX 10398 155648 4096 4096 NT_STATUS_OK
ReadX 10398 159744 4096 4096 NT_STATUS_OK
ReadX 10398 163840 4096 4096 NT_STATUS_OK
ReadX 10398 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10398 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10399 NT_STATUS_OK
Close 10399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10397 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10401 NT_STATUS_OK
WriteX 10401 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10401 258 NT_STATUS_OK
Close 10398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10402 NT_STATUS_OK
SET_FILE_INFORMATION 10402 1004 NT_STATUS_OK
Close 10402 NT_STATUS_OK
WriteX 10401 0 42388 42388 NT_STATUS_OK
Close 10401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10403 NT_STATUS_OK
Close 10403 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10405 NT_STATUS_OK
ReadX 10405 0 4096 4096 NT_STATUS_OK
ReadX 10405 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10406 NT_STATUS_OK
WriteX 10406 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10406 258 NT_STATUS_OK
SET_FILE_INFORMATION 10406 1004 NT_STATUS_OK
WriteX 10406 0 42652 42652 NT_STATUS_OK
Close 10406 NT_STATUS_OK
Close 10405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10408 NT_STATUS_OK
Close 10408 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10410 NT_STATUS_OK
ReadX 10410 0 4096 4096 NT_STATUS_OK
ReadX 10410 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 69 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10412 NT_STATUS_OK
Close 10412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10415 NT_STATUS_OK
WriteX 10415 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10415 258 NT_STATUS_OK
WriteX 10415 0 65536 65536 NT_STATUS_OK
WriteX 10415 65536 49 49 NT_STATUS_OK
Close 10415 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 61440 61440 NT_STATUS_OK
ReadX 10416 61440 4096 4096 NT_STATUS_OK
ReadX 10416 65536 61440 61440 NT_STATUS_OK
ReadX 10416 126976 4096 4096 NT_STATUS_OK
ReadX 10416 131072 61440 61440 NT_STATUS_OK
ReadX 10416 192512 4096 4096 NT_STATUS_OK
ReadX 10416 196608 61440 61440 NT_STATUS_OK
ReadX 10416 258048 4096 4096 NT_STATUS_OK
ReadX 10416 262144 61440 61440 NT_STATUS_OK
ReadX 10416 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10417 NT_STATUS_OK
ReadX 10417 0 61440 61440 NT_STATUS_OK
ReadX 10417 61440 4096 4096 NT_STATUS_OK
ReadX 10417 65536 61440 61440 NT_STATUS_OK
ReadX 10417 126976 4096 4096 NT_STATUS_OK
ReadX 10417 131072 61440 61440 NT_STATUS_OK
ReadX 10417 192512 4096 4096 NT_STATUS_OK
ReadX 10417 196608 61440 61440 NT_STATUS_OK
ReadX 10417 258048 4096 4096 NT_STATUS_OK
ReadX 10417 262144 61440 61440 NT_STATUS_OK
ReadX 10417 323584 4096 4096 NT_STATUS_OK
ReadX 10417 327680 61440 61440 NT_STATUS_OK
ReadX 10417 389120 4096 4096 NT_STATUS_OK
ReadX 10417 393216 61440 61440 NT_STATUS_OK
ReadX 10417 454656 4096 4096 NT_STATUS_OK
ReadX 10417 458752 61440 61440 NT_STATUS_OK
ReadX 10417 520192 4096 4096 NT_STATUS_OK
ReadX 10417 524288 61440 61440 NT_STATUS_OK
ReadX 10417 585728 4096 4096 NT_STATUS_OK
ReadX 10417 589824 61440 61440 NT_STATUS_OK
ReadX 10417 651264 4096 4096 NT_STATUS_OK
ReadX 10417 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10418 NT_STATUS_OK
ReadX 10418 0 61440 61440 NT_STATUS_OK
ReadX 10418 61440 4096 4096 NT_STATUS_OK
ReadX 10418 65536 61440 61440 NT_STATUS_OK
ReadX 10418 126976 4096 4096 NT_STATUS_OK
ReadX 10418 131072 61440 61440 NT_STATUS_OK
ReadX 10418 192512 4096 4096 NT_STATUS_OK
ReadX 10418 196608 61440 61440 NT_STATUS_OK
ReadX 10418 258048 4096 4096 NT_STATUS_OK
ReadX 10418 262144 61440 61440 NT_STATUS_OK
ReadX 10418 323584 4096 4096 NT_STATUS_OK
ReadX 10418 327680 61440 61440 NT_STATUS_OK
ReadX 10418 389120 4096 4096 NT_STATUS_OK
ReadX 10418 393216 61440 61440 NT_STATUS_OK
ReadX 10418 454656 4096 4096 NT_STATUS_OK
ReadX 10418 458752 61440 61440 NT_STATUS_OK
ReadX 10418 520192 4096 4096 NT_STATUS_OK
ReadX 10418 524288 61440 61440 NT_STATUS_OK
ReadX 10418 585728 4096 4096 NT_STATUS_OK
ReadX 10418 589824 61440 61440 NT_STATUS_OK
ReadX 10418 651264 4096 4096 NT_STATUS_OK
ReadX 10418 655360 61440 61440 NT_STATUS_OK
ReadX 10418 716800 4096 4096 NT_STATUS_OK
ReadX 10418 720896 61440 61440 NT_STATUS_OK
ReadX 10418 782336 4096 4096 NT_STATUS_OK
ReadX 10418 786432 61440 61440 NT_STATUS_OK
ReadX 10418 847872 4096 4096 NT_STATUS_OK
ReadX 10418 851968 61440 61440 NT_STATUS_OK
ReadX 10418 913408 4096 4096 NT_STATUS_OK
ReadX 10418 917504 61440 61440 NT_STATUS_OK
ReadX 10418 978944 4096 4096 NT_STATUS_OK
ReadX 10418 983040 61440 61440 NT_STATUS_OK
ReadX 10418 1044480 4096 4096 NT_STATUS_OK
ReadX 10418 1048576 61440 61440 NT_STATUS_OK
ReadX 10418 1110016 4096 4096 NT_STATUS_OK
ReadX 10418 1114112 61440 61440 NT_STATUS_OK
ReadX 10418 1175552 4096 4096 NT_STATUS_OK
ReadX 10418 1179648 61440 61440 NT_STATUS_OK
ReadX 10418 1241088 4096 4096 NT_STATUS_OK
ReadX 10418 1245184 61440 61440 NT_STATUS_OK
ReadX 10418 1306624 4096 4096 NT_STATUS_OK
ReadX 10418 1310720 61440 61440 NT_STATUS_OK
ReadX 10418 1372160 4096 4096 NT_STATUS_OK
ReadX 10418 1376256 61440 61440 NT_STATUS_OK
ReadX 10418 1437696 4096 4096 NT_STATUS_OK
ReadX 10418 1441792 61440 61440 NT_STATUS_OK
ReadX 10418 1503232 4096 4096 NT_STATUS_OK
ReadX 10418 1507328 61440 61440 NT_STATUS_OK
ReadX 10418 1568768 4096 4096 NT_STATUS_OK
ReadX 10418 1572864 61440 61440 NT_STATUS_OK
ReadX 10418 1634304 4096 4096 NT_STATUS_OK
ReadX 10418 1638400 61440 61440 NT_STATUS_OK
ReadX 10418 1699840 4096 4096 NT_STATUS_OK
ReadX 10418 1703936 61440 61440 NT_STATUS_OK
ReadX 10418 1765376 4096 4096 NT_STATUS_OK
ReadX 10418 1769472 61440 61440 NT_STATUS_OK
ReadX 10418 1830912 4096 4096 NT_STATUS_OK
ReadX 10418 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10419 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10420 NT_STATUS_OK
QUERY_FILE_INFORMATION 10420 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10420 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10420 1005 NT_STATUS_OK
ReadX 10420 2156 24 24 NT_STATUS_OK
ReadX 10420 2139 276 276 NT_STATUS_OK
ReadX 10420 2136 14 14 NT_STATUS_OK
ReadX 10420 2136 7 7 NT_STATUS_OK
ReadX 10420 2138 12 12 NT_STATUS_OK
ReadX 10420 2137 8 8 NT_STATUS_OK
ReadX 10420 2135 15 15 NT_STATUS_OK
ReadX 10420 0 16 16 NT_STATUS_OK
ReadX 10420 16 2048 2048 NT_STATUS_OK
ReadX 10420 2064 2048 2048 NT_STATUS_OK
ReadX 10420 257 2048 2048 NT_STATUS_OK
ReadX 10420 385 2048 2048 NT_STATUS_OK
ReadX 10420 513 2048 2048 NT_STATUS_OK
ReadX 10420 641 2048 2048 NT_STATUS_OK
ReadX 10420 769 2048 2048 NT_STATUS_OK
ReadX 10420 897 2048 2048 NT_STATUS_OK
ReadX 10420 1025 2048 2048 NT_STATUS_OK
ReadX 10420 1153 2048 2048 NT_STATUS_OK
ReadX 10420 1281 2048 2048 NT_STATUS_OK
ReadX 10420 1409 2048 2048 NT_STATUS_OK
ReadX 10420 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10422 NT_STATUS_OK
Close 10422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10416 NT_STATUS_OK
Close 10417 NT_STATUS_OK
Close 10418 NT_STATUS_OK
Close 10410 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10425 NT_STATUS_OK
WriteX 10425 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10425 258 NT_STATUS_OK
WriteX 10425 0 10575 10575 NT_STATUS_OK
Flush 10425 NT_STATUS_OK
Close 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10426 NT_STATUS_OK
Close 10426 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10428 NT_STATUS_OK
ReadX 10428 0 4096 4096 NT_STATUS_OK
Close 10420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10430 NT_STATUS_OK
LockX 10430 2147483538 1 NT_STATUS_OK
UnlockX 10430 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10430 1005 NT_STATUS_OK
ReadX 10430 0 512 512 NT_STATUS_OK
ReadX 10430 512 512 512 NT_STATUS_OK
ReadX 10430 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10430 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10430 1004 NT_STATUS_OK
Close 10430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10431 NT_STATUS_OK
QUERY_FILE_INFORMATION 10431 1005 NT_STATUS_OK
ReadX 10431 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10432 NT_STATUS_OK
LockX 10432 2147483538 1 NT_STATUS_OK
UnlockX 10432 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10432 1005 NT_STATUS_OK
ReadX 10432 0 512 512 NT_STATUS_OK
ReadX 10432 512 512 512 NT_STATUS_OK
ReadX 10432 1024 512 512 NT_STATUS_OK
ReadX 10432 288 20 20 NT_STATUS_OK
ReadX 10432 308 2084 2084 NT_STATUS_OK
ReadX 10432 388 2084 2084 NT_STATUS_OK
ReadX 10432 388 2084 2084 NT_STATUS_OK
ReadX 10419 2157 1386 1386 NT_STATUS_OK
ReadX 10432 2472 399 399 NT_STATUS_OK
ReadX 10432 3072 1536 1536 NT_STATUS_OK
ReadX 10432 544 149 149 NT_STATUS_OK
ReadX 10432 693 485 485 NT_STATUS_OK
Close 10432 NT_STATUS_OK
ReadX 10419 2157 4096 4096 NT_STATUS_OK
ReadX 10419 6253 4096 4096 NT_STATUS_OK
ReadX 10419 10349 4096 4096 NT_STATUS_OK
ReadX 10419 14445 4096 4096 NT_STATUS_OK
ReadX 10419 18541 4096 4096 NT_STATUS_OK
ReadX 10419 22637 256 256 NT_STATUS_OK
ReadX 10419 22893 4096 4096 NT_STATUS_OK
ReadX 10419 26989 4096 4096 NT_STATUS_OK
ReadX 10419 31085 4096 4096 NT_STATUS_OK
ReadX 10419 35181 4096 4096 NT_STATUS_OK
ReadX 10419 39277 4096 4096 NT_STATUS_OK
ReadX 10419 43373 4096 4096 NT_STATUS_OK
ReadX 10419 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10419 2157 1024 1024 NT_STATUS_OK
ReadX 10419 1667 4688 4688 NT_STATUS_OK
ReadX 10419 6355 3516 3516 NT_STATUS_OK
ReadX 10419 9871 16384 16384 NT_STATUS_OK
ReadX 10419 26255 3771 3771 NT_STATUS_OK
ReadX 10419 30026 2048 2048 NT_STATUS_OK
ReadX 10419 32074 1024 1024 NT_STATUS_OK
ReadX 10419 33098 6652 6652 NT_STATUS_OK
ReadX 10419 39750 16384 16384 NT_STATUS_OK
ReadX 10419 56134 10496 10496 NT_STATUS_OK
ReadX 10419 66630 1784 1784 NT_STATUS_OK
ReadX 10419 68414 90 90 NT_STATUS_OK
ReadX 10419 68504 273 273 NT_STATUS_OK
ReadX 10419 68777 1600 1600 NT_STATUS_OK
ReadX 10419 70377 640 640 NT_STATUS_OK
ReadX 10419 71017 1280 1280 NT_STATUS_OK
ReadX 10419 72297 8464 8464 NT_STATUS_OK
ReadX 10419 80761 158 158 NT_STATUS_OK
ReadX 10419 80919 912 912 NT_STATUS_OK
ReadX 10419 81831 1980 1980 NT_STATUS_OK
ReadX 10419 83811 2256 2256 NT_STATUS_OK
ReadX 10419 86067 400 400 NT_STATUS_OK
ReadX 10419 86467 252 252 NT_STATUS_OK
ReadX 10419 86719 42 42 NT_STATUS_OK
ReadX 10419 86761 725 725 NT_STATUS_OK
ReadX 10419 2009 512 512 NT_STATUS_OK
ReadX 10419 3895 9 9 NT_STATUS_OK
ReadX 10419 3781 46 46 NT_STATUS_OK
ReadX 10419 4059 92 92 NT_STATUS_OK
ReadX 10419 3781 92 92 NT_STATUS_OK
ReadX 10419 3986 184 184 NT_STATUS_OK
ReadX 10419 3987 16384 16384 NT_STATUS_OK
ReadX 10419 3902 16384 16384 NT_STATUS_OK
ReadX 10419 3781 10240 10240 NT_STATUS_OK
ReadX 10419 3821 16384 16384 NT_STATUS_OK
ReadX 10419 3891 935 935 NT_STATUS_OK
ReadX 10419 4060 10240 10240 NT_STATUS_OK
ReadX 10419 4059 184 184 NT_STATUS_OK
ReadX 10419 256 184 184 NT_STATUS_OK
ReadX 10419 256 1026 1026 NT_STATUS_OK
ReadX 10419 3901 326 326 NT_STATUS_OK
ReadX 10419 3899 652 652 NT_STATUS_OK
ReadX 10419 256 2 2 NT_STATUS_OK
ReadX 10419 258 4948 4948 NT_STATUS_OK
Close 10419 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10434 NT_STATUS_OK
Close 10434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10437 NT_STATUS_OK
WriteX 10437 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10437 258 NT_STATUS_OK
WriteX 10437 0 65536 65536 NT_STATUS_OK
WriteX 10437 65536 65536 65536 NT_STATUS_OK
WriteX 10437 131072 65536 65536 NT_STATUS_OK
WriteX 10437 196608 65536 65536 NT_STATUS_OK
WriteX 10437 262144 65536 65536 NT_STATUS_OK
WriteX 10437 327680 65536 65536 NT_STATUS_OK
WriteX 10437 393216 65536 65536 NT_STATUS_OK
WriteX 10437 458752 65536 65536 NT_STATUS_OK
WriteX 10437 524288 65536 65536 NT_STATUS_OK
WriteX 10437 589824 35257 35257 NT_STATUS_OK
Close 10437 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10439 NT_STATUS_OK
Close 10439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10442 NT_STATUS_OK
WriteX 10442 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10442 258 NT_STATUS_OK
WriteX 10442 0 65536 65536 NT_STATUS_OK
WriteX 10442 65536 65536 65536 NT_STATUS_OK
WriteX 10442 131072 65536 65536 NT_STATUS_OK
WriteX 10442 196608 65536 65536 NT_STATUS_OK
WriteX 10442 262144 65536 65536 NT_STATUS_OK
WriteX 10442 327680 65536 65536 NT_STATUS_OK
WriteX 10442 393216 65536 65536 NT_STATUS_OK
WriteX 10442 458752 65536 65536 NT_STATUS_OK
WriteX 10442 524288 65536 65536 NT_STATUS_OK
WriteX 10442 589824 57598 57598 NT_STATUS_OK
Close 10442 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10444 NT_STATUS_OK
WriteX 10444 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10444 258 NT_STATUS_OK
WriteX 10444 0 12543 12543 NT_STATUS_OK
Flush 10444 NT_STATUS_OK
Close 10444 NT_STATUS_OK
Close 10428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10446 NT_STATUS_OK
Close 10446 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10448 NT_STATUS_OK
ReadX 10448 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10449 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10450 NT_STATUS_OK
QUERY_FILE_INFORMATION 10450 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10450 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10450 1005 NT_STATUS_OK
ReadX 10450 1938 24 24 NT_STATUS_OK
ReadX 10450 1920 276 276 NT_STATUS_OK
ReadX 10450 1918 14 14 NT_STATUS_OK
ReadX 10450 1918 7 7 NT_STATUS_OK
ReadX 10450 1919 12 12 NT_STATUS_OK
ReadX 10450 1919 8 8 NT_STATUS_OK
ReadX 10450 1917 15 15 NT_STATUS_OK
ReadX 10450 0 16 16 NT_STATUS_OK
ReadX 10450 16 2048 2048 NT_STATUS_OK
ReadX 10450 2064 2048 2048 NT_STATUS_OK
ReadX 10450 257 2048 2048 NT_STATUS_OK
ReadX 10450 385 2048 2048 NT_STATUS_OK
ReadX 10450 513 2048 2048 NT_STATUS_OK
ReadX 10450 641 2048 2048 NT_STATUS_OK
ReadX 10450 769 2048 2048 NT_STATUS_OK
ReadX 10450 897 2048 2048 NT_STATUS_OK
ReadX 10450 1025 2048 2048 NT_STATUS_OK
ReadX 10450 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10452 NT_STATUS_OK
Close 10452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10455 NT_STATUS_OK
WriteX 10455 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10455 258 NT_STATUS_OK
WriteX 10455 0 11588 11588 NT_STATUS_OK
Flush 10455 NT_STATUS_OK
Close 10455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10456 NT_STATUS_OK
Close 10456 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10458 NT_STATUS_OK
ReadX 10458 0 4096 4096 NT_STATUS_OK
Close 10450 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10460 NT_STATUS_OK
WriteX 10460 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10460 258 NT_STATUS_OK
WriteX 10460 0 11615 11615 NT_STATUS_OK
Flush 10460 NT_STATUS_OK
Close 10460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10462 NT_STATUS_OK
Close 10462 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10464 NT_STATUS_OK
ReadX 10464 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10466 NT_STATUS_OK
Close 10466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10469 NT_STATUS_OK
WriteX 10469 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10469 258 NT_STATUS_OK
WriteX 10469 0 65536 65536 NT_STATUS_OK
WriteX 10469 65536 16050 16050 NT_STATUS_OK
Close 10469 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10449 1939 64 64 NT_STATUS_OK
ReadX 10449 128 248 248 NT_STATUS_OK
ReadX 10449 128 568 568 NT_STATUS_OK
ReadX 10449 3872 1536 1536 NT_STATUS_OK
ReadX 10449 3456 2560 2560 NT_STATUS_OK
ReadX 10449 3136 512 512 NT_STATUS_OK
ReadX 10449 2880 4096 4096 NT_STATUS_OK
ReadX 10449 3264 3072 3072 NT_STATUS_OK
ReadX 10449 320 4096 4096 NT_STATUS_OK
ReadX 10449 1024 4096 4096 NT_STATUS_OK
ReadX 10449 3616 4096 4096 NT_STATUS_OK
ReadX 10449 1939 64 64 NT_STATUS_OK
ReadX 10449 128 248 248 NT_STATUS_OK
ReadX 10449 128 608 608 NT_STATUS_OK
ReadX 10449 2858 1024 1024 NT_STATUS_OK
ReadX 10449 2810 4096 4096 NT_STATUS_OK
ReadX 10449 2826 4096 4096 NT_STATUS_OK
ReadX 10449 2580 2048 2048 NT_STATUS_OK
ReadX 10449 2800 2560 2560 NT_STATUS_OK
ReadX 10449 2100 4096 4096 NT_STATUS_OK
ReadX 10449 2084 4096 4096 NT_STATUS_OK
ReadX 10449 868 4096 4096 NT_STATUS_OK
ReadX 10449 2324 4096 4096 NT_STATUS_OK
ReadX 10449 884 4096 4096 NT_STATUS_OK
ReadX 10449 2604 1024 1024 NT_STATUS_OK
ReadX 10449 580 4096 4096 NT_STATUS_OK
ReadX 10449 596 4096 4096 NT_STATUS_OK
ReadX 10449 2752 4096 4096 NT_STATUS_OK
ReadX 10449 2842 1024 1024 NT_STATUS_OK
ReadX 10449 660 4096 4096 NT_STATUS_OK
ReadX 10449 2720 4096 4096 NT_STATUS_OK
ReadX 10449 2736 4096 4096 NT_STATUS_OK
ReadX 10449 628 4096 4096 NT_STATUS_OK
ReadX 10449 2704 4096 4096 NT_STATUS_OK
ReadX 10449 1556 4096 4096 NT_STATUS_OK
ReadX 10449 576 4096 4096 NT_STATUS_OK
ReadX 10449 3168 1536 1536 NT_STATUS_OK
ReadX 10449 832 4096 4096 NT_STATUS_OK
ReadX 10449 1088 4096 4096 NT_STATUS_OK
ReadX 10449 1344 4096 4096 NT_STATUS_OK
ReadX 10449 1600 4096 4096 NT_STATUS_OK
ReadX 10449 1856 4096 4096 NT_STATUS_OK
ReadX 10449 2112 4096 4096 NT_STATUS_OK
ReadX 10449 1892 4096 4096 NT_STATUS_OK
ReadX 10449 820 4096 4096 NT_STATUS_OK
ReadX 10449 788 4096 4096 NT_STATUS_OK
ReadX 10449 1604 4096 4096 NT_STATUS_OK
ReadX 10449 3648 4096 4096 NT_STATUS_OK
ReadX 10449 2608 4096 4096 NT_STATUS_OK
ReadX 10449 548 4096 4096 NT_STATUS_OK
ReadX 10449 740 4096 4096 NT_STATUS_OK
ReadX 10449 1344 4096 4096 NT_STATUS_OK
ReadX 10449 3392 4096 4096 NT_STATUS_OK
ReadX 10449 3904 4096 4096 NT_STATUS_OK
ReadX 10449 644 4096 4096 NT_STATUS_OK
ReadX 10449 676 4096 4096 NT_STATUS_OK
ReadX 10449 2688 4096 4096 NT_STATUS_OK
ReadX 10449 320 4096 4096 NT_STATUS_OK
ReadX 10449 900 4096 4096 NT_STATUS_OK
ReadX 10449 1908 4096 4096 NT_STATUS_OK
ReadX 10449 852 4096 4096 NT_STATUS_OK
ReadX 10449 724 4096 4096 NT_STATUS_OK
ReadX 10449 2292 4096 4096 NT_STATUS_OK
ReadX 10449 612 4096 4096 NT_STATUS_OK
ReadX 10449 388 4096 4096 NT_STATUS_OK
ReadX 10449 2368 4096 4096 NT_STATUS_OK
ReadX 10449 2624 4096 4096 NT_STATUS_OK
ReadX 10449 500 4096 4096 NT_STATUS_OK
ReadX 10449 356 4096 4096 NT_STATUS_OK
ReadX 10449 1024 4096 4096 NT_STATUS_OK
ReadX 10449 576 4096 4096 NT_STATUS_OK
ReadX 10449 340 4096 4096 NT_STATUS_OK
ReadX 10449 420 4096 4096 NT_STATUS_OK
ReadX 10449 1600 4096 4096 NT_STATUS_OK
ReadX 10449 404 4096 4096 NT_STATUS_OK
ReadX 10449 1428 4096 4096 NT_STATUS_OK
ReadX 10449 2656 4096 4096 NT_STATUS_OK
ReadX 10449 2624 4096 4096 NT_STATUS_OK
ReadX 10449 452 4096 4096 NT_STATUS_OK
ReadX 10449 692 4096 4096 NT_STATUS_OK
ReadX 10449 564 4096 4096 NT_STATUS_OK
ReadX 10449 372 4096 4096 NT_STATUS_OK
ReadX 10449 468 4096 4096 NT_STATUS_OK
ReadX 10449 484 4096 4096 NT_STATUS_OK
ReadX 10449 1088 4096 4096 NT_STATUS_OK
ReadX 10449 1924 4096 4096 NT_STATUS_OK
ReadX 10449 2768 4096 4096 NT_STATUS_OK
ReadX 10449 832 4096 4096 NT_STATUS_OK
ReadX 10449 836 4096 4096 NT_STATUS_OK
ReadX 10449 1856 4096 4096 NT_STATUS_OK
ReadX 10449 2640 4096 4096 NT_STATUS_OK
ReadX 10449 436 4096 4096 NT_STATUS_OK
ReadX 10449 1828 4096 4096 NT_STATUS_OK
ReadX 10449 804 4096 4096 NT_STATUS_OK
ReadX 10449 1860 4096 4096 NT_STATUS_OK
ReadX 10449 1812 4096 4096 NT_STATUS_OK
ReadX 10449 756 4096 4096 NT_STATUS_OK
ReadX 10449 1636 4096 4096 NT_STATUS_OK
ReadX 10449 772 4096 4096 NT_STATUS_OK
ReadX 10449 2036 4096 4096 NT_STATUS_OK
ReadX 10449 1220 4096 4096 NT_STATUS_OK
ReadX 10449 1652 4096 4096 NT_STATUS_OK
ReadX 10449 2588 4096 4096 NT_STATUS_OK
ReadX 10449 916 4096 4096 NT_STATUS_OK
ReadX 10449 260 4096 4096 NT_STATUS_OK
ReadX 10449 932 4096 4096 NT_STATUS_OK
ReadX 10449 2624 4096 4096 NT_STATUS_OK
ReadX 10449 308 4096 4096 NT_STATUS_OK
ReadX 10449 292 4096 4096 NT_STATUS_OK
ReadX 10449 1140 4096 4096 NT_STATUS_OK
ReadX 10449 276 4096 4096 NT_STATUS_OK
ReadX 10449 2020 4096 4096 NT_STATUS_OK
ReadX 10449 2880 4096 4096 NT_STATUS_OK
ReadX 10449 516 4096 4096 NT_STATUS_OK
ReadX 10449 1844 4096 4096 NT_STATUS_OK
ReadX 10449 1124 4096 4096 NT_STATUS_OK
ReadX 10449 3136 4096 4096 NT_STATUS_OK
ReadX 10449 324 4096 4096 NT_STATUS_OK
ReadX 10449 1156 4096 4096 NT_STATUS_OK
ReadX 10449 1172 4096 4096 NT_STATUS_OK
ReadX 10449 2112 4096 4096 NT_STATUS_OK
ReadX 10449 2368 4096 4096 NT_STATUS_OK
ReadX 10449 964 4096 4096 NT_STATUS_OK
ReadX 10449 980 4096 4096 NT_STATUS_OK
ReadX 10449 1012 4096 4096 NT_STATUS_OK
ReadX 10449 532 4096 4096 NT_STATUS_OK
ReadX 10449 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10449 1620 4096 4096 NT_STATUS_OK
ReadX 10449 1604 4096 4096 NT_STATUS_OK
ReadX 10449 2116 4096 4096 NT_STATUS_OK
ReadX 10449 2132 4096 4096 NT_STATUS_OK
ReadX 10449 2148 4096 4096 NT_STATUS_OK
ReadX 10449 2276 4096 4096 NT_STATUS_OK
ReadX 10449 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10471 NT_STATUS_OK
Close 10471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10474 NT_STATUS_OK
QUERY_FILE_INFORMATION 10429 1004 NT_STATUS_OK
Close 10429 NT_STATUS_OK
WriteX 10474 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10474 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10431 1004 NT_STATUS_OK
Close 10431 NT_STATUS_OK
WriteX 10474 0 65536 65536 NT_STATUS_OK
WriteX 10474 65536 64850 64850 NT_STATUS_OK
Close 10474 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10476 NT_STATUS_OK
WriteX 10476 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10476 258 NT_STATUS_OK
ReadX 10449 2068 4096 4096 NT_STATUS_OK
ReadX 10449 1588 4096 4096 NT_STATUS_OK
ReadX 10449 1572 4096 4096 NT_STATUS_OK
WriteX 10476 0 18630 18630 NT_STATUS_OK
Flush 10476 NT_STATUS_OK
Close 10476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10478 NT_STATUS_OK
Close 10478 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10480 NT_STATUS_OK
ReadX 10480 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10449 612 4096 4096 NT_STATUS_OK
ReadX 10449 564 4096 4096 NT_STATUS_OK
ReadX 10449 1876 4096 4096 NT_STATUS_OK
ReadX 10449 628 4096 4096 NT_STATUS_OK
ReadX 10449 740 4096 4096 NT_STATUS_OK
ReadX 10449 724 4096 4096 NT_STATUS_OK
ReadX 10449 644 4096 4096 NT_STATUS_OK
ReadX 10449 2324 4096 4096 NT_STATUS_OK
ReadX 10449 660 4096 4096 NT_STATUS_OK
ReadX 10449 852 4096 4096 NT_STATUS_OK
ReadX 10449 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10449 2368 4096 4096 NT_STATUS_OK
ReadX 10449 1024 4096 4096 NT_STATUS_OK
ReadX 10449 320 4096 4096 NT_STATUS_OK
ReadX 10449 580 4096 4096 NT_STATUS_OK
ReadX 10449 3136 512 512 NT_STATUS_OK
ReadX 10449 2880 4096 4096 NT_STATUS_OK
Close 10449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 61440 4096 4096 NT_STATUS_OK
ReadX 10481 126976 4096 4096 NT_STATUS_OK
WriteX 10481 0 65536 65536 NT_STATUS_OK
WriteX 10481 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10482 NT_STATUS_OK
ReadX 10482 61440 4096 4096 NT_STATUS_OK
ReadX 10482 126976 4096 4096 NT_STATUS_OK
ReadX 10482 192512 4096 4096 NT_STATUS_OK
ReadX 10482 258048 4096 4096 NT_STATUS_OK
WriteX 10482 0 65536 65536 NT_STATUS_OK
WriteX 10482 65536 65536 65536 NT_STATUS_OK
WriteX 10482 131072 65536 65536 NT_STATUS_OK
WriteX 10482 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10483 NT_STATUS_OK
ReadX 10483 61440 4096 4096 NT_STATUS_OK
ReadX 10483 126976 4096 4096 NT_STATUS_OK
ReadX 10483 192512 4096 4096 NT_STATUS_OK
ReadX 10483 258048 4096 4096 NT_STATUS_OK
ReadX 10483 323584 4096 4096 NT_STATUS_OK
ReadX 10483 389120 4096 4096 NT_STATUS_OK
ReadX 10483 454656 4096 4096 NT_STATUS_OK
ReadX 10483 520192 4096 4096 NT_STATUS_OK
WriteX 10483 0 65536 65536 NT_STATUS_OK
WriteX 10483 65536 65536 65536 NT_STATUS_OK
WriteX 10483 131072 65536 65536 NT_STATUS_OK
WriteX 10483 196608 65536 65536 NT_STATUS_OK
WriteX 10483 262144 65536 65536 NT_STATUS_OK
WriteX 10483 327680 65536 65536 NT_STATUS_OK
WriteX 10483 393216 65536 65536 NT_STATUS_OK
WriteX 10483 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10484 NT_STATUS_OK
ReadX 10484 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10485 NT_STATUS_OK
Close 10485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10486 NT_STATUS_OK
WriteX 10486 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10486 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10484 0 8192 8192 NT_STATUS_OK
Flush 10484 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10484 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10484 0 8192 8192 NT_STATUS_OK
Flush 10484 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10484 0 8192 8192 NT_STATUS_OK
Flush 10484 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10484 0 8192 8192 NT_STATUS_OK
Flush 10484 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10488 NT_STATUS_OK
Close 10488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10480 NT_STATUS_OK
Close 10448 NT_STATUS_OK
Close 10481 NT_STATUS_OK
Close 10482 NT_STATUS_OK
Close 10483 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10491 NT_STATUS_OK
WriteX 10491 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10491 258 NT_STATUS_OK
WriteX 10491 0 62591 62591 NT_STATUS_OK
Close 10491 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10493 NT_STATUS_OK
Close 10493 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10496 NT_STATUS_OK
WriteX 10496 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10496 258 NT_STATUS_OK
WriteX 10496 0 10845 10845 NT_STATUS_OK
Close 10496 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10498 NT_STATUS_OK
Close 10498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10501 NT_STATUS_OK
WriteX 10501 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10501 258 NT_STATUS_OK
WriteX 10501 0 30118 30118 NT_STATUS_OK
Close 10501 NT_STATUS_OK
WriteX 10484 0 4096 4096 NT_STATUS_OK
WriteX 10486 0 64 64 NT_STATUS_OK
Close 10486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10484 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10503 NT_STATUS_OK
ReadX 10503 0 61440 61440 NT_STATUS_OK
ReadX 10503 61440 4096 4096 NT_STATUS_OK
ReadX 10503 65536 61440 61440 NT_STATUS_OK
ReadX 10503 126976 4096 4096 NT_STATUS_OK
ReadX 10503 131072 61440 61440 NT_STATUS_OK
ReadX 10503 192512 4096 4096 NT_STATUS_OK
ReadX 10503 196608 61440 61440 NT_STATUS_OK
ReadX 10503 258048 4096 4096 NT_STATUS_OK
ReadX 10503 262144 61440 61440 NT_STATUS_OK
ReadX 10503 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10504 NT_STATUS_OK
ReadX 10504 0 61440 61440 NT_STATUS_OK
ReadX 10504 61440 4096 4096 NT_STATUS_OK
ReadX 10504 65536 61440 61440 NT_STATUS_OK
ReadX 10504 126976 4096 4096 NT_STATUS_OK
ReadX 10504 131072 61440 61440 NT_STATUS_OK
ReadX 10504 192512 4096 4096 NT_STATUS_OK
ReadX 10504 196608 61440 61440 NT_STATUS_OK
ReadX 10504 258048 4096 4096 NT_STATUS_OK
ReadX 10504 262144 61440 61440 NT_STATUS_OK
ReadX 10504 323584 4096 4096 NT_STATUS_OK
ReadX 10504 327680 61440 61440 NT_STATUS_OK
ReadX 10504 389120 4096 4096 NT_STATUS_OK
ReadX 10504 393216 61440 61440 NT_STATUS_OK
ReadX 10504 454656 4096 4096 NT_STATUS_OK
ReadX 10504 458752 61440 61440 NT_STATUS_OK
ReadX 10504 520192 4096 4096 NT_STATUS_OK
ReadX 10504 524288 61440 61440 NT_STATUS_OK
ReadX 10504 585728 4096 4096 NT_STATUS_OK
ReadX 10504 589824 61440 61440 NT_STATUS_OK
ReadX 10504 651264 4096 4096 NT_STATUS_OK
ReadX 10504 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10505 NT_STATUS_OK
ReadX 10505 0 61440 61440 NT_STATUS_OK
ReadX 10505 61440 4096 4096 NT_STATUS_OK
ReadX 10505 65536 61440 61440 NT_STATUS_OK
ReadX 10505 126976 4096 4096 NT_STATUS_OK
ReadX 10505 131072 61440 61440 NT_STATUS_OK
ReadX 10505 192512 4096 4096 NT_STATUS_OK
ReadX 10505 196608 61440 61440 NT_STATUS_OK
ReadX 10505 258048 4096 4096 NT_STATUS_OK
ReadX 10505 262144 61440 61440 NT_STATUS_OK
ReadX 10505 323584 4096 4096 NT_STATUS_OK
ReadX 10505 327680 61440 61440 NT_STATUS_OK
ReadX 10505 389120 4096 4096 NT_STATUS_OK
ReadX 10505 393216 61440 61440 NT_STATUS_OK
ReadX 10505 454656 4096 4096 NT_STATUS_OK
ReadX 10505 458752 61440 61440 NT_STATUS_OK
ReadX 10505 520192 4096 4096 NT_STATUS_OK
ReadX 10505 524288 61440 61440 NT_STATUS_OK
ReadX 10505 585728 4096 4096 NT_STATUS_OK
ReadX 10505 589824 61440 61440 NT_STATUS_OK
ReadX 10505 651264 4096 4096 NT_STATUS_OK
ReadX 10505 655360 61440 61440 NT_STATUS_OK
ReadX 10505 716800 4096 4096 NT_STATUS_OK
ReadX 10505 720896 61440 61440 NT_STATUS_OK
ReadX 10505 782336 4096 4096 NT_STATUS_OK
ReadX 10505 786432 61440 61440 NT_STATUS_OK
ReadX 10505 847872 4096 4096 NT_STATUS_OK
ReadX 10505 851968 61440 61440 NT_STATUS_OK
ReadX 10505 913408 4096 4096 NT_STATUS_OK
ReadX 10505 917504 61440 61440 NT_STATUS_OK
ReadX 10505 978944 4096 4096 NT_STATUS_OK
ReadX 10505 983040 61440 61440 NT_STATUS_OK
ReadX 10505 1044480 4096 4096 NT_STATUS_OK
ReadX 10505 1048576 61440 61440 NT_STATUS_OK
ReadX 10505 1110016 4096 4096 NT_STATUS_OK
ReadX 10505 1114112 61440 61440 NT_STATUS_OK
ReadX 10505 1175552 4096 4096 NT_STATUS_OK
ReadX 10505 1179648 61440 61440 NT_STATUS_OK
ReadX 10505 1241088 4096 4096 NT_STATUS_OK
ReadX 10505 1245184 61440 61440 NT_STATUS_OK
ReadX 10505 1306624 4096 4096 NT_STATUS_OK
ReadX 10505 1310720 61440 61440 NT_STATUS_OK
ReadX 10505 1372160 4096 4096 NT_STATUS_OK
ReadX 10505 1376256 61440 61440 NT_STATUS_OK
ReadX 10505 1437696 4096 4096 NT_STATUS_OK
ReadX 10505 1441792 61440 61440 NT_STATUS_OK
ReadX 10505 1503232 4096 4096 NT_STATUS_OK
ReadX 10505 1507328 61440 61440 NT_STATUS_OK
ReadX 10505 1568768 4096 4096 NT_STATUS_OK
ReadX 10505 1572864 61440 61440 NT_STATUS_OK
ReadX 10505 1634304 4096 4096 NT_STATUS_OK
ReadX 10505 1638400 61440 61440 NT_STATUS_OK
ReadX 10505 1699840 4096 4096 NT_STATUS_OK
ReadX 10505 1703936 61440 61440 NT_STATUS_OK
ReadX 10505 1765376 4096 4096 NT_STATUS_OK
ReadX 10505 1769472 61440 61440 NT_STATUS_OK
ReadX 10505 1830912 4096 4096 NT_STATUS_OK
ReadX 10505 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10506 NT_STATUS_OK
Close 10506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10503 NT_STATUS_OK
Close 10504 NT_STATUS_OK
Close 10505 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10508 NT_STATUS_OK
ReadX 10508 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10509 NT_STATUS_OK
ReadX 10509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10510 NT_STATUS_OK
ReadX 10510 0 4096 4096 NT_STATUS_OK
ReadX 10510 4096 4096 4096 NT_STATUS_OK
ReadX 10510 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10511 NT_STATUS_OK
Close 10511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10508 NT_STATUS_OK
Close 10509 NT_STATUS_OK
Close 10510 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10513 NT_STATUS_OK
ReadX 10513 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10514 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10514 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10515 NT_STATUS_OK
Close 10515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10513 NT_STATUS_OK
Close 10514 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10517 NT_STATUS_OK
ReadX 10517 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10518 NT_STATUS_OK
ReadX 10518 0 8192 8192 NT_STATUS_OK
ReadX 10518 8192 8192 8192 NT_STATUS_OK
ReadX 10518 16384 8192 8192 NT_STATUS_OK
ReadX 10518 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10520 NT_STATUS_OK
Close 10520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10518 NT_STATUS_OK
Close 10517 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10523 NT_STATUS_OK
WriteX 10523 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10523 258 NT_STATUS_OK
WriteX 10523 0 10438 10438 NT_STATUS_OK
Close 10523 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10524 NT_STATUS_OK
Close 10524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10525 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10526 NT_STATUS_OK
Close 10526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10527 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10528 NT_STATUS_OK
Close 10528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10529 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10530 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10531 NT_STATUS_OK
Close 10531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10532 NT_STATUS_OK
ReadX 10532 0 4096 4096 NT_STATUS_OK
ReadX 10532 4096 4096 4096 NT_STATUS_OK
ReadX 10532 8192 4096 4096 NT_STATUS_OK
ReadX 10532 12288 8192 8192 NT_STATUS_OK
ReadX 10532 20480 8192 8192 NT_STATUS_OK
ReadX 10532 28672 8192 8192 NT_STATUS_OK
ReadX 10532 36864 8192 8192 NT_STATUS_OK
ReadX 10532 45056 8192 8192 NT_STATUS_OK
ReadX 10532 53248 8192 8192 NT_STATUS_OK
ReadX 10532 61440 8192 8192 NT_STATUS_OK
ReadX 10532 69632 8192 8192 NT_STATUS_OK
ReadX 10532 77824 8192 8192 NT_STATUS_OK
ReadX 10532 86016 8192 8192 NT_STATUS_OK
ReadX 10532 94208 8192 8192 NT_STATUS_OK
ReadX 10532 102400 8192 8192 NT_STATUS_OK
ReadX 10532 110592 8192 8192 NT_STATUS_OK
ReadX 10532 118784 8192 8192 NT_STATUS_OK
ReadX 10532 126976 8192 8192 NT_STATUS_OK
ReadX 10532 135168 8192 8192 NT_STATUS_OK
ReadX 10532 143360 8192 8192 NT_STATUS_OK
ReadX 10532 151552 8192 8192 NT_STATUS_OK
ReadX 10532 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10532 NT_STATUS_OK
Close 10525 NT_STATUS_OK
Close 10527 NT_STATUS_OK
Close 10529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10534 NT_STATUS_OK
Close 10534 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10537 NT_STATUS_OK
WriteX 10537 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10537 258 NT_STATUS_OK
WriteX 10537 0 28489 28489 NT_STATUS_OK
Close 10537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10538 NT_STATUS_OK
Close 10538 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10540 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10541 NT_STATUS_OK
Close 10541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10540 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10543 NT_STATUS_OK
ReadX 10543 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10544 NT_STATUS_OK
ReadX 10544 0 8192 8192 NT_STATUS_OK
ReadX 10544 8192 8192 8192 NT_STATUS_OK
ReadX 10544 16384 8192 8192 NT_STATUS_OK
ReadX 10544 24576 8192 8192 NT_STATUS_OK
ReadX 10544 32768 16384 16384 NT_STATUS_OK
ReadX 10544 49152 8192 8192 NT_STATUS_OK
ReadX 10544 57344 8192 8192 NT_STATUS_OK
ReadX 10544 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10546 NT_STATUS_OK
Close 10546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10544 NT_STATUS_OK
Close 10543 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10549 NT_STATUS_OK
WriteX 10549 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10549 258 NT_STATUS_OK
WriteX 10549 0 29253 29253 NT_STATUS_OK
Close 10549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\ROSE.CPT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10550 NT_STATUS_OK
Close 10550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10551 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10551 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10553 NT_STATUS_OK
Close 10553 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10556 NT_STATUS_OK
WriteX 10556 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10556 258 NT_STATUS_OK
WriteX 10556 0 30183 30183 NT_STATUS_OK
Close 10556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10557 NT_STATUS_OK
Close 10557 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10559 NT_STATUS_OK
WriteX 10559 0 510 510 NT_STATUS_OK
WriteX 10559 510 512 512 NT_STATUS_OK
WriteX 10559 1022 510 510 NT_STATUS_OK
WriteX 10559 1532 510 510 NT_STATUS_OK
WriteX 10559 2042 168 168 NT_STATUS_OK
Close 10559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10560 NT_STATUS_OK
Close 10560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10562 NT_STATUS_OK
ReadX 10562 0 4096 4096 NT_STATUS_OK
WriteX 10562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10563 NT_STATUS_OK
ReadX 10563 61440 4096 4096 NT_STATUS_OK
ReadX 10563 126976 4096 4096 NT_STATUS_OK
WriteX 10563 0 65536 65536 NT_STATUS_OK
WriteX 10563 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10564 NT_STATUS_OK
ReadX 10564 61440 4096 4096 NT_STATUS_OK
ReadX 10564 126976 4096 4096 NT_STATUS_OK
ReadX 10564 192512 4096 4096 NT_STATUS_OK
ReadX 10564 258048 4096 4096 NT_STATUS_OK
WriteX 10564 0 65536 65536 NT_STATUS_OK
WriteX 10564 65536 65536 65536 NT_STATUS_OK
WriteX 10564 131072 65536 65536 NT_STATUS_OK
WriteX 10564 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10565 NT_STATUS_OK
ReadX 10565 61440 4096 4096 NT_STATUS_OK
ReadX 10565 126976 4096 4096 NT_STATUS_OK
ReadX 10565 192512 4096 4096 NT_STATUS_OK
ReadX 10565 258048 4096 4096 NT_STATUS_OK
ReadX 10565 323584 4096 4096 NT_STATUS_OK
ReadX 10565 389120 4096 4096 NT_STATUS_OK
ReadX 10565 454656 4096 4096 NT_STATUS_OK
ReadX 10565 520192 4096 4096 NT_STATUS_OK
WriteX 10565 0 65536 65536 NT_STATUS_OK
WriteX 10565 65536 65536 65536 NT_STATUS_OK
WriteX 10565 131072 65536 65536 NT_STATUS_OK
WriteX 10565 196608 65536 65536 NT_STATUS_OK
WriteX 10565 262144 65536 65536 NT_STATUS_OK
WriteX 10565 327680 65536 65536 NT_STATUS_OK
WriteX 10565 393216 65536 65536 NT_STATUS_OK
WriteX 10565 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10566 NT_STATUS_OK
Close 10566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10562 NT_STATUS_OK
Close 10563 NT_STATUS_OK
Close 10564 NT_STATUS_OK
Close 10565 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10568 NT_STATUS_OK
Close 10568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10572 NT_STATUS_OK
Close 10572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10575 NT_STATUS_OK
Close 10575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10577 NT_STATUS_OK
Close 10577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10581 NT_STATUS_OK
Close 10581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10584 NT_STATUS_OK
Close 10584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10586 NT_STATUS_OK
Close 10586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10590 NT_STATUS_OK
Close 10590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10595 NT_STATUS_OK
Close 10595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10600 NT_STATUS_OK
Close 10600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10605 NT_STATUS_OK
Close 10605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10610 NT_STATUS_OK
Close 10610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10615 NT_STATUS_OK
Close 10615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10620 NT_STATUS_OK
Close 10620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10625 NT_STATUS_OK
Close 10625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10628 NT_STATUS_OK
Close 10628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10631 NT_STATUS_OK
Close 10631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10634 NT_STATUS_OK
WriteX 10634 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10634 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10634 0 65536 65536 NT_STATUS_OK
WriteX 10634 65536 65536 65536 NT_STATUS_OK
WriteX 10634 131072 65536 65536 NT_STATUS_OK
WriteX 10634 196608 65536 65536 NT_STATUS_OK
WriteX 10634 262144 26634 26634 NT_STATUS_OK
Close 10634 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 26988 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 28004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10639 NT_STATUS_OK
Close 10639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10640 NT_STATUS_OK
Close 10640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10641 NT_STATUS_OK
ReadX 10641 0 4096 4096 NT_STATUS_OK
Close 10641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10642 NT_STATUS_OK
ReadX 10642 0 4096 4096 NT_STATUS_OK
ReadX 10642 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10643 NT_STATUS_OK
Close 10643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10642 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10647 NT_STATUS_OK
Close 10647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10650 NT_STATUS_OK
Close 10650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10652 NT_STATUS_OK
Close 10652 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10656 NT_STATUS_OK
Close 10656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10659 NT_STATUS_OK
Close 10659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10661 NT_STATUS_OK
Close 10661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10665 NT_STATUS_OK
Close 10665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10670 NT_STATUS_OK
Close 10670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10675 NT_STATUS_OK
Close 10675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10680 NT_STATUS_OK
Close 10680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10685 NT_STATUS_OK
Close 10685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10690 NT_STATUS_OK
Close 10690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10694 NT_STATUS_OK
Close 10694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10699 NT_STATUS_OK
Close 10699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10704 NT_STATUS_OK
Close 10704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10707 NT_STATUS_OK
Close 10707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10709 NT_STATUS_OK
Close 10709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 452 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 452 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 452 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 452 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10719 NT_STATUS_OK
Close 10719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10720 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10721 NT_STATUS_OK
ReadX 10721 0 4096 4096 NT_STATUS_OK
Close 10721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10722 NT_STATUS_OK
ReadX 10722 0 4096 4096 NT_STATUS_OK
Close 10722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10723 NT_STATUS_OK
ReadX 10723 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 26988 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 28004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10733 NT_STATUS_OK
Close 10733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10734 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10735 NT_STATUS_OK
ReadX 10735 0 4096 4096 NT_STATUS_OK
Close 10735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10736 NT_STATUS_OK
ReadX 10736 0 4096 4096 NT_STATUS_OK
Close 10736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10737 NT_STATUS_OK
ReadX 10737 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10723 NT_STATUS_OK
Close 10737 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10766 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10766 0 4096 4096 NT_STATUS_OK
Close 10766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10767 NT_STATUS_OK
ReadX 10767 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10768 NT_STATUS_OK
ReadX 10768 0 4096 4096 NT_STATUS_OK
ReadX 10768 4096 4096 4096 NT_STATUS_OK
ReadX 10768 8192 4096 4096 NT_STATUS_OK
ReadX 10768 12288 4096 4096 NT_STATUS_OK
ReadX 10768 16384 4096 4096 NT_STATUS_OK
ReadX 10768 20480 4096 4096 NT_STATUS_OK
ReadX 10768 24576 4096 4096 NT_STATUS_OK
ReadX 10768 28672 4096 4096 NT_STATUS_OK
ReadX 10768 32768 4096 4096 NT_STATUS_OK
ReadX 10768 36864 4096 4096 NT_STATUS_OK
ReadX 10768 40960 4096 4096 NT_STATUS_OK
ReadX 10768 45056 4096 4096 NT_STATUS_OK
ReadX 10768 49152 4096 4096 NT_STATUS_OK
ReadX 10768 53248 4096 4096 NT_STATUS_OK
ReadX 10768 57344 4096 4096 NT_STATUS_OK
ReadX 10768 61440 4096 4096 NT_STATUS_OK
ReadX 10768 65536 4096 4096 NT_STATUS_OK
ReadX 10768 69632 4096 4096 NT_STATUS_OK
ReadX 10768 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10768 1004 NT_STATUS_OK
WriteX 10768 0 4096 4096 NT_STATUS_OK
Close 10768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10769 NT_STATUS_OK
SET_FILE_INFORMATION 10769 1004 NT_STATUS_OK
Close 10769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10770 NT_STATUS_OK
ReadX 10770 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10771 NT_STATUS_OK
Close 10771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10774 NT_STATUS_OK
WriteX 10774 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10774 258 NT_STATUS_OK
WriteX 10774 0 65536 65536 NT_STATUS_OK
WriteX 10774 65536 19979 19979 NT_STATUS_OK
Close 10774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10775 NT_STATUS_OK
ReadX 10775 0 4096 4096 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
QUERY_FILE_INFORMATION 10775 1004 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
SET_FILE_INFORMATION 10775 1004 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
Close 10775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10776 NT_STATUS_OK
ReadX 10776 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10777 NT_STATUS_OK
ReadX 10777 0 4096 4096 NT_STATUS_OK
Close 10776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10778 NT_STATUS_OK
ReadX 10778 0 4096 4096 NT_STATUS_OK
Close 10778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10779 NT_STATUS_OK
ReadX 10779 0 4096 4096 NT_STATUS_OK
Close 10779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10780 NT_STATUS_OK
ReadX 10780 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10780 1004 NT_STATUS_OK
WriteX 10780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10781 NT_STATUS_OK
Close 10781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10777 NT_STATUS_OK
Close 10780 NT_STATUS_OK
Close 10770 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10783 NT_STATUS_OK
Close 10783 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10786 NT_STATUS_OK
WriteX 10786 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10786 258 NT_STATUS_OK
WriteX 10786 0 65536 65536 NT_STATUS_OK
WriteX 10786 65536 17654 17654 NT_STATUS_OK
Close 10786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10787 NT_STATUS_OK
ReadX 10787 0 4096 4096 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
QUERY_FILE_INFORMATION 10787 1004 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
SET_FILE_INFORMATION 10787 1004 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
Close 10787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10788 NT_STATUS_OK
SET_FILE_INFORMATION 10788 1004 NT_STATUS_OK
Close 10788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10789 NT_STATUS_OK
ReadX 10789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10790 NT_STATUS_OK
Close 10790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10792 NT_STATUS_OK
ReadX 10792 0 4096 4096 NT_STATUS_OK
ReadX 10792 4096 4096 4096 NT_STATUS_OK
ReadX 10792 8192 4096 4096 NT_STATUS_OK
ReadX 10792 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10792 16384 4096 4096 NT_STATUS_OK
ReadX 10792 20480 4096 4096 NT_STATUS_OK
ReadX 10792 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10789 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10793 NT_STATUS_OK
ReadX 10793 0 4096 4096 NT_STATUS_OK
Close 10793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10794 NT_STATUS_OK
ReadX 10794 0 4096 4096 NT_STATUS_OK
Close 10794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10795 NT_STATUS_OK
ReadX 10795 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10795 1004 NT_STATUS_OK
WriteX 10795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10796 NT_STATUS_OK
Close 10796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10795 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10798 NT_STATUS_OK
Close 10798 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10801 NT_STATUS_OK
WriteX 10801 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10801 258 NT_STATUS_OK
WriteX 10801 0 65536 65536 NT_STATUS_OK
WriteX 10801 65536 19490 19490 NT_STATUS_OK
Close 10801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10802 NT_STATUS_OK
ReadX 10802 0 4096 4096 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
QUERY_FILE_INFORMATION 10802 1004 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
SET_FILE_INFORMATION 10802 1004 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
Close 10802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10803 NT_STATUS_OK
SET_FILE_INFORMATION 10803 1004 NT_STATUS_OK
Close 10803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10804 NT_STATUS_OK
ReadX 10804 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10805 NT_STATUS_OK
Close 10805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10807 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10807 0 4096 4096 NT_STATUS_OK
Close 10807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10808 NT_STATUS_OK
ReadX 10808 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10809 NT_STATUS_OK
ReadX 10809 0 4096 4096 NT_STATUS_OK
ReadX 10809 4096 4096 4096 NT_STATUS_OK
ReadX 10809 8192 4096 4096 NT_STATUS_OK
ReadX 10809 12288 4096 4096 NT_STATUS_OK
ReadX 10809 16384 4096 4096 NT_STATUS_OK
ReadX 10809 20480 4096 4096 NT_STATUS_OK
ReadX 10809 24576 4096 4096 NT_STATUS_OK
ReadX 10809 28672 4096 4096 NT_STATUS_OK
ReadX 10809 32768 4096 4096 NT_STATUS_OK
ReadX 10809 36864 4096 4096 NT_STATUS_OK
ReadX 10809 40960 4096 4096 NT_STATUS_OK
ReadX 10809 45056 4096 4096 NT_STATUS_OK
ReadX 10809 49152 4096 4096 NT_STATUS_OK
ReadX 10809 53248 4096 4096 NT_STATUS_OK
ReadX 10809 57344 4096 4096 NT_STATUS_OK
ReadX 10809 61440 4096 4096 NT_STATUS_OK
ReadX 10809 65536 4096 4096 NT_STATUS_OK
ReadX 10809 69632 4096 4096 NT_STATUS_OK
ReadX 10809 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10809 1004 NT_STATUS_OK
WriteX 10809 0 4096 4096 NT_STATUS_OK
Close 10809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10810 NT_STATUS_OK
SET_FILE_INFORMATION 10810 1004 NT_STATUS_OK
Close 10810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10811 NT_STATUS_OK
ReadX 10811 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10812 NT_STATUS_OK
Close 10812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10804 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10815 NT_STATUS_OK
WriteX 10815 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10815 258 NT_STATUS_OK
WriteX 10815 0 65536 65536 NT_STATUS_OK
WriteX 10815 65536 8866 8866 NT_STATUS_OK
Close 10815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10816 NT_STATUS_OK
ReadX 10816 0 4096 4096 NT_STATUS_OK
WriteX 10816 0 4096 4096 NT_STATUS_OK
Flush 10816 NT_STATUS_OK
SET_FILE_INFORMATION 10816 1004 NT_STATUS_OK
WriteX 10816 0 4096 4096 NT_STATUS_OK
Flush 10816 NT_STATUS_OK
Close 10816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10817 NT_STATUS_OK
ReadX 10817 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10818 NT_STATUS_OK
ReadX 10818 0 4096 4096 NT_STATUS_OK
Close 10818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10819 NT_STATUS_OK
ReadX 10819 0 4096 4096 NT_STATUS_OK
Close 10819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10820 NT_STATUS_OK
ReadX 10820 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10820 1004 NT_STATUS_OK
WriteX 10820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10821 NT_STATUS_OK
Close 10821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10820 NT_STATUS_OK
Close 10811 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10823 NT_STATUS_OK
Close 10823 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10826 NT_STATUS_OK
WriteX 10826 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10826 258 NT_STATUS_OK
WriteX 10826 0 65536 65536 NT_STATUS_OK
WriteX 10826 65536 9298 9298 NT_STATUS_OK
Close 10826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10827 NT_STATUS_OK
ReadX 10827 0 4096 4096 NT_STATUS_OK
WriteX 10827 0 4096 4096 NT_STATUS_OK
Flush 10827 NT_STATUS_OK
SET_FILE_INFORMATION 10827 1004 NT_STATUS_OK
WriteX 10827 0 4096 4096 NT_STATUS_OK
Flush 10827 NT_STATUS_OK
Close 10827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10828 NT_STATUS_OK
SET_FILE_INFORMATION 10828 1004 NT_STATUS_OK
Close 10828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10829 NT_STATUS_OK
ReadX 10829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10830 NT_STATUS_OK
Close 10830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10833 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10833 0 4096 4096 NT_STATUS_OK
Close 10833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10834 NT_STATUS_OK
ReadX 10834 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10834 4096 4096 4096 NT_STATUS_OK
ReadX 10834 8192 4096 4096 NT_STATUS_OK
ReadX 10834 12288 4096 4096 NT_STATUS_OK
ReadX 10834 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10835 NT_STATUS_OK
ReadX 10835 0 4096 4096 NT_STATUS_OK
Close 10835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10836 NT_STATUS_OK
ReadX 10836 0 4096 4096 NT_STATUS_OK
Close 10836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10837 NT_STATUS_OK
ReadX 10837 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10837 1004 NT_STATUS_OK
WriteX 10837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10838 NT_STATUS_OK
Close 10838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10834 NT_STATUS_OK
Close 10837 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10840 NT_STATUS_OK
Close 10840 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10843 NT_STATUS_OK
WriteX 10843 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10843 258 NT_STATUS_OK
WriteX 10843 0 65536 65536 NT_STATUS_OK
WriteX 10843 65536 11540 11540 NT_STATUS_OK
Close 10843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10844 NT_STATUS_OK
ReadX 10844 0 4096 4096 NT_STATUS_OK
WriteX 10844 0 4096 4096 NT_STATUS_OK
Flush 10844 NT_STATUS_OK
SET_FILE_INFORMATION 10844 1004 NT_STATUS_OK
WriteX 10844 0 4096 4096 NT_STATUS_OK
Flush 10844 NT_STATUS_OK
Close 10844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10845 NT_STATUS_OK
SET_FILE_INFORMATION 10845 1004 NT_STATUS_OK
Close 10845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10846 NT_STATUS_OK
ReadX 10846 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10847 NT_STATUS_OK
Close 10847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10849 NT_STATUS_OK
ReadX 10849 61440 4096 4096 NT_STATUS_OK
ReadX 10849 126976 4096 4096 NT_STATUS_OK
WriteX 10849 0 65536 65536 NT_STATUS_OK
WriteX 10849 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10850 NT_STATUS_OK
ReadX 10850 61440 4096 4096 NT_STATUS_OK
ReadX 10850 126976 4096 4096 NT_STATUS_OK
ReadX 10850 192512 4096 4096 NT_STATUS_OK
ReadX 10850 258048 4096 4096 NT_STATUS_OK
WriteX 10850 0 65536 65536 NT_STATUS_OK
WriteX 10850 65536 65536 65536 NT_STATUS_OK
WriteX 10850 131072 65536 65536 NT_STATUS_OK
WriteX 10850 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10851 NT_STATUS_OK
ReadX 10851 61440 4096 4096 NT_STATUS_OK
ReadX 10851 126976 4096 4096 NT_STATUS_OK
ReadX 10851 192512 4096 4096 NT_STATUS_OK
ReadX 10851 258048 4096 4096 NT_STATUS_OK
ReadX 10851 323584 4096 4096 NT_STATUS_OK
ReadX 10851 389120 4096 4096 NT_STATUS_OK
ReadX 10851 454656 4096 4096 NT_STATUS_OK
ReadX 10851 520192 4096 4096 NT_STATUS_OK
WriteX 10851 0 65536 65536 NT_STATUS_OK
WriteX 10851 65536 65536 65536 NT_STATUS_OK
WriteX 10851 131072 65536 65536 NT_STATUS_OK
WriteX 10851 196608 65536 65536 NT_STATUS_OK
WriteX 10851 262144 65536 65536 NT_STATUS_OK
WriteX 10851 327680 65536 65536 NT_STATUS_OK
WriteX 10851 393216 65536 65536 NT_STATUS_OK
WriteX 10851 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10852 NT_STATUS_OK
ReadX 10852 0 4096 4096 NT_STATUS_OK
ReadX 10852 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10853 NT_STATUS_OK
WriteX 10853 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10853 258 NT_STATUS_OK
WriteX 10853 0 53 53 NT_STATUS_OK
Close 10853 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10854 NT_STATUS_OK
Close 10854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10846 NT_STATUS_OK
Close 10792 NT_STATUS_OK
Close 10849 NT_STATUS_OK
Close 10850 NT_STATUS_OK
Close 10851 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10852 8192 4096 4096 NT_STATUS_OK
ReadX 10852 12288 4096 4096 NT_STATUS_OK
WriteX 10856 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10856 258 NT_STATUS_OK
ReadX 10852 16384 4096 4096 NT_STATUS_OK
ReadX 10852 20480 4096 4096 NT_STATUS_OK
WriteX 10856 0 15360 15360 NT_STATUS_OK
Close 10856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10857 NT_STATUS_OK
ReadX 10857 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10857 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10857 1004 NT_STATUS_OK
WriteX 10857 0 4096 4096 NT_STATUS_OK
Close 10857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10858 NT_STATUS_OK
Close 10858 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10860 NT_STATUS_OK
ReadX 10860 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10861 NT_STATUS_OK
Close 10861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10860 4096 4096 4096 NT_STATUS_OK
ReadX 10860 8192 4096 4096 NT_STATUS_OK
ReadX 10860 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10863 NT_STATUS_OK
ReadX 10863 0 4096 4096 NT_STATUS_OK
ReadX 10863 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10864 NT_STATUS_OK
ReadX 10864 0 4096 4096 NT_STATUS_OK
ReadX 10864 4096 4096 4096 NT_STATUS_OK
ReadX 10864 8192 4096 4096 NT_STATUS_OK
Close 10863 NT_STATUS_OK
Close 10864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10865 NT_STATUS_OK
WriteX 10865 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10865 258 NT_STATUS_OK
WriteX 10865 0 15360 15360 NT_STATUS_OK
Close 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10866 NT_STATUS_OK
ReadX 10866 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10866 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10866 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10867 NT_STATUS_OK
Close 10867 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10869 NT_STATUS_OK
ReadX 10869 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10870 NT_STATUS_OK
SET_FILE_INFORMATION 10870 1004 NT_STATUS_OK
Close 10870 NT_STATUS_OK
WriteX 10866 0 4096 4096 NT_STATUS_OK
Close 10866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10871 NT_STATUS_OK
Close 10871 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10873 NT_STATUS_OK
ReadX 10873 0 4096 4096 NT_STATUS_OK
ReadX 10873 4096 4096 4096 NT_STATUS_OK
ReadX 10873 8192 4096 4096 NT_STATUS_OK
ReadX 10873 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10873 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10873 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10874 NT_STATUS_OK
ReadX 10874 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10875 NT_STATUS_OK
WriteX 10875 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10875 258 NT_STATUS_OK
WriteX 10875 0 53 53 NT_STATUS_OK
Close 10875 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10876 NT_STATUS_OK
Close 10876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10874 4096 4096 4096 NT_STATUS_OK
ReadX 10874 8192 4096 4096 NT_STATUS_OK
ReadX 10874 12288 4096 4096 NT_STATUS_OK
WriteX 10878 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10878 258 NT_STATUS_OK
WriteX 10878 0 12006 12006 NT_STATUS_OK
Close 10878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10879 NT_STATUS_OK
ReadX 10879 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10879 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10879 1004 NT_STATUS_OK
WriteX 10879 0 4096 4096 NT_STATUS_OK
Close 10879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10880 NT_STATUS_OK
Close 10880 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10882 NT_STATUS_OK
ReadX 10882 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10883 NT_STATUS_OK
Close 10883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10882 4096 4096 4096 NT_STATUS_OK
ReadX 10882 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10885 NT_STATUS_OK
WriteX 10885 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10885 258 NT_STATUS_OK
WriteX 10885 0 11991 11991 NT_STATUS_OK
Close 10885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10886 NT_STATUS_OK
ReadX 10886 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10886 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10886 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10887 NT_STATUS_OK
Close 10887 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10889 NT_STATUS_OK
ReadX 10889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10890 NT_STATUS_OK
SET_FILE_INFORMATION 10890 1004 NT_STATUS_OK
Close 10890 NT_STATUS_OK
WriteX 10886 0 4096 4096 NT_STATUS_OK
Close 10886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10891 NT_STATUS_OK
Close 10891 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10893 NT_STATUS_OK
ReadX 10893 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10894 NT_STATUS_OK
Close 10894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10893 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10893 1004 NT_STATUS_OK
ReadX 10893 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10893 1004 NT_STATUS_OK
WriteX 10893 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10893 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10893 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10893 1004 NT_STATUS_OK
Close 10869 NT_STATUS_OK
WriteX 10873 0 19054 19054 NT_STATUS_OK
WriteX 10893 0 12288 12288 NT_STATUS_OK
Close 10889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10896 NT_STATUS_OK
Close 10896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10873 NT_STATUS_OK
Close 10893 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10898 NT_STATUS_OK
Close 10898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10900 NT_STATUS_OK
ReadX 10900 0 61440 61440 NT_STATUS_OK
ReadX 10900 61440 4096 4096 NT_STATUS_OK
ReadX 10900 65536 61440 61440 NT_STATUS_OK
ReadX 10900 126976 4096 4096 NT_STATUS_OK
ReadX 10900 131072 61440 61440 NT_STATUS_OK
ReadX 10900 192512 4096 4096 NT_STATUS_OK
ReadX 10900 196608 61440 61440 NT_STATUS_OK
ReadX 10900 258048 4096 4096 NT_STATUS_OK
ReadX 10900 262144 61440 61440 NT_STATUS_OK
ReadX 10900 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10901 NT_STATUS_OK
ReadX 10901 0 61440 61440 NT_STATUS_OK
ReadX 10901 61440 4096 4096 NT_STATUS_OK
ReadX 10901 65536 61440 61440 NT_STATUS_OK
ReadX 10901 126976 4096 4096 NT_STATUS_OK
ReadX 10901 131072 61440 61440 NT_STATUS_OK
ReadX 10901 192512 4096 4096 NT_STATUS_OK
ReadX 10901 196608 61440 61440 NT_STATUS_OK
ReadX 10901 258048 4096 4096 NT_STATUS_OK
ReadX 10901 262144 61440 61440 NT_STATUS_OK
ReadX 10901 323584 4096 4096 NT_STATUS_OK
ReadX 10901 327680 61440 61440 NT_STATUS_OK
ReadX 10901 389120 4096 4096 NT_STATUS_OK
ReadX 10901 393216 61440 61440 NT_STATUS_OK
ReadX 10901 454656 4096 4096 NT_STATUS_OK
ReadX 10901 458752 61440 61440 NT_STATUS_OK
ReadX 10901 520192 4096 4096 NT_STATUS_OK
ReadX 10901 524288 61440 61440 NT_STATUS_OK
ReadX 10901 585728 4096 4096 NT_STATUS_OK
ReadX 10901 589824 61440 61440 NT_STATUS_OK
ReadX 10901 651264 4096 4096 NT_STATUS_OK
ReadX 10901 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10902 NT_STATUS_OK
ReadX 10902 0 61440 61440 NT_STATUS_OK
ReadX 10902 61440 4096 4096 NT_STATUS_OK
ReadX 10902 65536 61440 61440 NT_STATUS_OK
ReadX 10902 126976 4096 4096 NT_STATUS_OK
ReadX 10902 131072 61440 61440 NT_STATUS_OK
ReadX 10902 192512 4096 4096 NT_STATUS_OK
ReadX 10902 196608 61440 61440 NT_STATUS_OK
ReadX 10902 258048 4096 4096 NT_STATUS_OK
ReadX 10902 262144 61440 61440 NT_STATUS_OK
ReadX 10902 323584 4096 4096 NT_STATUS_OK
ReadX 10902 327680 61440 61440 NT_STATUS_OK
ReadX 10902 389120 4096 4096 NT_STATUS_OK
ReadX 10902 393216 61440 61440 NT_STATUS_OK
ReadX 10902 454656 4096 4096 NT_STATUS_OK
ReadX 10902 458752 61440 61440 NT_STATUS_OK
ReadX 10902 520192 4096 4096 NT_STATUS_OK
ReadX 10902 524288 61440 61440 NT_STATUS_OK
ReadX 10902 585728 4096 4096 NT_STATUS_OK
ReadX 10902 589824 61440 61440 NT_STATUS_OK
ReadX 10902 651264 4096 4096 NT_STATUS_OK
ReadX 10902 655360 61440 61440 NT_STATUS_OK
ReadX 10902 716800 4096 4096 NT_STATUS_OK
ReadX 10902 720896 61440 61440 NT_STATUS_OK
ReadX 10902 782336 4096 4096 NT_STATUS_OK
ReadX 10902 786432 61440 61440 NT_STATUS_OK
ReadX 10902 847872 4096 4096 NT_STATUS_OK
ReadX 10902 851968 61440 61440 NT_STATUS_OK
ReadX 10902 913408 4096 4096 NT_STATUS_OK
ReadX 10902 917504 61440 61440 NT_STATUS_OK
ReadX 10902 978944 4096 4096 NT_STATUS_OK
ReadX 10902 983040 61440 61440 NT_STATUS_OK
ReadX 10902 1044480 4096 4096 NT_STATUS_OK
ReadX 10902 1048576 61440 61440 NT_STATUS_OK
ReadX 10902 1110016 4096 4096 NT_STATUS_OK
ReadX 10902 1114112 61440 61440 NT_STATUS_OK
ReadX 10902 1175552 4096 4096 NT_STATUS_OK
ReadX 10902 1179648 61440 61440 NT_STATUS_OK
ReadX 10902 1241088 4096 4096 NT_STATUS_OK
ReadX 10902 1245184 61440 61440 NT_STATUS_OK
ReadX 10902 1306624 4096 4096 NT_STATUS_OK
ReadX 10902 1310720 61440 61440 NT_STATUS_OK
ReadX 10902 1372160 4096 4096 NT_STATUS_OK
ReadX 10902 1376256 61440 61440 NT_STATUS_OK
ReadX 10902 1437696 4096 4096 NT_STATUS_OK
ReadX 10902 1441792 61440 61440 NT_STATUS_OK
ReadX 10902 1503232 4096 4096 NT_STATUS_OK
ReadX 10902 1507328 61440 61440 NT_STATUS_OK
ReadX 10902 1568768 4096 4096 NT_STATUS_OK
ReadX 10902 1572864 61440 61440 NT_STATUS_OK
ReadX 10902 1634304 4096 4096 NT_STATUS_OK
ReadX 10902 1638400 61440 61440 NT_STATUS_OK
ReadX 10902 1699840 4096 4096 NT_STATUS_OK
ReadX 10902 1703936 61440 61440 NT_STATUS_OK
ReadX 10902 1765376 4096 4096 NT_STATUS_OK
ReadX 10902 1769472 61440 61440 NT_STATUS_OK
ReadX 10902 1830912 4096 4096 NT_STATUS_OK
ReadX 10902 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10903 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10905 NT_STATUS_OK
ReadX 10905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10906 NT_STATUS_OK
ReadX 10906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10907 NT_STATUS_OK
ReadX 10907 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10908 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10909 NT_STATUS_OK
QUERY_FILE_INFORMATION 10909 1004 NT_STATUS_OK
WriteX 10909 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10909 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10910 NT_STATUS_OK
Close 10910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10911 NT_STATUS_OK
WriteX 10911 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10911 258 NT_STATUS_OK
WriteX 10911 0 491 491 NT_STATUS_OK
Close 10911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10912 NT_STATUS_OK
ReadX 10912 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10909 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10914 NT_STATUS_OK
Close 10914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10915 NT_STATUS_OK
WriteX 10915 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10915 258 NT_STATUS_OK
WriteX 10915 0 543 543 NT_STATUS_OK
Close 10915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10916 NT_STATUS_OK
ReadX 10916 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10900 NT_STATUS_OK
Close 10901 NT_STATUS_OK
Close 10902 NT_STATUS_OK
Close 10916 NT_STATUS_OK
Close 10904 NT_STATUS_OK
Close 10905 NT_STATUS_OK
Close 10906 NT_STATUS_OK
Close 10907 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10919 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10921 NT_STATUS_OK
ReadX 10921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10922 NT_STATUS_OK
ReadX 10922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10923 NT_STATUS_OK
ReadX 10923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10924 NT_STATUS_OK
ReadX 10924 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10928 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10929 NT_STATUS_OK
QUERY_FILE_INFORMATION 10929 1004 NT_STATUS_OK
WriteX 10929 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10929 258 NT_STATUS_OK
WriteX 10929 0 2048 2048 NT_STATUS_OK
Close 10929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10930 NT_STATUS_OK
ReadX 10930 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10930 0 4096 4096 NT_STATUS_OK
Flush 10930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10930 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10935 NT_STATUS_OK
WriteX 10935 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10935 258 NT_STATUS_OK
WriteX 10935 0 2048 2048 NT_STATUS_OK
Close 10935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10936 NT_STATUS_OK
ReadX 10936 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10940 NT_STATUS_OK
Close 10940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10941 NT_STATUS_OK
WriteX 10941 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10941 258 NT_STATUS_OK
WriteX 10941 0 2048 2048 NT_STATUS_OK
Close 10941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10942 NT_STATUS_OK
ReadX 10942 0 2048 2048 NT_STATUS_OK
ReadX 10920 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 2088 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10924 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10936 0 4096 4096 NT_STATUS_OK
WriteX 10920 0 8192 8192 NT_STATUS_OK
WriteX 10921 0 4096 4096 NT_STATUS_OK
WriteX 10922 0 4096 4096 NT_STATUS_OK
ReadX 10936 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10945 NT_STATUS_OK
ReadX 10945 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10946 NT_STATUS_OK
QUERY_FILE_INFORMATION 10946 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10945 NT_STATUS_OK
Close 10921 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Close 10923 NT_STATUS_OK
Close 10936 NT_STATUS_OK
Close 10920 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10948 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10949 NT_STATUS_OK
ReadX 10949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10950 NT_STATUS_OK
ReadX 10950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10951 NT_STATUS_OK
ReadX 10951 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10952 NT_STATUS_OK
ReadX 10952 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10953 NT_STATUS_OK
ReadX 10953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10954 NT_STATUS_OK
ReadX 10954 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10955 NT_STATUS_OK
ReadX 10955 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10956 NT_STATUS_OK
ReadX 10956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10957 NT_STATUS_OK
ReadX 10957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10958 NT_STATUS_OK
ReadX 10958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10959 NT_STATUS_OK
ReadX 10959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10960 NT_STATUS_OK
ReadX 10960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10961 NT_STATUS_OK
ReadX 10961 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10965 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10965 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10966 NT_STATUS_OK
QUERY_FILE_INFORMATION 10966 1004 NT_STATUS_OK
WriteX 10966 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10966 258 NT_STATUS_OK
WriteX 10966 0 2048 2048 NT_STATUS_OK
Close 10966 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10967 NT_STATUS_OK
ReadX 10967 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10968 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10969 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10969 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10973 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10974 NT_STATUS_OK
QUERY_FILE_INFORMATION 10974 1004 NT_STATUS_OK
WriteX 10974 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10974 258 NT_STATUS_OK
WriteX 10974 0 2048 2048 NT_STATUS_OK
Close 10974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10975 NT_STATUS_OK
ReadX 10975 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10967 0 4096 4096 NT_STATUS_OK
Flush 10967 NT_STATUS_OK
WriteX 10975 0 4096 4096 NT_STATUS_OK
Flush 10975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10967 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10975 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10969 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10977 NT_STATUS_OK
WriteX 10977 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10977 258 NT_STATUS_OK
WriteX 10977 0 4096 4096 NT_STATUS_OK
Close 10977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10978 NT_STATUS_OK
ReadX 10978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10979 NT_STATUS_OK
Close 10979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10980 NT_STATUS_OK
WriteX 10980 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10980 258 NT_STATUS_OK
WriteX 10980 0 4096 4096 NT_STATUS_OK
Close 10980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10981 NT_STATUS_OK
ReadX 10981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10981 0 4096 4096 NT_STATUS_OK
Close 10978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10961 NT_STATUS_OK
Close 10955 NT_STATUS_OK
Close 10969 NT_STATUS_OK
Close 10958 NT_STATUS_OK
Close 10959 NT_STATUS_OK
Close 10960 NT_STATUS_OK
Close 10956 NT_STATUS_OK
Close 10949 NT_STATUS_OK
Close 10950 NT_STATUS_OK
Close 10953 NT_STATUS_OK
Close 10954 NT_STATUS_OK
Close 10951 NT_STATUS_OK
Close 10952 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10984 NT_STATUS_OK
Close 10984 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10986 NT_STATUS_OK
ReadX 10986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10987 NT_STATUS_OK
Close 10987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10988 NT_STATUS_OK
WriteX 10988 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10988 258 NT_STATUS_OK
WriteX 10988 0 2048 2048 NT_STATUS_OK
Close 10988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10989 NT_STATUS_OK
ReadX 10989 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10990 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10991 NT_STATUS_OK
ReadX 10991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10992 NT_STATUS_OK
ReadX 10992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10993 NT_STATUS_OK
ReadX 10993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10995 NT_STATUS_OK
ReadX 10995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10997 NT_STATUS_OK
ReadX 10997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10998 NT_STATUS_OK
ReadX 10998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10999 NT_STATUS_OK
ReadX 10999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11000 NT_STATUS_OK
ReadX 11000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11001 NT_STATUS_OK
ReadX 11001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11002 NT_STATUS_OK
ReadX 11002 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11003 NT_STATUS_OK
QUERY_FILE_INFORMATION 11003 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10986 NT_STATUS_OK
Close 10989 NT_STATUS_OK
Close 11001 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Close 10997 NT_STATUS_OK
Close 10998 NT_STATUS_OK
Close 10999 NT_STATUS_OK
Close 11000 NT_STATUS_OK
Close 11002 NT_STATUS_OK
Close 10990 NT_STATUS_OK
Close 10991 NT_STATUS_OK
Close 10994 NT_STATUS_OK
Close 10995 NT_STATUS_OK
Close 10992 NT_STATUS_OK
Close 10993 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11005 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11007 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11008 NT_STATUS_OK
ReadX 11008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11009 NT_STATUS_OK
ReadX 11009 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11010 NT_STATUS_OK
ReadX 11010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11011 NT_STATUS_OK
ReadX 11011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11012 NT_STATUS_OK
ReadX 11012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11013 NT_STATUS_OK
ReadX 11013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11014 NT_STATUS_OK
ReadX 11014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11015 NT_STATUS_OK
ReadX 11015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11016 NT_STATUS_OK
ReadX 11016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11017 NT_STATUS_OK
ReadX 11017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11018 NT_STATUS_OK
ReadX 11018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11019 NT_STATUS_OK
ReadX 11019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11020 NT_STATUS_OK
ReadX 11020 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11025 NT_STATUS_OK
QUERY_FILE_INFORMATION 11025 1004 NT_STATUS_OK
WriteX 11025 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11025 258 NT_STATUS_OK
WriteX 11025 0 2048 2048 NT_STATUS_OK
Close 11025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11026 NT_STATUS_OK
ReadX 11026 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11027 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11028 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11029 NT_STATUS_OK
ReadX 11029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11030 NT_STATUS_OK
ReadX 11030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11031 NT_STATUS_OK
ReadX 11031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11032 NT_STATUS_OK
ReadX 11032 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11036 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11037 NT_STATUS_OK
QUERY_FILE_INFORMATION 11037 1004 NT_STATUS_OK
WriteX 11037 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11037 258 NT_STATUS_OK
WriteX 11037 0 2048 2048 NT_STATUS_OK
Close 11037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11038 NT_STATUS_OK
ReadX 11038 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11039 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11040 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11040 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11044 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11045 NT_STATUS_OK
QUERY_FILE_INFORMATION 11045 1004 NT_STATUS_OK
WriteX 11045 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11045 258 NT_STATUS_OK
WriteX 11045 0 2048 2048 NT_STATUS_OK
Close 11045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11046 NT_STATUS_OK
ReadX 11046 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11026 0 4096 4096 NT_STATUS_OK
Flush 11026 NT_STATUS_OK
WriteX 11038 0 4096 4096 NT_STATUS_OK
Flush 11038 NT_STATUS_OK
WriteX 11046 0 4096 4096 NT_STATUS_OK
Flush 11046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11026 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11038 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11046 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11028 4096 16384 16384 NT_STATUS_OK
ReadX 11008 4096 16384 16384 NT_STATUS_OK
ReadX 11040 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11047 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11048 NT_STATUS_OK
ReadX 11048 0 2048 2048 NT_STATUS_OK
WriteX 11048 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11049 NT_STATUS_OK
QUERY_FILE_INFORMATION 11049 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11048 NT_STATUS_OK
Close 11032 NT_STATUS_OK
Close 11020 NT_STATUS_OK
Close 11012 NT_STATUS_OK
Close 11028 NT_STATUS_OK
Close 11029 NT_STATUS_OK
Close 11030 NT_STATUS_OK
Close 11031 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11040 NT_STATUS_OK
Close 11014 NT_STATUS_OK
Close 11017 NT_STATUS_OK
Close 11018 NT_STATUS_OK
Close 11015 NT_STATUS_OK
Close 11016 NT_STATUS_OK
Close 11008 NT_STATUS_OK
Close 11009 NT_STATUS_OK
Close 11010 NT_STATUS_OK
Close 11011 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11051 NT_STATUS_OK
QUERY_FILE_INFORMATION 11051 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11053 NT_STATUS_OK
QUERY_FILE_INFORMATION 11053 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11055 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11056 NT_STATUS_OK
ReadX 11056 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11057 NT_STATUS_OK
ReadX 11057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11058 NT_STATUS_OK
ReadX 11058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11059 NT_STATUS_OK
ReadX 11059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11060 NT_STATUS_OK
ReadX 11060 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11056 4096 16384 16384 NT_STATUS_OK
WriteX 11056 0 4096 4096 NT_STATUS_OK
WriteX 11057 0 4096 4096 NT_STATUS_OK
WriteX 11058 0 4096 4096 NT_STATUS_OK
WriteX 11059 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11061 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11062 NT_STATUS_OK
ReadX 11062 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11063 NT_STATUS_OK
ReadX 11063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11064 NT_STATUS_OK
ReadX 11064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11065 NT_STATUS_OK
ReadX 11065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11066 NT_STATUS_OK
ReadX 11066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11067 NT_STATUS_OK
ReadX 11067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11068 NT_STATUS_OK
ReadX 11068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11069 NT_STATUS_OK
ReadX 11069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11070 NT_STATUS_OK
ReadX 11070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11071 NT_STATUS_OK
ReadX 11071 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11072 NT_STATUS_OK
ReadX 11072 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11073 NT_STATUS_OK
ReadX 11073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11074 NT_STATUS_OK
ReadX 11074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11075 NT_STATUS_OK
ReadX 11075 0 8192 8192 NT_STATUS_OK
ReadX 11062 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11076 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11076 0 4096 4096 NT_STATUS_OK
ReadX 11076 4096 4096 4096 NT_STATUS_OK
ReadX 11076 8192 4096 4096 NT_STATUS_OK
WriteX 11062 0 4096 4096 NT_STATUS_OK
WriteX 11063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11077 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11077 0 4096 4096 NT_STATUS_OK
ReadX 11077 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11056 0 4096 4096 NT_STATUS_OK
WriteX 11057 0 4096 4096 NT_STATUS_OK
WriteX 11058 0 4096 4096 NT_STATUS_OK
WriteX 11059 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11081 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11082 NT_STATUS_OK
QUERY_FILE_INFORMATION 11082 1004 NT_STATUS_OK
WriteX 11082 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11082 258 NT_STATUS_OK
WriteX 11082 0 2048 2048 NT_STATUS_OK
Close 11082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11083 NT_STATUS_OK
ReadX 11083 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11083 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11083 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11084 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11085 NT_STATUS_OK
ReadX 11085 0 4096 4096 NT_STATUS_OK
ReadX 11085 4096 4096 4096 NT_STATUS_OK
WriteX 11085 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11083 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11085 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11086 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11087 NT_STATUS_OK
ReadX 11087 0 4096 4096 NT_STATUS_OK
ReadX 11087 4096 4096 4096 NT_STATUS_OK
WriteX 11087 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11088 NT_STATUS_OK
QUERY_FILE_INFORMATION 11088 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11075 NT_STATUS_OK
Close 11060 NT_STATUS_OK
Close 11056 NT_STATUS_OK
Close 11057 NT_STATUS_OK
Close 11058 NT_STATUS_OK
Close 11059 NT_STATUS_OK
Close 11068 NT_STATUS_OK
Close 11073 NT_STATUS_OK
Close 11069 NT_STATUS_OK
Close 11070 NT_STATUS_OK
Close 11071 NT_STATUS_OK
Close 11072 NT_STATUS_OK
Close 11074 NT_STATUS_OK
Close 11062 NT_STATUS_OK
Close 11063 NT_STATUS_OK
Close 11066 NT_STATUS_OK
Close 11067 NT_STATUS_OK
Close 11064 NT_STATUS_OK
Close 11065 NT_STATUS_OK
Close 11087 NT_STATUS_OK
Close 11076 NT_STATUS_OK
Close 11077 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11090 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11090 0 4096 4096 NT_STATUS_OK
ReadX 11090 4096 4096 4096 NT_STATUS_OK
ReadX 11090 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11091 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11092 NT_STATUS_OK
ReadX 11092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11093 NT_STATUS_OK
ReadX 11093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11094 NT_STATUS_OK
ReadX 11094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11095 NT_STATUS_OK
ReadX 11095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11096 NT_STATUS_OK
ReadX 11096 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11097 NT_STATUS_OK
ReadX 11097 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11098 NT_STATUS_OK
ReadX 11098 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11099 NT_STATUS_OK
ReadX 11099 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11100 NT_STATUS_OK
ReadX 11100 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11101 NT_STATUS_OK
ReadX 11101 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11102 NT_STATUS_OK
ReadX 11102 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11103 NT_STATUS_OK
ReadX 11103 0 4096 4096 NT_STATUS_OK
ReadX 11091 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11107 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11107 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11108 NT_STATUS_OK
QUERY_FILE_INFORMATION 11108 1004 NT_STATUS_OK
WriteX 11108 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11108 258 NT_STATUS_OK
WriteX 11108 0 2048 2048 NT_STATUS_OK
Close 11108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11109 NT_STATUS_OK
ReadX 11109 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11109 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11113 NT_STATUS_OK
Close 11113 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11114 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 1004 NT_STATUS_OK
WriteX 11114 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 258 NT_STATUS_OK
WriteX 11114 0 2048 2048 NT_STATUS_OK
Close 11114 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11115 NT_STATUS_OK
ReadX 11115 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11115 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11098 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11116 NT_STATUS_OK
QUERY_FILE_INFORMATION 11116 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11102 NT_STATUS_OK
Close 11097 NT_STATUS_OK
Close 11103 NT_STATUS_OK
Close 11091 NT_STATUS_OK
Close 11092 NT_STATUS_OK
Close 11095 NT_STATUS_OK
Close 11096 NT_STATUS_OK
Close 11093 NT_STATUS_OK
Close 11094 NT_STATUS_OK
Close 11098 NT_STATUS_OK
Close 11099 NT_STATUS_OK
Close 11100 NT_STATUS_OK
Close 11101 NT_STATUS_OK
Close 11090 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11118 NT_STATUS_OK
QUERY_FILE_INFORMATION 11118 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11118 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11120 NT_STATUS_OK
ReadX 11120 61440 4096 4096 NT_STATUS_OK
ReadX 11120 126976 4096 4096 NT_STATUS_OK
WriteX 11120 0 65536 65536 NT_STATUS_OK
WriteX 11120 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11121 NT_STATUS_OK
ReadX 11121 61440 4096 4096 NT_STATUS_OK
ReadX 11121 126976 4096 4096 NT_STATUS_OK
ReadX 11121 192512 4096 4096 NT_STATUS_OK
ReadX 11121 258048 4096 4096 NT_STATUS_OK
WriteX 11121 0 65536 65536 NT_STATUS_OK
WriteX 11121 65536 65536 65536 NT_STATUS_OK
WriteX 11121 131072 65536 65536 NT_STATUS_OK
WriteX 11121 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11122 NT_STATUS_OK
ReadX 11122 61440 4096 4096 NT_STATUS_OK
ReadX 11122 126976 4096 4096 NT_STATUS_OK
ReadX 11122 192512 4096 4096 NT_STATUS_OK
ReadX 11122 258048 4096 4096 NT_STATUS_OK
ReadX 11122 323584 4096 4096 NT_STATUS_OK
ReadX 11122 389120 4096 4096 NT_STATUS_OK
ReadX 11122 454656 4096 4096 NT_STATUS_OK
ReadX 11122 520192 4096 4096 NT_STATUS_OK
WriteX 11122 0 65536 65536 NT_STATUS_OK
WriteX 11122 65536 65536 65536 NT_STATUS_OK
WriteX 11122 131072 65536 65536 NT_STATUS_OK
WriteX 11122 196608 65536 65536 NT_STATUS_OK
WriteX 11122 262144 65536 65536 NT_STATUS_OK
WriteX 11122 327680 65536 65536 NT_STATUS_OK
WriteX 11122 393216 65536 65536 NT_STATUS_OK
WriteX 11122 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11123 NT_STATUS_OK
ReadX 11123 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11123 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11123 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11123 8192 4096 4096 NT_STATUS_OK
ReadX 11123 12288 4096 4096 NT_STATUS_OK
ReadX 11123 16384 4096 4096 NT_STATUS_OK
ReadX 11123 20480 4096 4096 NT_STATUS_OK
ReadX 11123 24576 4096 4096 NT_STATUS_OK
ReadX 11123 28672 4096 4096 NT_STATUS_OK
ReadX 11123 32768 4096 4096 NT_STATUS_OK
ReadX 11123 36864 4096 4096 NT_STATUS_OK
ReadX 11123 40960 4096 4096 NT_STATUS_OK
ReadX 11123 45056 4096 4096 NT_STATUS_OK
ReadX 11123 49152 4096 4096 NT_STATUS_OK
ReadX 11123 53248 4096 4096 NT_STATUS_OK
ReadX 11123 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11123 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11124 NT_STATUS_OK
Close 11124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11120 NT_STATUS_OK
Close 11121 NT_STATUS_OK
Close 11122 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11126 NT_STATUS_OK
WriteX 11126 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11126 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11126 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11126 1004 NT_STATUS_OK
WriteX 11126 0 57088 57088 NT_STATUS_OK
WriteX 11126 0 4096 4096 NT_STATUS_OK
Flush 11126 NT_STATUS_OK
Close 11123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11127 NT_STATUS_OK
SET_FILE_INFORMATION 11127 1004 NT_STATUS_OK
Close 11127 NT_STATUS_OK
SET_FILE_INFORMATION 11126 1004 NT_STATUS_OK
WriteX 11126 0 4096 4096 NT_STATUS_OK
Close 11126 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11128 NT_STATUS_OK
Close 11128 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11130 NT_STATUS_OK
ReadX 11130 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11130 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11131 NT_STATUS_OK
WriteX 11131 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11131 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11131 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11131 1004 NT_STATUS_OK
WriteX 11131 0 51456 51456 NT_STATUS_OK
WriteX 11131 0 4096 4096 NT_STATUS_OK
Flush 11131 NT_STATUS_OK
SET_FILE_INFORMATION 11131 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11131 1004 NT_STATUS_OK
WriteX 11131 0 4096 4096 NT_STATUS_OK
Close 11131 NT_STATUS_OK
Close 11130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11133 NT_STATUS_OK
Close 11133 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11135 NT_STATUS_OK
ReadX 11135 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11135 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11137 NT_STATUS_OK
Close 11137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11140 NT_STATUS_OK
WriteX 11140 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11140 258 NT_STATUS_OK
WriteX 11140 0 53077 53077 NT_STATUS_OK
Close 11140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11141 NT_STATUS_OK
WriteX 11141 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11141 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11141 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11141 1004 NT_STATUS_OK
WriteX 11141 0 65536 65536 NT_STATUS_OK
WriteX 11141 65536 1856 1856 NT_STATUS_OK
WriteX 11141 0 4096 4096 NT_STATUS_OK
Flush 11141 NT_STATUS_OK
SET_FILE_INFORMATION 11141 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11141 1004 NT_STATUS_OK
WriteX 11141 0 4096 4096 NT_STATUS_OK
Close 11141 NT_STATUS_OK
Close 11135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11143 NT_STATUS_OK
Close 11143 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11145 NT_STATUS_OK
ReadX 11145 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11147 NT_STATUS_OK
Close 11147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11150 NT_STATUS_OK
WriteX 11150 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11150 258 NT_STATUS_OK
WriteX 11150 0 7983 7983 NT_STATUS_OK
Close 11150 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11152 NT_STATUS_OK
Close 11152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11155 NT_STATUS_OK
WriteX 11155 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11155 258 NT_STATUS_OK
WriteX 11155 0 65536 65536 NT_STATUS_OK
WriteX 11155 65536 65536 65536 NT_STATUS_OK
WriteX 11155 131072 65536 65536 NT_STATUS_OK
WriteX 11155 196608 65536 65536 NT_STATUS_OK
WriteX 11155 262144 65536 65536 NT_STATUS_OK
WriteX 11155 327680 65536 65536 NT_STATUS_OK
WriteX 11155 393216 65536 65536 NT_STATUS_OK
WriteX 11155 458752 46731 46731 NT_STATUS_OK
Close 11155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11156 NT_STATUS_OK
WriteX 11156 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11156 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11145 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11156 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11156 1004 NT_STATUS_OK
WriteX 11156 0 65536 65536 NT_STATUS_OK
WriteX 11156 65536 22848 22848 NT_STATUS_OK
WriteX 11156 0 4096 4096 NT_STATUS_OK
Flush 11156 NT_STATUS_OK
SET_FILE_INFORMATION 11156 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11156 1004 NT_STATUS_OK
WriteX 11156 0 4096 4096 NT_STATUS_OK
Close 11156 NT_STATUS_OK
Close 11145 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11158 NT_STATUS_OK
Close 11158 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11160 NT_STATUS_OK
ReadX 11160 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11160 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11161 NT_STATUS_OK
ReadX 11161 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11161 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11161 1004 NT_STATUS_OK
ReadX 11161 8192 4096 4096 NT_STATUS_OK
ReadX 11161 12288 4096 4096 NT_STATUS_OK
ReadX 11161 16384 4096 4096 NT_STATUS_OK
ReadX 11161 20480 4096 4096 NT_STATUS_OK
ReadX 11161 24576 4096 4096 NT_STATUS_OK
ReadX 11161 28672 4096 4096 NT_STATUS_OK
ReadX 11161 32768 4096 4096 NT_STATUS_OK
ReadX 11161 36864 4096 4096 NT_STATUS_OK
ReadX 11161 40960 4096 4096 NT_STATUS_OK
ReadX 11161 45056 4096 4096 NT_STATUS_OK
ReadX 11161 49152 4096 4096 NT_STATUS_OK
ReadX 11161 53248 4096 4096 NT_STATUS_OK
ReadX 11161 57344 4096 4096 NT_STATUS_OK
ReadX 11161 61440 4096 4096 NT_STATUS_OK
ReadX 11161 65536 4096 4096 NT_STATUS_OK
ReadX 11161 69632 4096 4096 NT_STATUS_OK
ReadX 11161 73728 4096 4096 NT_STATUS_OK
ReadX 11161 77824 4096 4096 NT_STATUS_OK
ReadX 11161 81920 4096 4096 NT_STATUS_OK
ReadX 11161 86016 4096 4096 NT_STATUS_OK
ReadX 11161 90112 4096 4096 NT_STATUS_OK
ReadX 11161 94208 4096 4096 NT_STATUS_OK
ReadX 11161 98304 4096 4096 NT_STATUS_OK
ReadX 11161 102400 4096 4096 NT_STATUS_OK
ReadX 11161 106496 4096 4096 NT_STATUS_OK
ReadX 11161 110592 4096 4096 NT_STATUS_OK
ReadX 11161 114688 4096 4096 NT_STATUS_OK
ReadX 11161 118784 4096 4096 NT_STATUS_OK
ReadX 11161 122880 4096 4096 NT_STATUS_OK
ReadX 11161 126976 4096 4096 NT_STATUS_OK
ReadX 11161 131072 4096 4096 NT_STATUS_OK
ReadX 11161 135168 4096 4096 NT_STATUS_OK
ReadX 11161 139264 4096 4096 NT_STATUS_OK
ReadX 11161 143360 4096 4096 NT_STATUS_OK
ReadX 11161 147456 4096 4096 NT_STATUS_OK
ReadX 11161 151552 4096 4096 NT_STATUS_OK
ReadX 11161 155648 4096 4096 NT_STATUS_OK
ReadX 11161 159744 4096 4096 NT_STATUS_OK
ReadX 11161 163840 4096 4096 NT_STATUS_OK
ReadX 11161 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11161 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11162 NT_STATUS_OK
Close 11162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11160 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11164 NT_STATUS_OK
WriteX 11164 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11164 258 NT_STATUS_OK
Close 11161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11165 NT_STATUS_OK
SET_FILE_INFORMATION 11165 1004 NT_STATUS_OK
Close 11165 NT_STATUS_OK
WriteX 11164 0 42388 42388 NT_STATUS_OK
Close 11164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11166 NT_STATUS_OK
Close 11166 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11168 NT_STATUS_OK
ReadX 11168 0 4096 4096 NT_STATUS_OK
ReadX 11168 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11169 NT_STATUS_OK
WriteX 11169 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11169 258 NT_STATUS_OK
SET_FILE_INFORMATION 11169 1004 NT_STATUS_OK
WriteX 11169 0 42652 42652 NT_STATUS_OK
Close 11169 NT_STATUS_OK
Close 11168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11171 NT_STATUS_OK
Close 11171 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11173 NT_STATUS_OK
ReadX 11173 0 4096 4096 NT_STATUS_OK
ReadX 11173 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11175 NT_STATUS_OK
Close 11175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11178 NT_STATUS_OK
WriteX 11178 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11178 258 NT_STATUS_OK
WriteX 11178 0 65536 65536 NT_STATUS_OK
WriteX 11178 65536 49 49 NT_STATUS_OK
Close 11178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11179 NT_STATUS_OK
ReadX 11179 0 61440 61440 NT_STATUS_OK
ReadX 11179 61440 4096 4096 NT_STATUS_OK
ReadX 11179 65536 61440 61440 NT_STATUS_OK
ReadX 11179 126976 4096 4096 NT_STATUS_OK
ReadX 11179 131072 61440 61440 NT_STATUS_OK
ReadX 11179 192512 4096 4096 NT_STATUS_OK
ReadX 11179 196608 61440 61440 NT_STATUS_OK
ReadX 11179 258048 4096 4096 NT_STATUS_OK
ReadX 11179 262144 61440 61440 NT_STATUS_OK
ReadX 11179 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11180 NT_STATUS_OK
ReadX 11180 0 61440 61440 NT_STATUS_OK
ReadX 11180 61440 4096 4096 NT_STATUS_OK
ReadX 11180 65536 61440 61440 NT_STATUS_OK
ReadX 11180 126976 4096 4096 NT_STATUS_OK
ReadX 11180 131072 61440 61440 NT_STATUS_OK
ReadX 11180 192512 4096 4096 NT_STATUS_OK
ReadX 11180 196608 61440 61440 NT_STATUS_OK
ReadX 11180 258048 4096 4096 NT_STATUS_OK
ReadX 11180 262144 61440 61440 NT_STATUS_OK
ReadX 11180 323584 4096 4096 NT_STATUS_OK
ReadX 11180 327680 61440 61440 NT_STATUS_OK
ReadX 11180 389120 4096 4096 NT_STATUS_OK
ReadX 11180 393216 61440 61440 NT_STATUS_OK
ReadX 11180 454656 4096 4096 NT_STATUS_OK
ReadX 11180 458752 61440 61440 NT_STATUS_OK
ReadX 11180 520192 4096 4096 NT_STATUS_OK
ReadX 11180 524288 61440 61440 NT_STATUS_OK
ReadX 11180 585728 4096 4096 NT_STATUS_OK
ReadX 11180 589824 61440 61440 NT_STATUS_OK
ReadX 11180 651264 4096 4096 NT_STATUS_OK
ReadX 11180 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11181 NT_STATUS_OK
ReadX 11181 0 61440 61440 NT_STATUS_OK
ReadX 11181 61440 4096 4096 NT_STATUS_OK
ReadX 11181 65536 61440 61440 NT_STATUS_OK
ReadX 11181 126976 4096 4096 NT_STATUS_OK
ReadX 11181 131072 61440 61440 NT_STATUS_OK
ReadX 11181 192512 4096 4096 NT_STATUS_OK
ReadX 11181 196608 61440 61440 NT_STATUS_OK
ReadX 11181 258048 4096 4096 NT_STATUS_OK
ReadX 11181 262144 61440 61440 NT_STATUS_OK
ReadX 11181 323584 4096 4096 NT_STATUS_OK
ReadX 11181 327680 61440 61440 NT_STATUS_OK
ReadX 11181 389120 4096 4096 NT_STATUS_OK
ReadX 11181 393216 61440 61440 NT_STATUS_OK
ReadX 11181 454656 4096 4096 NT_STATUS_OK
ReadX 11181 458752 61440 61440 NT_STATUS_OK
ReadX 11181 520192 4096 4096 NT_STATUS_OK
ReadX 11181 524288 61440 61440 NT_STATUS_OK
ReadX 11181 585728 4096 4096 NT_STATUS_OK
ReadX 11181 589824 61440 61440 NT_STATUS_OK
ReadX 11181 651264 4096 4096 NT_STATUS_OK
ReadX 11181 655360 61440 61440 NT_STATUS_OK
ReadX 11181 716800 4096 4096 NT_STATUS_OK
ReadX 11181 720896 61440 61440 NT_STATUS_OK
ReadX 11181 782336 4096 4096 NT_STATUS_OK
ReadX 11181 786432 61440 61440 NT_STATUS_OK
ReadX 11181 847872 4096 4096 NT_STATUS_OK
ReadX 11181 851968 61440 61440 NT_STATUS_OK
ReadX 11181 913408 4096 4096 NT_STATUS_OK
ReadX 11181 917504 61440 61440 NT_STATUS_OK
ReadX 11181 978944 4096 4096 NT_STATUS_OK
ReadX 11181 983040 61440 61440 NT_STATUS_OK
ReadX 11181 1044480 4096 4096 NT_STATUS_OK
ReadX 11181 1048576 61440 61440 NT_STATUS_OK
ReadX 11181 1110016 4096 4096 NT_STATUS_OK
ReadX 11181 1114112 61440 61440 NT_STATUS_OK
ReadX 11181 1175552 4096 4096 NT_STATUS_OK
ReadX 11181 1179648 61440 61440 NT_STATUS_OK
ReadX 11181 1241088 4096 4096 NT_STATUS_OK
ReadX 11181 1245184 61440 61440 NT_STATUS_OK
ReadX 11181 1306624 4096 4096 NT_STATUS_OK
ReadX 11181 1310720 61440 61440 NT_STATUS_OK
ReadX 11181 1372160 4096 4096 NT_STATUS_OK
ReadX 11181 1376256 61440 61440 NT_STATUS_OK
ReadX 11181 1437696 4096 4096 NT_STATUS_OK
ReadX 11181 1441792 61440 61440 NT_STATUS_OK
ReadX 11181 1503232 4096 4096 NT_STATUS_OK
ReadX 11181 1507328 61440 61440 NT_STATUS_OK
ReadX 11181 1568768 4096 4096 NT_STATUS_OK
ReadX 11181 1572864 61440 61440 NT_STATUS_OK
ReadX 11181 1634304 4096 4096 NT_STATUS_OK
ReadX 11181 1638400 61440 61440 NT_STATUS_OK
ReadX 11181 1699840 4096 4096 NT_STATUS_OK
ReadX 11181 1703936 61440 61440 NT_STATUS_OK
ReadX 11181 1765376 4096 4096 NT_STATUS_OK
ReadX 11181 1769472 61440 61440 NT_STATUS_OK
ReadX 11181 1830912 4096 4096 NT_STATUS_OK
ReadX 11181 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11182 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11183 NT_STATUS_OK
QUERY_FILE_INFORMATION 11183 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11183 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11183 1005 NT_STATUS_OK
ReadX 11183 2156 24 24 NT_STATUS_OK
ReadX 11183 2139 276 276 NT_STATUS_OK
ReadX 11183 2136 14 14 NT_STATUS_OK
ReadX 11183 2136 7 7 NT_STATUS_OK
ReadX 11183 2138 12 12 NT_STATUS_OK
ReadX 11183 2137 8 8 NT_STATUS_OK
ReadX 11183 2135 15 15 NT_STATUS_OK
ReadX 11183 0 16 16 NT_STATUS_OK
ReadX 11183 16 2048 2048 NT_STATUS_OK
ReadX 11183 2064 2048 2048 NT_STATUS_OK
ReadX 11183 257 2048 2048 NT_STATUS_OK
ReadX 11183 385 2048 2048 NT_STATUS_OK
ReadX 11183 513 2048 2048 NT_STATUS_OK
ReadX 11183 641 2048 2048 NT_STATUS_OK
ReadX 11183 769 2048 2048 NT_STATUS_OK
ReadX 11183 897 2048 2048 NT_STATUS_OK
ReadX 11183 1025 2048 2048 NT_STATUS_OK
ReadX 11183 1153 2048 2048 NT_STATUS_OK
ReadX 11183 1281 2048 2048 NT_STATUS_OK
ReadX 11183 1409 2048 2048 NT_STATUS_OK
ReadX 11183 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11185 NT_STATUS_OK
Close 11185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11179 NT_STATUS_OK
Close 11180 NT_STATUS_OK
Close 11181 NT_STATUS_OK
Close 11173 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11188 NT_STATUS_OK
WriteX 11188 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11188 258 NT_STATUS_OK
WriteX 11188 0 10575 10575 NT_STATUS_OK
Flush 11188 NT_STATUS_OK
Close 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11189 NT_STATUS_OK
Close 11189 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11191 NT_STATUS_OK
ReadX 11191 0 4096 4096 NT_STATUS_OK
Close 11183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11193 NT_STATUS_OK
LockX 11193 2147483538 1 NT_STATUS_OK
UnlockX 11193 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11193 1005 NT_STATUS_OK
ReadX 11193 0 512 512 NT_STATUS_OK
ReadX 11193 512 512 512 NT_STATUS_OK
ReadX 11193 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11193 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11193 1004 NT_STATUS_OK
Close 11193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11194 NT_STATUS_OK
QUERY_FILE_INFORMATION 11194 1005 NT_STATUS_OK
ReadX 11194 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11195 NT_STATUS_OK
LockX 11195 2147483538 1 NT_STATUS_OK
UnlockX 11195 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11195 1005 NT_STATUS_OK
ReadX 11195 0 512 512 NT_STATUS_OK
ReadX 11195 512 512 512 NT_STATUS_OK
ReadX 11195 1024 512 512 NT_STATUS_OK
ReadX 11195 288 20 20 NT_STATUS_OK
ReadX 11195 308 2084 2084 NT_STATUS_OK
ReadX 11195 388 2084 2084 NT_STATUS_OK
ReadX 11195 388 2084 2084 NT_STATUS_OK
ReadX 11182 2157 1386 1386 NT_STATUS_OK
ReadX 11195 2472 399 399 NT_STATUS_OK
ReadX 11195 3072 1536 1536 NT_STATUS_OK
ReadX 11195 544 149 149 NT_STATUS_OK
ReadX 11195 693 485 485 NT_STATUS_OK
Close 11195 NT_STATUS_OK
ReadX 11182 2157 4096 4096 NT_STATUS_OK
ReadX 11182 6253 4096 4096 NT_STATUS_OK
ReadX 11182 10349 4096 4096 NT_STATUS_OK
ReadX 11182 14445 4096 4096 NT_STATUS_OK
ReadX 11182 18541 4096 4096 NT_STATUS_OK
ReadX 11182 22637 256 256 NT_STATUS_OK
ReadX 11182 22893 4096 4096 NT_STATUS_OK
ReadX 11182 26989 4096 4096 NT_STATUS_OK
ReadX 11182 31085 4096 4096 NT_STATUS_OK
ReadX 11182 35181 4096 4096 NT_STATUS_OK
ReadX 11182 39277 4096 4096 NT_STATUS_OK
ReadX 11182 43373 4096 4096 NT_STATUS_OK
ReadX 11182 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11182 2157 1024 1024 NT_STATUS_OK
ReadX 11182 1667 4688 4688 NT_STATUS_OK
ReadX 11182 6355 3516 3516 NT_STATUS_OK
ReadX 11182 9871 16384 16384 NT_STATUS_OK
ReadX 11182 26255 3771 3771 NT_STATUS_OK
ReadX 11182 30026 2048 2048 NT_STATUS_OK
ReadX 11182 32074 1024 1024 NT_STATUS_OK
ReadX 11182 33098 6652 6652 NT_STATUS_OK
ReadX 11182 39750 16384 16384 NT_STATUS_OK
ReadX 11182 56134 10496 10496 NT_STATUS_OK
ReadX 11182 66630 1784 1784 NT_STATUS_OK
ReadX 11182 68414 90 90 NT_STATUS_OK
ReadX 11182 68504 273 273 NT_STATUS_OK
ReadX 11182 68777 1600 1600 NT_STATUS_OK
ReadX 11182 70377 640 640 NT_STATUS_OK
ReadX 11182 71017 1280 1280 NT_STATUS_OK
ReadX 11182 72297 8464 8464 NT_STATUS_OK
ReadX 11182 80761 158 158 NT_STATUS_OK
ReadX 11182 80919 912 912 NT_STATUS_OK
ReadX 11182 81831 1980 1980 NT_STATUS_OK
ReadX 11182 83811 2256 2256 NT_STATUS_OK
ReadX 11182 86067 400 400 NT_STATUS_OK
ReadX 11182 86467 252 252 NT_STATUS_OK
ReadX 11182 86719 42 42 NT_STATUS_OK
ReadX 11182 86761 725 725 NT_STATUS_OK
ReadX 11182 2009 512 512 NT_STATUS_OK
ReadX 11182 3895 9 9 NT_STATUS_OK
ReadX 11182 3781 46 46 NT_STATUS_OK
ReadX 11182 4059 92 92 NT_STATUS_OK
ReadX 11182 3781 92 92 NT_STATUS_OK
ReadX 11182 3986 184 184 NT_STATUS_OK
ReadX 11182 3987 16384 16384 NT_STATUS_OK
ReadX 11182 3902 16384 16384 NT_STATUS_OK
ReadX 11182 3781 10240 10240 NT_STATUS_OK
ReadX 11182 3821 16384 16384 NT_STATUS_OK
ReadX 11182 3891 935 935 NT_STATUS_OK
ReadX 11182 4060 10240 10240 NT_STATUS_OK
ReadX 11182 4059 184 184 NT_STATUS_OK
ReadX 11182 256 184 184 NT_STATUS_OK
ReadX 11182 256 1026 1026 NT_STATUS_OK
ReadX 11182 3901 326 326 NT_STATUS_OK
ReadX 11182 3899 652 652 NT_STATUS_OK
ReadX 11182 256 2 2 NT_STATUS_OK
ReadX 11182 258 4948 4948 NT_STATUS_OK
Close 11182 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11197 NT_STATUS_OK
Close 11197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11200 NT_STATUS_OK
WriteX 11200 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11200 258 NT_STATUS_OK
WriteX 11200 0 65536 65536 NT_STATUS_OK
WriteX 11200 65536 65536 65536 NT_STATUS_OK
WriteX 11200 131072 65536 65536 NT_STATUS_OK
WriteX 11200 196608 65536 65536 NT_STATUS_OK
WriteX 11200 262144 65536 65536 NT_STATUS_OK
WriteX 11200 327680 65536 65536 NT_STATUS_OK
WriteX 11200 393216 65536 65536 NT_STATUS_OK
WriteX 11200 458752 65536 65536 NT_STATUS_OK
WriteX 11200 524288 65536 65536 NT_STATUS_OK
WriteX 11200 589824 35257 35257 NT_STATUS_OK
Close 11200 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11202 NT_STATUS_OK
Close 11202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11205 NT_STATUS_OK
WriteX 11205 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11205 258 NT_STATUS_OK
WriteX 11205 0 65536 65536 NT_STATUS_OK
WriteX 11205 65536 65536 65536 NT_STATUS_OK
WriteX 11205 131072 65536 65536 NT_STATUS_OK
WriteX 11205 196608 65536 65536 NT_STATUS_OK
WriteX 11205 262144 65536 65536 NT_STATUS_OK
WriteX 11205 327680 65536 65536 NT_STATUS_OK
WriteX 11205 393216 65536 65536 NT_STATUS_OK
WriteX 11205 458752 65536 65536 NT_STATUS_OK
WriteX 11205 524288 65536 65536 NT_STATUS_OK
WriteX 11205 589824 57598 57598 NT_STATUS_OK
Close 11205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11207 NT_STATUS_OK
WriteX 11207 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11207 258 NT_STATUS_OK
WriteX 11207 0 12543 12543 NT_STATUS_OK
Flush 11207 NT_STATUS_OK
Close 11207 NT_STATUS_OK
Close 11191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11209 NT_STATUS_OK
Close 11209 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11211 NT_STATUS_OK
ReadX 11211 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11212 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11213 NT_STATUS_OK
QUERY_FILE_INFORMATION 11213 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11213 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11213 1005 NT_STATUS_OK
ReadX 11213 1938 24 24 NT_STATUS_OK
ReadX 11213 1920 276 276 NT_STATUS_OK
ReadX 11213 1918 14 14 NT_STATUS_OK
ReadX 11213 1918 7 7 NT_STATUS_OK
ReadX 11213 1919 12 12 NT_STATUS_OK
ReadX 11213 1919 8 8 NT_STATUS_OK
ReadX 11213 1917 15 15 NT_STATUS_OK
ReadX 11213 0 16 16 NT_STATUS_OK
ReadX 11213 16 2048 2048 NT_STATUS_OK
ReadX 11213 2064 2048 2048 NT_STATUS_OK
ReadX 11213 257 2048 2048 NT_STATUS_OK
ReadX 11213 385 2048 2048 NT_STATUS_OK
ReadX 11213 513 2048 2048 NT_STATUS_OK
ReadX 11213 641 2048 2048 NT_STATUS_OK
ReadX 11213 769 2048 2048 NT_STATUS_OK
ReadX 11213 897 2048 2048 NT_STATUS_OK
ReadX 11213 1025 2048 2048 NT_STATUS_OK
ReadX 11213 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11215 NT_STATUS_OK
Close 11215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11218 NT_STATUS_OK
WriteX 11218 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11218 258 NT_STATUS_OK
WriteX 11218 0 11588 11588 NT_STATUS_OK
Flush 11218 NT_STATUS_OK
Close 11218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11219 NT_STATUS_OK
Close 11219 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11221 NT_STATUS_OK
ReadX 11221 0 4096 4096 NT_STATUS_OK
Close 11213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11223 NT_STATUS_OK
WriteX 11223 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11223 258 NT_STATUS_OK
WriteX 11223 0 11615 11615 NT_STATUS_OK
Flush 11223 NT_STATUS_OK
Close 11223 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11225 NT_STATUS_OK
Close 11225 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11227 NT_STATUS_OK
ReadX 11227 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11229 NT_STATUS_OK
Close 11229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11232 NT_STATUS_OK
WriteX 11232 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11232 258 NT_STATUS_OK
WriteX 11232 0 65536 65536 NT_STATUS_OK
WriteX 11232 65536 16050 16050 NT_STATUS_OK
Close 11232 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11212 1939 64 64 NT_STATUS_OK
ReadX 11212 128 248 248 NT_STATUS_OK
ReadX 11212 128 568 568 NT_STATUS_OK
ReadX 11212 3872 1536 1536 NT_STATUS_OK
ReadX 11212 3456 2560 2560 NT_STATUS_OK
ReadX 11212 3136 512 512 NT_STATUS_OK
ReadX 11212 2880 4096 4096 NT_STATUS_OK
ReadX 11212 3264 3072 3072 NT_STATUS_OK
ReadX 11212 320 4096 4096 NT_STATUS_OK
ReadX 11212 1024 4096 4096 NT_STATUS_OK
ReadX 11212 3616 4096 4096 NT_STATUS_OK
ReadX 11212 1939 64 64 NT_STATUS_OK
ReadX 11212 128 248 248 NT_STATUS_OK
ReadX 11212 128 608 608 NT_STATUS_OK
ReadX 11212 2858 1024 1024 NT_STATUS_OK
ReadX 11212 2810 4096 4096 NT_STATUS_OK
ReadX 11212 2826 4096 4096 NT_STATUS_OK
ReadX 11212 2580 2048 2048 NT_STATUS_OK
ReadX 11212 2800 2560 2560 NT_STATUS_OK
ReadX 11212 2100 4096 4096 NT_STATUS_OK
ReadX 11212 2084 4096 4096 NT_STATUS_OK
ReadX 11212 868 4096 4096 NT_STATUS_OK
ReadX 11212 2324 4096 4096 NT_STATUS_OK
ReadX 11212 884 4096 4096 NT_STATUS_OK
ReadX 11212 2604 1024 1024 NT_STATUS_OK
ReadX 11212 580 4096 4096 NT_STATUS_OK
ReadX 11212 596 4096 4096 NT_STATUS_OK
ReadX 11212 2752 4096 4096 NT_STATUS_OK
ReadX 11212 2842 1024 1024 NT_STATUS_OK
ReadX 11212 660 4096 4096 NT_STATUS_OK
ReadX 11212 2720 4096 4096 NT_STATUS_OK
ReadX 11212 2736 4096 4096 NT_STATUS_OK
ReadX 11212 628 4096 4096 NT_STATUS_OK
ReadX 11212 2704 4096 4096 NT_STATUS_OK
ReadX 11212 1556 4096 4096 NT_STATUS_OK
ReadX 11212 576 4096 4096 NT_STATUS_OK
ReadX 11212 3168 1536 1536 NT_STATUS_OK
ReadX 11212 832 4096 4096 NT_STATUS_OK
ReadX 11212 1088 4096 4096 NT_STATUS_OK
ReadX 11212 1344 4096 4096 NT_STATUS_OK
ReadX 11212 1600 4096 4096 NT_STATUS_OK
ReadX 11212 1856 4096 4096 NT_STATUS_OK
ReadX 11212 2112 4096 4096 NT_STATUS_OK
ReadX 11212 1892 4096 4096 NT_STATUS_OK
ReadX 11212 820 4096 4096 NT_STATUS_OK
ReadX 11212 788 4096 4096 NT_STATUS_OK
ReadX 11212 1604 4096 4096 NT_STATUS_OK
ReadX 11212 3648 4096 4096 NT_STATUS_OK
ReadX 11212 2608 4096 4096 NT_STATUS_OK
ReadX 11212 548 4096 4096 NT_STATUS_OK
ReadX 11212 740 4096 4096 NT_STATUS_OK
ReadX 11212 1344 4096 4096 NT_STATUS_OK
ReadX 11212 3392 4096 4096 NT_STATUS_OK
ReadX 11212 3904 4096 4096 NT_STATUS_OK
ReadX 11212 644 4096 4096 NT_STATUS_OK
ReadX 11212 676 4096 4096 NT_STATUS_OK
ReadX 11212 2688 4096 4096 NT_STATUS_OK
ReadX 11212 320 4096 4096 NT_STATUS_OK
ReadX 11212 900 4096 4096 NT_STATUS_OK
ReadX 11212 1908 4096 4096 NT_STATUS_OK
ReadX 11212 852 4096 4096 NT_STATUS_OK
ReadX 11212 724 4096 4096 NT_STATUS_OK
ReadX 11212 2292 4096 4096 NT_STATUS_OK
ReadX 11212 612 4096 4096 NT_STATUS_OK
ReadX 11212 388 4096 4096 NT_STATUS_OK
ReadX 11212 2368 4096 4096 NT_STATUS_OK
ReadX 11212 2624 4096 4096 NT_STATUS_OK
ReadX 11212 500 4096 4096 NT_STATUS_OK
ReadX 11212 356 4096 4096 NT_STATUS_OK
ReadX 11212 1024 4096 4096 NT_STATUS_OK
ReadX 11212 576 4096 4096 NT_STATUS_OK
ReadX 11212 340 4096 4096 NT_STATUS_OK
ReadX 11212 420 4096 4096 NT_STATUS_OK
ReadX 11212 1600 4096 4096 NT_STATUS_OK
ReadX 11212 404 4096 4096 NT_STATUS_OK
ReadX 11212 1428 4096 4096 NT_STATUS_OK
ReadX 11212 2656 4096 4096 NT_STATUS_OK
ReadX 11212 2624 4096 4096 NT_STATUS_OK
ReadX 11212 452 4096 4096 NT_STATUS_OK
ReadX 11212 692 4096 4096 NT_STATUS_OK
ReadX 11212 564 4096 4096 NT_STATUS_OK
ReadX 11212 372 4096 4096 NT_STATUS_OK
ReadX 11212 468 4096 4096 NT_STATUS_OK
ReadX 11212 484 4096 4096 NT_STATUS_OK
ReadX 11212 1088 4096 4096 NT_STATUS_OK
ReadX 11212 1924 4096 4096 NT_STATUS_OK
ReadX 11212 2768 4096 4096 NT_STATUS_OK
ReadX 11212 832 4096 4096 NT_STATUS_OK
ReadX 11212 836 4096 4096 NT_STATUS_OK
ReadX 11212 1856 4096 4096 NT_STATUS_OK
ReadX 11212 2640 4096 4096 NT_STATUS_OK
ReadX 11212 436 4096 4096 NT_STATUS_OK
ReadX 11212 1828 4096 4096 NT_STATUS_OK
ReadX 11212 804 4096 4096 NT_STATUS_OK
ReadX 11212 1860 4096 4096 NT_STATUS_OK
ReadX 11212 1812 4096 4096 NT_STATUS_OK
ReadX 11212 756 4096 4096 NT_STATUS_OK
ReadX 11212 1636 4096 4096 NT_STATUS_OK
ReadX 11212 772 4096 4096 NT_STATUS_OK
ReadX 11212 2036 4096 4096 NT_STATUS_OK
ReadX 11212 1220 4096 4096 NT_STATUS_OK
ReadX 11212 1652 4096 4096 NT_STATUS_OK
ReadX 11212 2588 4096 4096 NT_STATUS_OK
ReadX 11212 916 4096 4096 NT_STATUS_OK
ReadX 11212 260 4096 4096 NT_STATUS_OK
ReadX 11212 932 4096 4096 NT_STATUS_OK
ReadX 11212 2624 4096 4096 NT_STATUS_OK
ReadX 11212 308 4096 4096 NT_STATUS_OK
ReadX 11212 292 4096 4096 NT_STATUS_OK
ReadX 11212 1140 4096 4096 NT_STATUS_OK
ReadX 11212 276 4096 4096 NT_STATUS_OK
ReadX 11212 2020 4096 4096 NT_STATUS_OK
ReadX 11212 2880 4096 4096 NT_STATUS_OK
ReadX 11212 516 4096 4096 NT_STATUS_OK
ReadX 11212 1844 4096 4096 NT_STATUS_OK
ReadX 11212 1124 4096 4096 NT_STATUS_OK
ReadX 11212 3136 4096 4096 NT_STATUS_OK
ReadX 11212 324 4096 4096 NT_STATUS_OK
ReadX 11212 1156 4096 4096 NT_STATUS_OK
ReadX 11212 1172 4096 4096 NT_STATUS_OK
ReadX 11212 2112 4096 4096 NT_STATUS_OK
ReadX 11212 2368 4096 4096 NT_STATUS_OK
ReadX 11212 964 4096 4096 NT_STATUS_OK
ReadX 11212 980 4096 4096 NT_STATUS_OK
ReadX 11212 1012 4096 4096 NT_STATUS_OK
ReadX 11212 532 4096 4096 NT_STATUS_OK
ReadX 11212 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11212 1620 4096 4096 NT_STATUS_OK
ReadX 11212 1604 4096 4096 NT_STATUS_OK
ReadX 11212 2116 4096 4096 NT_STATUS_OK
ReadX 11212 2132 4096 4096 NT_STATUS_OK
ReadX 11212 2148 4096 4096 NT_STATUS_OK
ReadX 11212 2276 4096 4096 NT_STATUS_OK
ReadX 11212 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11234 NT_STATUS_OK
Close 11234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11237 NT_STATUS_OK
QUERY_FILE_INFORMATION 11192 1004 NT_STATUS_OK
Close 11192 NT_STATUS_OK
WriteX 11237 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11237 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11194 1004 NT_STATUS_OK
Close 11194 NT_STATUS_OK
WriteX 11237 0 65536 65536 NT_STATUS_OK
WriteX 11237 65536 64850 64850 NT_STATUS_OK
Close 11237 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11239 NT_STATUS_OK
WriteX 11239 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11239 258 NT_STATUS_OK
ReadX 11212 2068 4096 4096 NT_STATUS_OK
ReadX 11212 1588 4096 4096 NT_STATUS_OK
ReadX 11212 1572 4096 4096 NT_STATUS_OK
WriteX 11239 0 18630 18630 NT_STATUS_OK
Flush 11239 NT_STATUS_OK
Close 11239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11241 NT_STATUS_OK
Close 11241 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11243 NT_STATUS_OK
ReadX 11243 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11212 612 4096 4096 NT_STATUS_OK
ReadX 11212 564 4096 4096 NT_STATUS_OK
ReadX 11212 1876 4096 4096 NT_STATUS_OK
ReadX 11212 628 4096 4096 NT_STATUS_OK
ReadX 11212 740 4096 4096 NT_STATUS_OK
ReadX 11212 724 4096 4096 NT_STATUS_OK
ReadX 11212 644 4096 4096 NT_STATUS_OK
ReadX 11212 2324 4096 4096 NT_STATUS_OK
ReadX 11212 660 4096 4096 NT_STATUS_OK
ReadX 11212 852 4096 4096 NT_STATUS_OK
ReadX 11212 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11212 2368 4096 4096 NT_STATUS_OK
ReadX 11212 1024 4096 4096 NT_STATUS_OK
ReadX 11212 320 4096 4096 NT_STATUS_OK
ReadX 11212 580 4096 4096 NT_STATUS_OK
ReadX 11212 3136 512 512 NT_STATUS_OK
ReadX 11212 2880 4096 4096 NT_STATUS_OK
Close 11212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 61440 4096 4096 NT_STATUS_OK
ReadX 11244 126976 4096 4096 NT_STATUS_OK
WriteX 11244 0 65536 65536 NT_STATUS_OK
WriteX 11244 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11245 NT_STATUS_OK
ReadX 11245 61440 4096 4096 NT_STATUS_OK
ReadX 11245 126976 4096 4096 NT_STATUS_OK
ReadX 11245 192512 4096 4096 NT_STATUS_OK
ReadX 11245 258048 4096 4096 NT_STATUS_OK
WriteX 11245 0 65536 65536 NT_STATUS_OK
WriteX 11245 65536 65536 65536 NT_STATUS_OK
WriteX 11245 131072 65536 65536 NT_STATUS_OK
WriteX 11245 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11246 NT_STATUS_OK
ReadX 11246 61440 4096 4096 NT_STATUS_OK
ReadX 11246 126976 4096 4096 NT_STATUS_OK
ReadX 11246 192512 4096 4096 NT_STATUS_OK
ReadX 11246 258048 4096 4096 NT_STATUS_OK
ReadX 11246 323584 4096 4096 NT_STATUS_OK
ReadX 11246 389120 4096 4096 NT_STATUS_OK
ReadX 11246 454656 4096 4096 NT_STATUS_OK
ReadX 11246 520192 4096 4096 NT_STATUS_OK
WriteX 11246 0 65536 65536 NT_STATUS_OK
WriteX 11246 65536 65536 65536 NT_STATUS_OK
WriteX 11246 131072 65536 65536 NT_STATUS_OK
WriteX 11246 196608 65536 65536 NT_STATUS_OK
WriteX 11246 262144 65536 65536 NT_STATUS_OK
WriteX 11246 327680 65536 65536 NT_STATUS_OK
WriteX 11246 393216 65536 65536 NT_STATUS_OK
WriteX 11246 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11247 NT_STATUS_OK
ReadX 11247 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11248 NT_STATUS_OK
Close 11248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11249 NT_STATUS_OK
WriteX 11249 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11249 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11247 0 8192 8192 NT_STATUS_OK
Flush 11247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11247 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11247 0 8192 8192 NT_STATUS_OK
Flush 11247 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11247 0 8192 8192 NT_STATUS_OK
Flush 11247 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11247 0 8192 8192 NT_STATUS_OK
Flush 11247 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 65 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11251 NT_STATUS_OK
Close 11251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11243 NT_STATUS_OK
Close 11211 NT_STATUS_OK
Close 11244 NT_STATUS_OK
Close 11245 NT_STATUS_OK
Close 11246 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11254 NT_STATUS_OK
WriteX 11254 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11254 258 NT_STATUS_OK
WriteX 11254 0 62591 62591 NT_STATUS_OK
Close 11254 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 65 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11256 NT_STATUS_OK
Close 11256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11259 NT_STATUS_OK
WriteX 11259 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11259 258 NT_STATUS_OK
WriteX 11259 0 10845 10845 NT_STATUS_OK
Close 11259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 65 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11261 NT_STATUS_OK
Close 11261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11264 NT_STATUS_OK
WriteX 11264 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11264 258 NT_STATUS_OK
WriteX 11264 0 30118 30118 NT_STATUS_OK
Close 11264 NT_STATUS_OK
WriteX 11247 0 4096 4096 NT_STATUS_OK
WriteX 11249 0 64 64 NT_STATUS_OK
Close 11249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11247 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11266 NT_STATUS_OK
ReadX 11266 0 61440 61440 NT_STATUS_OK
ReadX 11266 61440 4096 4096 NT_STATUS_OK
ReadX 11266 65536 61440 61440 NT_STATUS_OK
ReadX 11266 126976 4096 4096 NT_STATUS_OK
ReadX 11266 131072 61440 61440 NT_STATUS_OK
ReadX 11266 192512 4096 4096 NT_STATUS_OK
ReadX 11266 196608 61440 61440 NT_STATUS_OK
ReadX 11266 258048 4096 4096 NT_STATUS_OK
ReadX 11266 262144 61440 61440 NT_STATUS_OK
ReadX 11266 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11267 NT_STATUS_OK
ReadX 11267 0 61440 61440 NT_STATUS_OK
ReadX 11267 61440 4096 4096 NT_STATUS_OK
ReadX 11267 65536 61440 61440 NT_STATUS_OK
ReadX 11267 126976 4096 4096 NT_STATUS_OK
ReadX 11267 131072 61440 61440 NT_STATUS_OK
ReadX 11267 192512 4096 4096 NT_STATUS_OK
ReadX 11267 196608 61440 61440 NT_STATUS_OK
ReadX 11267 258048 4096 4096 NT_STATUS_OK
ReadX 11267 262144 61440 61440 NT_STATUS_OK
ReadX 11267 323584 4096 4096 NT_STATUS_OK
ReadX 11267 327680 61440 61440 NT_STATUS_OK
ReadX 11267 389120 4096 4096 NT_STATUS_OK
ReadX 11267 393216 61440 61440 NT_STATUS_OK
ReadX 11267 454656 4096 4096 NT_STATUS_OK
ReadX 11267 458752 61440 61440 NT_STATUS_OK
ReadX 11267 520192 4096 4096 NT_STATUS_OK
ReadX 11267 524288 61440 61440 NT_STATUS_OK
ReadX 11267 585728 4096 4096 NT_STATUS_OK
ReadX 11267 589824 61440 61440 NT_STATUS_OK
ReadX 11267 651264 4096 4096 NT_STATUS_OK
ReadX 11267 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11268 NT_STATUS_OK
ReadX 11268 0 61440 61440 NT_STATUS_OK
ReadX 11268 61440 4096 4096 NT_STATUS_OK
ReadX 11268 65536 61440 61440 NT_STATUS_OK
ReadX 11268 126976 4096 4096 NT_STATUS_OK
ReadX 11268 131072 61440 61440 NT_STATUS_OK
ReadX 11268 192512 4096 4096 NT_STATUS_OK
ReadX 11268 196608 61440 61440 NT_STATUS_OK
ReadX 11268 258048 4096 4096 NT_STATUS_OK
ReadX 11268 262144 61440 61440 NT_STATUS_OK
ReadX 11268 323584 4096 4096 NT_STATUS_OK
ReadX 11268 327680 61440 61440 NT_STATUS_OK
ReadX 11268 389120 4096 4096 NT_STATUS_OK
ReadX 11268 393216 61440 61440 NT_STATUS_OK
ReadX 11268 454656 4096 4096 NT_STATUS_OK
ReadX 11268 458752 61440 61440 NT_STATUS_OK
ReadX 11268 520192 4096 4096 NT_STATUS_OK
ReadX 11268 524288 61440 61440 NT_STATUS_OK
ReadX 11268 585728 4096 4096 NT_STATUS_OK
ReadX 11268 589824 61440 61440 NT_STATUS_OK
ReadX 11268 651264 4096 4096 NT_STATUS_OK
ReadX 11268 655360 61440 61440 NT_STATUS_OK
ReadX 11268 716800 4096 4096 NT_STATUS_OK
ReadX 11268 720896 61440 61440 NT_STATUS_OK
ReadX 11268 782336 4096 4096 NT_STATUS_OK
ReadX 11268 786432 61440 61440 NT_STATUS_OK
ReadX 11268 847872 4096 4096 NT_STATUS_OK
ReadX 11268 851968 61440 61440 NT_STATUS_OK
ReadX 11268 913408 4096 4096 NT_STATUS_OK
ReadX 11268 917504 61440 61440 NT_STATUS_OK
ReadX 11268 978944 4096 4096 NT_STATUS_OK
ReadX 11268 983040 61440 61440 NT_STATUS_OK
ReadX 11268 1044480 4096 4096 NT_STATUS_OK
ReadX 11268 1048576 61440 61440 NT_STATUS_OK
ReadX 11268 1110016 4096 4096 NT_STATUS_OK
ReadX 11268 1114112 61440 61440 NT_STATUS_OK
ReadX 11268 1175552 4096 4096 NT_STATUS_OK
ReadX 11268 1179648 61440 61440 NT_STATUS_OK
ReadX 11268 1241088 4096 4096 NT_STATUS_OK
ReadX 11268 1245184 61440 61440 NT_STATUS_OK
ReadX 11268 1306624 4096 4096 NT_STATUS_OK
ReadX 11268 1310720 61440 61440 NT_STATUS_OK
ReadX 11268 1372160 4096 4096 NT_STATUS_OK
ReadX 11268 1376256 61440 61440 NT_STATUS_OK
ReadX 11268 1437696 4096 4096 NT_STATUS_OK
ReadX 11268 1441792 61440 61440 NT_STATUS_OK
ReadX 11268 1503232 4096 4096 NT_STATUS_OK
ReadX 11268 1507328 61440 61440 NT_STATUS_OK
ReadX 11268 1568768 4096 4096 NT_STATUS_OK
ReadX 11268 1572864 61440 61440 NT_STATUS_OK
ReadX 11268 1634304 4096 4096 NT_STATUS_OK
ReadX 11268 1638400 61440 61440 NT_STATUS_OK
ReadX 11268 1699840 4096 4096 NT_STATUS_OK
ReadX 11268 1703936 61440 61440 NT_STATUS_OK
ReadX 11268 1765376 4096 4096 NT_STATUS_OK
ReadX 11268 1769472 61440 61440 NT_STATUS_OK
ReadX 11268 1830912 4096 4096 NT_STATUS_OK
ReadX 11268 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11269 NT_STATUS_OK
Close 11269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11266 NT_STATUS_OK
Close 11267 NT_STATUS_OK
Close 11268 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11271 NT_STATUS_OK
ReadX 11271 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11272 NT_STATUS_OK
ReadX 11272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11273 NT_STATUS_OK
ReadX 11273 0 4096 4096 NT_STATUS_OK
ReadX 11273 4096 4096 4096 NT_STATUS_OK
ReadX 11273 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11274 NT_STATUS_OK
Close 11274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11271 NT_STATUS_OK
Close 11272 NT_STATUS_OK
Close 11273 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11276 NT_STATUS_OK
ReadX 11276 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11277 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11277 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11278 NT_STATUS_OK
Close 11278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11276 NT_STATUS_OK
Close 11277 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11280 NT_STATUS_OK
ReadX 11280 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11281 NT_STATUS_OK
ReadX 11281 0 8192 8192 NT_STATUS_OK
ReadX 11281 8192 8192 8192 NT_STATUS_OK
ReadX 11281 16384 8192 8192 NT_STATUS_OK
ReadX 11281 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11283 NT_STATUS_OK
Close 11283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11281 NT_STATUS_OK
Close 11280 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11286 NT_STATUS_OK
WriteX 11286 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11286 258 NT_STATUS_OK
WriteX 11286 0 10438 10438 NT_STATUS_OK
Close 11286 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11287 NT_STATUS_OK
Close 11287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11288 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11289 NT_STATUS_OK
Close 11289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11290 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11291 NT_STATUS_OK
Close 11291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11292 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11293 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11294 NT_STATUS_OK
Close 11294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11295 NT_STATUS_OK
ReadX 11295 0 4096 4096 NT_STATUS_OK
ReadX 11295 4096 4096 4096 NT_STATUS_OK
ReadX 11295 8192 4096 4096 NT_STATUS_OK
ReadX 11295 12288 8192 8192 NT_STATUS_OK
ReadX 11295 20480 8192 8192 NT_STATUS_OK
ReadX 11295 28672 8192 8192 NT_STATUS_OK
ReadX 11295 36864 8192 8192 NT_STATUS_OK
ReadX 11295 45056 8192 8192 NT_STATUS_OK
ReadX 11295 53248 8192 8192 NT_STATUS_OK
ReadX 11295 61440 8192 8192 NT_STATUS_OK
ReadX 11295 69632 8192 8192 NT_STATUS_OK
ReadX 11295 77824 8192 8192 NT_STATUS_OK
ReadX 11295 86016 8192 8192 NT_STATUS_OK
ReadX 11295 94208 8192 8192 NT_STATUS_OK
ReadX 11295 102400 8192 8192 NT_STATUS_OK
ReadX 11295 110592 8192 8192 NT_STATUS_OK
ReadX 11295 118784 8192 8192 NT_STATUS_OK
ReadX 11295 126976 8192 8192 NT_STATUS_OK
ReadX 11295 135168 8192 8192 NT_STATUS_OK
ReadX 11295 143360 8192 8192 NT_STATUS_OK
ReadX 11295 151552 8192 8192 NT_STATUS_OK
ReadX 11295 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11295 NT_STATUS_OK
Close 11288 NT_STATUS_OK
Close 11290 NT_STATUS_OK
Close 11292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11297 NT_STATUS_OK
Close 11297 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 25961 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11300 NT_STATUS_OK
WriteX 11300 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11300 258 NT_STATUS_OK
WriteX 11300 0 28489 28489 NT_STATUS_OK
Close 11300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11301 NT_STATUS_OK
Close 11301 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11303 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11304 NT_STATUS_OK
Close 11304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11303 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11306 NT_STATUS_OK
ReadX 11306 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11307 NT_STATUS_OK
ReadX 11307 0 8192 8192 NT_STATUS_OK
ReadX 11307 8192 8192 8192 NT_STATUS_OK
ReadX 11307 16384 8192 8192 NT_STATUS_OK
ReadX 11307 24576 8192 8192 NT_STATUS_OK
ReadX 11307 32768 16384 16384 NT_STATUS_OK
ReadX 11307 49152 8192 8192 NT_STATUS_OK
ReadX 11307 57344 8192 8192 NT_STATUS_OK
ReadX 11307 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 67 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11309 NT_STATUS_OK
Close 11309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11307 NT_STATUS_OK
Close 11306 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 67 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11312 NT_STATUS_OK
WriteX 11312 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11312 258 NT_STATUS_OK
WriteX 11312 0 29253 29253 NT_STATUS_OK
Close 11312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11313 NT_STATUS_OK
Close 11313 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11314 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11316 NT_STATUS_OK
Close 11316 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 25961 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11319 NT_STATUS_OK
WriteX 11319 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11319 258 NT_STATUS_OK
WriteX 11319 0 30183 30183 NT_STATUS_OK
Close 11319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11320 NT_STATUS_OK
Close 11320 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11322 NT_STATUS_OK
WriteX 11322 0 510 510 NT_STATUS_OK
WriteX 11322 510 512 512 NT_STATUS_OK
WriteX 11322 1022 510 510 NT_STATUS_OK
WriteX 11322 1532 510 510 NT_STATUS_OK
WriteX 11322 2042 168 168 NT_STATUS_OK
Close 11322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11323 NT_STATUS_OK
Close 11323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11325 NT_STATUS_OK
ReadX 11325 0 4096 4096 NT_STATUS_OK
WriteX 11325 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11326 NT_STATUS_OK
ReadX 11326 61440 4096 4096 NT_STATUS_OK
ReadX 11326 126976 4096 4096 NT_STATUS_OK
WriteX 11326 0 65536 65536 NT_STATUS_OK
WriteX 11326 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11327 NT_STATUS_OK
ReadX 11327 61440 4096 4096 NT_STATUS_OK
ReadX 11327 126976 4096 4096 NT_STATUS_OK
ReadX 11327 192512 4096 4096 NT_STATUS_OK
ReadX 11327 258048 4096 4096 NT_STATUS_OK
WriteX 11327 0 65536 65536 NT_STATUS_OK
WriteX 11327 65536 65536 65536 NT_STATUS_OK
WriteX 11327 131072 65536 65536 NT_STATUS_OK
WriteX 11327 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11328 NT_STATUS_OK
ReadX 11328 61440 4096 4096 NT_STATUS_OK
ReadX 11328 126976 4096 4096 NT_STATUS_OK
ReadX 11328 192512 4096 4096 NT_STATUS_OK
ReadX 11328 258048 4096 4096 NT_STATUS_OK
ReadX 11328 323584 4096 4096 NT_STATUS_OK
ReadX 11328 389120 4096 4096 NT_STATUS_OK
ReadX 11328 454656 4096 4096 NT_STATUS_OK
ReadX 11328 520192 4096 4096 NT_STATUS_OK
WriteX 11328 0 65536 65536 NT_STATUS_OK
WriteX 11328 65536 65536 65536 NT_STATUS_OK
WriteX 11328 131072 65536 65536 NT_STATUS_OK
WriteX 11328 196608 65536 65536 NT_STATUS_OK
WriteX 11328 262144 65536 65536 NT_STATUS_OK
WriteX 11328 327680 65536 65536 NT_STATUS_OK
WriteX 11328 393216 65536 65536 NT_STATUS_OK
WriteX 11328 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11329 NT_STATUS_OK
Close 11329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11325 NT_STATUS_OK
Close 11326 NT_STATUS_OK
Close 11327 NT_STATUS_OK
Close 11328 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11331 NT_STATUS_OK
Close 11331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11335 NT_STATUS_OK
Close 11335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11338 NT_STATUS_OK
Close 11338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11340 NT_STATUS_OK
Close 11340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11344 NT_STATUS_OK
Close 11344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11347 NT_STATUS_OK
Close 11347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11349 NT_STATUS_OK
Close 11349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11353 NT_STATUS_OK
Close 11353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11358 NT_STATUS_OK
Close 11358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11363 NT_STATUS_OK
Close 11363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11368 NT_STATUS_OK
Close 11368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11373 NT_STATUS_OK
Close 11373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11378 NT_STATUS_OK
Close 11378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11383 NT_STATUS_OK
Close 11383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11388 NT_STATUS_OK
Close 11388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11391 NT_STATUS_OK
Close 11391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11394 NT_STATUS_OK
Close 11394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11397 NT_STATUS_OK
WriteX 11397 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11397 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11397 0 65536 65536 NT_STATUS_OK
WriteX 11397 65536 65536 65536 NT_STATUS_OK
WriteX 11397 131072 65536 65536 NT_STATUS_OK
WriteX 11397 196608 65536 65536 NT_STATUS_OK
WriteX 11397 262144 26634 26634 NT_STATUS_OK
Close 11397 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11402 NT_STATUS_OK
Close 11402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11403 NT_STATUS_OK
Close 11403 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11404 NT_STATUS_OK
ReadX 11404 0 4096 4096 NT_STATUS_OK
Close 11404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11405 NT_STATUS_OK
ReadX 11405 0 4096 4096 NT_STATUS_OK
ReadX 11405 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11406 NT_STATUS_OK
Close 11406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11405 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11410 NT_STATUS_OK
Close 11410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11413 NT_STATUS_OK
Close 11413 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11415 NT_STATUS_OK
Close 11415 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11419 NT_STATUS_OK
Close 11419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11422 NT_STATUS_OK
Close 11422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11424 NT_STATUS_OK
Close 11424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11428 NT_STATUS_OK
Close 11428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11433 NT_STATUS_OK
Close 11433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11438 NT_STATUS_OK
Close 11438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11443 NT_STATUS_OK
Close 11443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11448 NT_STATUS_OK
Close 11448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11453 NT_STATUS_OK
Close 11453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11457 NT_STATUS_OK
Close 11457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11462 NT_STATUS_OK
Close 11462 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11467 NT_STATUS_OK
Close 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11470 NT_STATUS_OK
Close 11470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11472 NT_STATUS_OK
Close 11472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11482 NT_STATUS_OK
Close 11482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11484 NT_STATUS_OK
ReadX 11484 0 4096 4096 NT_STATUS_OK
Close 11484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11485 NT_STATUS_OK
ReadX 11485 0 4096 4096 NT_STATUS_OK
Close 11485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11486 NT_STATUS_OK
ReadX 11486 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11496 NT_STATUS_OK
Close 11496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11497 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11498 NT_STATUS_OK
ReadX 11498 0 4096 4096 NT_STATUS_OK
Close 11498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11499 NT_STATUS_OK
ReadX 11499 0 4096 4096 NT_STATUS_OK
Close 11499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11500 NT_STATUS_OK
ReadX 11500 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11486 NT_STATUS_OK
Close 11500 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11529 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11529 0 4096 4096 NT_STATUS_OK
Close 11529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11530 NT_STATUS_OK
ReadX 11530 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11531 NT_STATUS_OK
ReadX 11531 0 4096 4096 NT_STATUS_OK
ReadX 11531 4096 4096 4096 NT_STATUS_OK
ReadX 11531 8192 4096 4096 NT_STATUS_OK
ReadX 11531 12288 4096 4096 NT_STATUS_OK
ReadX 11531 16384 4096 4096 NT_STATUS_OK
ReadX 11531 20480 4096 4096 NT_STATUS_OK
ReadX 11531 24576 4096 4096 NT_STATUS_OK
ReadX 11531 28672 4096 4096 NT_STATUS_OK
ReadX 11531 32768 4096 4096 NT_STATUS_OK
ReadX 11531 36864 4096 4096 NT_STATUS_OK
ReadX 11531 40960 4096 4096 NT_STATUS_OK
ReadX 11531 45056 4096 4096 NT_STATUS_OK
ReadX 11531 49152 4096 4096 NT_STATUS_OK
ReadX 11531 53248 4096 4096 NT_STATUS_OK
ReadX 11531 57344 4096 4096 NT_STATUS_OK
ReadX 11531 61440 4096 4096 NT_STATUS_OK
ReadX 11531 65536 4096 4096 NT_STATUS_OK
ReadX 11531 69632 4096 4096 NT_STATUS_OK
ReadX 11531 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11531 1004 NT_STATUS_OK
WriteX 11531 0 4096 4096 NT_STATUS_OK
Close 11531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11532 NT_STATUS_OK
SET_FILE_INFORMATION 11532 1004 NT_STATUS_OK
Close 11532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11533 NT_STATUS_OK
ReadX 11533 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11534 NT_STATUS_OK
Close 11534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11537 NT_STATUS_OK
WriteX 11537 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11537 258 NT_STATUS_OK
WriteX 11537 0 65536 65536 NT_STATUS_OK
WriteX 11537 65536 19979 19979 NT_STATUS_OK
Close 11537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11538 NT_STATUS_OK
ReadX 11538 0 4096 4096 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
QUERY_FILE_INFORMATION 11538 1004 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
SET_FILE_INFORMATION 11538 1004 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
Close 11538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11539 NT_STATUS_OK
ReadX 11539 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11540 NT_STATUS_OK
ReadX 11540 0 4096 4096 NT_STATUS_OK
Close 11539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11541 NT_STATUS_OK
ReadX 11541 0 4096 4096 NT_STATUS_OK
Close 11541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11542 NT_STATUS_OK
ReadX 11542 0 4096 4096 NT_STATUS_OK
Close 11542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11543 NT_STATUS_OK
ReadX 11543 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11543 1004 NT_STATUS_OK
WriteX 11543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11544 NT_STATUS_OK
Close 11544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11540 NT_STATUS_OK
Close 11543 NT_STATUS_OK
Close 11533 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11546 NT_STATUS_OK
Close 11546 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 26988 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11549 NT_STATUS_OK
WriteX 11549 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11549 258 NT_STATUS_OK
WriteX 11549 0 65536 65536 NT_STATUS_OK
WriteX 11549 65536 17654 17654 NT_STATUS_OK
Close 11549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11550 NT_STATUS_OK
ReadX 11550 0 4096 4096 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
QUERY_FILE_INFORMATION 11550 1004 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
SET_FILE_INFORMATION 11550 1004 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
Close 11550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11551 NT_STATUS_OK
SET_FILE_INFORMATION 11551 1004 NT_STATUS_OK
Close 11551 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11552 NT_STATUS_OK
ReadX 11552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11553 NT_STATUS_OK
Close 11553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11555 NT_STATUS_OK
ReadX 11555 0 4096 4096 NT_STATUS_OK
ReadX 11555 4096 4096 4096 NT_STATUS_OK
ReadX 11555 8192 4096 4096 NT_STATUS_OK
ReadX 11555 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11555 16384 4096 4096 NT_STATUS_OK
ReadX 11555 20480 4096 4096 NT_STATUS_OK
ReadX 11555 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11552 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11556 NT_STATUS_OK
ReadX 11556 0 4096 4096 NT_STATUS_OK
Close 11556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11557 NT_STATUS_OK
ReadX 11557 0 4096 4096 NT_STATUS_OK
Close 11557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11558 NT_STATUS_OK
ReadX 11558 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11558 1004 NT_STATUS_OK
WriteX 11558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11559 NT_STATUS_OK
Close 11559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11558 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11561 NT_STATUS_OK
Close 11561 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 26988 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11564 NT_STATUS_OK
WriteX 11564 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11564 258 NT_STATUS_OK
WriteX 11564 0 65536 65536 NT_STATUS_OK
WriteX 11564 65536 19490 19490 NT_STATUS_OK
Close 11564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11565 NT_STATUS_OK
ReadX 11565 0 4096 4096 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
QUERY_FILE_INFORMATION 11565 1004 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
SET_FILE_INFORMATION 11565 1004 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
Close 11565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11566 NT_STATUS_OK
SET_FILE_INFORMATION 11566 1004 NT_STATUS_OK
Close 11566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11567 NT_STATUS_OK
ReadX 11567 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11568 NT_STATUS_OK
Close 11568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11570 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11570 0 4096 4096 NT_STATUS_OK
Close 11570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11571 NT_STATUS_OK
ReadX 11571 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11572 NT_STATUS_OK
ReadX 11572 0 4096 4096 NT_STATUS_OK
ReadX 11572 4096 4096 4096 NT_STATUS_OK
ReadX 11572 8192 4096 4096 NT_STATUS_OK
ReadX 11572 12288 4096 4096 NT_STATUS_OK
ReadX 11572 16384 4096 4096 NT_STATUS_OK
ReadX 11572 20480 4096 4096 NT_STATUS_OK
ReadX 11572 24576 4096 4096 NT_STATUS_OK
ReadX 11572 28672 4096 4096 NT_STATUS_OK
ReadX 11572 32768 4096 4096 NT_STATUS_OK
ReadX 11572 36864 4096 4096 NT_STATUS_OK
ReadX 11572 40960 4096 4096 NT_STATUS_OK
ReadX 11572 45056 4096 4096 NT_STATUS_OK
ReadX 11572 49152 4096 4096 NT_STATUS_OK
ReadX 11572 53248 4096 4096 NT_STATUS_OK
ReadX 11572 57344 4096 4096 NT_STATUS_OK
ReadX 11572 61440 4096 4096 NT_STATUS_OK
ReadX 11572 65536 4096 4096 NT_STATUS_OK
ReadX 11572 69632 4096 4096 NT_STATUS_OK
ReadX 11572 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11572 1004 NT_STATUS_OK
WriteX 11572 0 4096 4096 NT_STATUS_OK
Close 11572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11573 NT_STATUS_OK
SET_FILE_INFORMATION 11573 1004 NT_STATUS_OK
Close 11573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11574 NT_STATUS_OK
ReadX 11574 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11575 NT_STATUS_OK
Close 11575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11567 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11578 NT_STATUS_OK
WriteX 11578 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11578 258 NT_STATUS_OK
WriteX 11578 0 65536 65536 NT_STATUS_OK
WriteX 11578 65536 8866 8866 NT_STATUS_OK
Close 11578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11579 NT_STATUS_OK
ReadX 11579 0 4096 4096 NT_STATUS_OK
WriteX 11579 0 4096 4096 NT_STATUS_OK
Flush 11579 NT_STATUS_OK
SET_FILE_INFORMATION 11579 1004 NT_STATUS_OK
WriteX 11579 0 4096 4096 NT_STATUS_OK
Flush 11579 NT_STATUS_OK
Close 11579 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11580 NT_STATUS_OK
ReadX 11580 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11581 NT_STATUS_OK
ReadX 11581 0 4096 4096 NT_STATUS_OK
Close 11581 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11582 NT_STATUS_OK
ReadX 11582 0 4096 4096 NT_STATUS_OK
Close 11582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11583 NT_STATUS_OK
ReadX 11583 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11583 1004 NT_STATUS_OK
WriteX 11583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11584 NT_STATUS_OK
Close 11584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11583 NT_STATUS_OK
Close 11574 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11586 NT_STATUS_OK
Close 11586 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 27747 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11589 NT_STATUS_OK
WriteX 11589 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11589 258 NT_STATUS_OK
WriteX 11589 0 65536 65536 NT_STATUS_OK
WriteX 11589 65536 9298 9298 NT_STATUS_OK
Close 11589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11590 NT_STATUS_OK
ReadX 11590 0 4096 4096 NT_STATUS_OK
WriteX 11590 0 4096 4096 NT_STATUS_OK
Flush 11590 NT_STATUS_OK
SET_FILE_INFORMATION 11590 1004 NT_STATUS_OK
WriteX 11590 0 4096 4096 NT_STATUS_OK
Flush 11590 NT_STATUS_OK
Close 11590 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11591 NT_STATUS_OK
SET_FILE_INFORMATION 11591 1004 NT_STATUS_OK
Close 11591 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11592 NT_STATUS_OK
ReadX 11592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11593 NT_STATUS_OK
Close 11593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11596 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11596 0 4096 4096 NT_STATUS_OK
Close 11596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11597 NT_STATUS_OK
ReadX 11597 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11597 4096 4096 4096 NT_STATUS_OK
ReadX 11597 8192 4096 4096 NT_STATUS_OK
ReadX 11597 12288 4096 4096 NT_STATUS_OK
ReadX 11597 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11592 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11598 NT_STATUS_OK
ReadX 11598 0 4096 4096 NT_STATUS_OK
Close 11598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11599 NT_STATUS_OK
ReadX 11599 0 4096 4096 NT_STATUS_OK
Close 11599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11600 NT_STATUS_OK
ReadX 11600 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11600 1004 NT_STATUS_OK
WriteX 11600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11601 NT_STATUS_OK
Close 11601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11597 NT_STATUS_OK
Close 11600 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11603 NT_STATUS_OK
Close 11603 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 27747 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11606 NT_STATUS_OK
WriteX 11606 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11606 258 NT_STATUS_OK
WriteX 11606 0 65536 65536 NT_STATUS_OK
WriteX 11606 65536 11540 11540 NT_STATUS_OK
Close 11606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11607 NT_STATUS_OK
ReadX 11607 0 4096 4096 NT_STATUS_OK
WriteX 11607 0 4096 4096 NT_STATUS_OK
Flush 11607 NT_STATUS_OK
SET_FILE_INFORMATION 11607 1004 NT_STATUS_OK
WriteX 11607 0 4096 4096 NT_STATUS_OK
Flush 11607 NT_STATUS_OK
Close 11607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11608 NT_STATUS_OK
SET_FILE_INFORMATION 11608 1004 NT_STATUS_OK
Close 11608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11609 NT_STATUS_OK
ReadX 11609 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11610 NT_STATUS_OK
Close 11610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11612 NT_STATUS_OK
ReadX 11612 61440 4096 4096 NT_STATUS_OK
ReadX 11612 126976 4096 4096 NT_STATUS_OK
WriteX 11612 0 65536 65536 NT_STATUS_OK
WriteX 11612 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11613 NT_STATUS_OK
ReadX 11613 61440 4096 4096 NT_STATUS_OK
ReadX 11613 126976 4096 4096 NT_STATUS_OK
ReadX 11613 192512 4096 4096 NT_STATUS_OK
ReadX 11613 258048 4096 4096 NT_STATUS_OK
WriteX 11613 0 65536 65536 NT_STATUS_OK
WriteX 11613 65536 65536 65536 NT_STATUS_OK
WriteX 11613 131072 65536 65536 NT_STATUS_OK
WriteX 11613 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11614 NT_STATUS_OK
ReadX 11614 61440 4096 4096 NT_STATUS_OK
ReadX 11614 126976 4096 4096 NT_STATUS_OK
ReadX 11614 192512 4096 4096 NT_STATUS_OK
ReadX 11614 258048 4096 4096 NT_STATUS_OK
ReadX 11614 323584 4096 4096 NT_STATUS_OK
ReadX 11614 389120 4096 4096 NT_STATUS_OK
ReadX 11614 454656 4096 4096 NT_STATUS_OK
ReadX 11614 520192 4096 4096 NT_STATUS_OK
WriteX 11614 0 65536 65536 NT_STATUS_OK
WriteX 11614 65536 65536 65536 NT_STATUS_OK
WriteX 11614 131072 65536 65536 NT_STATUS_OK
WriteX 11614 196608 65536 65536 NT_STATUS_OK
WriteX 11614 262144 65536 65536 NT_STATUS_OK
WriteX 11614 327680 65536 65536 NT_STATUS_OK
WriteX 11614 393216 65536 65536 NT_STATUS_OK
WriteX 11614 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11615 NT_STATUS_OK
ReadX 11615 0 4096 4096 NT_STATUS_OK
ReadX 11615 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11616 NT_STATUS_OK
WriteX 11616 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11616 258 NT_STATUS_OK
WriteX 11616 0 53 53 NT_STATUS_OK
Close 11616 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11617 NT_STATUS_OK
Close 11617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11609 NT_STATUS_OK
Close 11555 NT_STATUS_OK
Close 11612 NT_STATUS_OK
Close 11613 NT_STATUS_OK
Close 11614 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11615 8192 4096 4096 NT_STATUS_OK
ReadX 11615 12288 4096 4096 NT_STATUS_OK
WriteX 11619 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11619 258 NT_STATUS_OK
ReadX 11615 16384 4096 4096 NT_STATUS_OK
ReadX 11615 20480 4096 4096 NT_STATUS_OK
WriteX 11619 0 15360 15360 NT_STATUS_OK
Close 11619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11620 NT_STATUS_OK
ReadX 11620 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11620 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11620 1004 NT_STATUS_OK
WriteX 11620 0 4096 4096 NT_STATUS_OK
Close 11620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11621 NT_STATUS_OK
Close 11621 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11623 NT_STATUS_OK
ReadX 11623 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11624 NT_STATUS_OK
Close 11624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11623 4096 4096 4096 NT_STATUS_OK
ReadX 11623 8192 4096 4096 NT_STATUS_OK
ReadX 11623 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11626 NT_STATUS_OK
ReadX 11626 0 4096 4096 NT_STATUS_OK
ReadX 11626 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11627 NT_STATUS_OK
ReadX 11627 0 4096 4096 NT_STATUS_OK
ReadX 11627 4096 4096 4096 NT_STATUS_OK
ReadX 11627 8192 4096 4096 NT_STATUS_OK
Close 11626 NT_STATUS_OK
Close 11627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11628 NT_STATUS_OK
WriteX 11628 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11628 258 NT_STATUS_OK
WriteX 11628 0 15360 15360 NT_STATUS_OK
Close 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11629 NT_STATUS_OK
ReadX 11629 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11629 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11629 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11630 NT_STATUS_OK
Close 11630 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11632 NT_STATUS_OK
ReadX 11632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11633 NT_STATUS_OK
SET_FILE_INFORMATION 11633 1004 NT_STATUS_OK
Close 11633 NT_STATUS_OK
WriteX 11629 0 4096 4096 NT_STATUS_OK
Close 11629 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11634 NT_STATUS_OK
Close 11634 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11636 NT_STATUS_OK
ReadX 11636 0 4096 4096 NT_STATUS_OK
ReadX 11636 4096 4096 4096 NT_STATUS_OK
ReadX 11636 8192 4096 4096 NT_STATUS_OK
ReadX 11636 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11636 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11636 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11637 NT_STATUS_OK
ReadX 11637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11638 NT_STATUS_OK
WriteX 11638 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11638 258 NT_STATUS_OK
WriteX 11638 0 53 53 NT_STATUS_OK
Close 11638 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11639 NT_STATUS_OK
Close 11639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11637 4096 4096 4096 NT_STATUS_OK
ReadX 11637 8192 4096 4096 NT_STATUS_OK
ReadX 11637 12288 4096 4096 NT_STATUS_OK
WriteX 11641 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11641 258 NT_STATUS_OK
WriteX 11641 0 12006 12006 NT_STATUS_OK
Close 11641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11642 NT_STATUS_OK
ReadX 11642 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11642 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11642 1004 NT_STATUS_OK
WriteX 11642 0 4096 4096 NT_STATUS_OK
Close 11642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11643 NT_STATUS_OK
Close 11643 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11645 NT_STATUS_OK
ReadX 11645 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11646 NT_STATUS_OK
Close 11646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11645 4096 4096 4096 NT_STATUS_OK
ReadX 11645 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11648 NT_STATUS_OK
WriteX 11648 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11648 258 NT_STATUS_OK
WriteX 11648 0 11991 11991 NT_STATUS_OK
Close 11648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11649 NT_STATUS_OK
ReadX 11649 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11649 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11649 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11650 NT_STATUS_OK
Close 11650 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11652 NT_STATUS_OK
ReadX 11652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11653 NT_STATUS_OK
SET_FILE_INFORMATION 11653 1004 NT_STATUS_OK
Close 11653 NT_STATUS_OK
WriteX 11649 0 4096 4096 NT_STATUS_OK
Close 11649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11654 NT_STATUS_OK
Close 11654 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11656 NT_STATUS_OK
ReadX 11656 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11657 NT_STATUS_OK
Close 11657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11656 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11656 1004 NT_STATUS_OK
ReadX 11656 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11656 1004 NT_STATUS_OK
WriteX 11656 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11656 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11656 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11656 1004 NT_STATUS_OK
Close 11632 NT_STATUS_OK
WriteX 11636 0 19054 19054 NT_STATUS_OK
WriteX 11656 0 12288 12288 NT_STATUS_OK
Close 11652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11659 NT_STATUS_OK
Close 11659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11636 NT_STATUS_OK
Close 11656 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11661 NT_STATUS_OK
Close 11661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11663 NT_STATUS_OK
ReadX 11663 0 61440 61440 NT_STATUS_OK
ReadX 11663 61440 4096 4096 NT_STATUS_OK
ReadX 11663 65536 61440 61440 NT_STATUS_OK
ReadX 11663 126976 4096 4096 NT_STATUS_OK
ReadX 11663 131072 61440 61440 NT_STATUS_OK
ReadX 11663 192512 4096 4096 NT_STATUS_OK
ReadX 11663 196608 61440 61440 NT_STATUS_OK
ReadX 11663 258048 4096 4096 NT_STATUS_OK
ReadX 11663 262144 61440 61440 NT_STATUS_OK
ReadX 11663 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11664 NT_STATUS_OK
ReadX 11664 0 61440 61440 NT_STATUS_OK
ReadX 11664 61440 4096 4096 NT_STATUS_OK
ReadX 11664 65536 61440 61440 NT_STATUS_OK
ReadX 11664 126976 4096 4096 NT_STATUS_OK
ReadX 11664 131072 61440 61440 NT_STATUS_OK
ReadX 11664 192512 4096 4096 NT_STATUS_OK
ReadX 11664 196608 61440 61440 NT_STATUS_OK
ReadX 11664 258048 4096 4096 NT_STATUS_OK
ReadX 11664 262144 61440 61440 NT_STATUS_OK
ReadX 11664 323584 4096 4096 NT_STATUS_OK
ReadX 11664 327680 61440 61440 NT_STATUS_OK
ReadX 11664 389120 4096 4096 NT_STATUS_OK
ReadX 11664 393216 61440 61440 NT_STATUS_OK
ReadX 11664 454656 4096 4096 NT_STATUS_OK
ReadX 11664 458752 61440 61440 NT_STATUS_OK
ReadX 11664 520192 4096 4096 NT_STATUS_OK
ReadX 11664 524288 61440 61440 NT_STATUS_OK
ReadX 11664 585728 4096 4096 NT_STATUS_OK
ReadX 11664 589824 61440 61440 NT_STATUS_OK
ReadX 11664 651264 4096 4096 NT_STATUS_OK
ReadX 11664 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11665 NT_STATUS_OK
ReadX 11665 0 61440 61440 NT_STATUS_OK
ReadX 11665 61440 4096 4096 NT_STATUS_OK
ReadX 11665 65536 61440 61440 NT_STATUS_OK
ReadX 11665 126976 4096 4096 NT_STATUS_OK
ReadX 11665 131072 61440 61440 NT_STATUS_OK
ReadX 11665 192512 4096 4096 NT_STATUS_OK
ReadX 11665 196608 61440 61440 NT_STATUS_OK
ReadX 11665 258048 4096 4096 NT_STATUS_OK
ReadX 11665 262144 61440 61440 NT_STATUS_OK
ReadX 11665 323584 4096 4096 NT_STATUS_OK
ReadX 11665 327680 61440 61440 NT_STATUS_OK
ReadX 11665 389120 4096 4096 NT_STATUS_OK
ReadX 11665 393216 61440 61440 NT_STATUS_OK
ReadX 11665 454656 4096 4096 NT_STATUS_OK
ReadX 11665 458752 61440 61440 NT_STATUS_OK
ReadX 11665 520192 4096 4096 NT_STATUS_OK
ReadX 11665 524288 61440 61440 NT_STATUS_OK
ReadX 11665 585728 4096 4096 NT_STATUS_OK
ReadX 11665 589824 61440 61440 NT_STATUS_OK
ReadX 11665 651264 4096 4096 NT_STATUS_OK
ReadX 11665 655360 61440 61440 NT_STATUS_OK
ReadX 11665 716800 4096 4096 NT_STATUS_OK
ReadX 11665 720896 61440 61440 NT_STATUS_OK
ReadX 11665 782336 4096 4096 NT_STATUS_OK
ReadX 11665 786432 61440 61440 NT_STATUS_OK
ReadX 11665 847872 4096 4096 NT_STATUS_OK
ReadX 11665 851968 61440 61440 NT_STATUS_OK
ReadX 11665 913408 4096 4096 NT_STATUS_OK
ReadX 11665 917504 61440 61440 NT_STATUS_OK
ReadX 11665 978944 4096 4096 NT_STATUS_OK
ReadX 11665 983040 61440 61440 NT_STATUS_OK
ReadX 11665 1044480 4096 4096 NT_STATUS_OK
ReadX 11665 1048576 61440 61440 NT_STATUS_OK
ReadX 11665 1110016 4096 4096 NT_STATUS_OK
ReadX 11665 1114112 61440 61440 NT_STATUS_OK
ReadX 11665 1175552 4096 4096 NT_STATUS_OK
ReadX 11665 1179648 61440 61440 NT_STATUS_OK
ReadX 11665 1241088 4096 4096 NT_STATUS_OK
ReadX 11665 1245184 61440 61440 NT_STATUS_OK
ReadX 11665 1306624 4096 4096 NT_STATUS_OK
ReadX 11665 1310720 61440 61440 NT_STATUS_OK
ReadX 11665 1372160 4096 4096 NT_STATUS_OK
ReadX 11665 1376256 61440 61440 NT_STATUS_OK
ReadX 11665 1437696 4096 4096 NT_STATUS_OK
ReadX 11665 1441792 61440 61440 NT_STATUS_OK
ReadX 11665 1503232 4096 4096 NT_STATUS_OK
ReadX 11665 1507328 61440 61440 NT_STATUS_OK
ReadX 11665 1568768 4096 4096 NT_STATUS_OK
ReadX 11665 1572864 61440 61440 NT_STATUS_OK
ReadX 11665 1634304 4096 4096 NT_STATUS_OK
ReadX 11665 1638400 61440 61440 NT_STATUS_OK
ReadX 11665 1699840 4096 4096 NT_STATUS_OK
ReadX 11665 1703936 61440 61440 NT_STATUS_OK
ReadX 11665 1765376 4096 4096 NT_STATUS_OK
ReadX 11665 1769472 61440 61440 NT_STATUS_OK
ReadX 11665 1830912 4096 4096 NT_STATUS_OK
ReadX 11665 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11666 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11668 NT_STATUS_OK
ReadX 11668 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11669 NT_STATUS_OK
ReadX 11669 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11670 NT_STATUS_OK
ReadX 11670 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11671 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11672 NT_STATUS_OK
QUERY_FILE_INFORMATION 11672 1004 NT_STATUS_OK
WriteX 11672 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11672 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11673 NT_STATUS_OK
Close 11673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11674 NT_STATUS_OK
WriteX 11674 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11674 258 NT_STATUS_OK
WriteX 11674 0 491 491 NT_STATUS_OK
Close 11674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11675 NT_STATUS_OK
ReadX 11675 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11672 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11677 NT_STATUS_OK
Close 11677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11678 NT_STATUS_OK
WriteX 11678 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11678 258 NT_STATUS_OK
WriteX 11678 0 543 543 NT_STATUS_OK
Close 11678 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11679 NT_STATUS_OK
ReadX 11679 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11663 NT_STATUS_OK
Close 11664 NT_STATUS_OK
Close 11665 NT_STATUS_OK
Close 11679 NT_STATUS_OK
Close 11667 NT_STATUS_OK
Close 11668 NT_STATUS_OK
Close 11669 NT_STATUS_OK
Close 11670 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11682 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11684 NT_STATUS_OK
ReadX 11684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11685 NT_STATUS_OK
ReadX 11685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11686 NT_STATUS_OK
ReadX 11686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11687 NT_STATUS_OK
ReadX 11687 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11691 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11692 NT_STATUS_OK
QUERY_FILE_INFORMATION 11692 1004 NT_STATUS_OK
WriteX 11692 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11692 258 NT_STATUS_OK
WriteX 11692 0 2048 2048 NT_STATUS_OK
Close 11692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11693 NT_STATUS_OK
ReadX 11693 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11693 0 4096 4096 NT_STATUS_OK
Flush 11693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11693 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11698 NT_STATUS_OK
WriteX 11698 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11698 258 NT_STATUS_OK
WriteX 11698 0 2048 2048 NT_STATUS_OK
Close 11698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11699 NT_STATUS_OK
ReadX 11699 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11703 NT_STATUS_OK
Close 11703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11704 NT_STATUS_OK
WriteX 11704 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11704 258 NT_STATUS_OK
WriteX 11704 0 2048 2048 NT_STATUS_OK
Close 11704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11705 NT_STATUS_OK
ReadX 11705 0 2048 2048 NT_STATUS_OK
ReadX 11683 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11687 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11699 0 4096 4096 NT_STATUS_OK
WriteX 11683 0 8192 8192 NT_STATUS_OK
WriteX 11684 0 4096 4096 NT_STATUS_OK
WriteX 11685 0 4096 4096 NT_STATUS_OK
ReadX 11699 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11708 NT_STATUS_OK
ReadX 11708 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11709 NT_STATUS_OK
QUERY_FILE_INFORMATION 11709 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11708 NT_STATUS_OK
Close 11684 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Close 11686 NT_STATUS_OK
Close 11699 NT_STATUS_OK
Close 11683 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11711 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11712 NT_STATUS_OK
ReadX 11712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11713 NT_STATUS_OK
ReadX 11713 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11714 NT_STATUS_OK
ReadX 11714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11715 NT_STATUS_OK
ReadX 11715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11716 NT_STATUS_OK
ReadX 11716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11717 NT_STATUS_OK
ReadX 11717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11718 NT_STATUS_OK
ReadX 11718 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11719 NT_STATUS_OK
ReadX 11719 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11720 NT_STATUS_OK
ReadX 11720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11721 NT_STATUS_OK
ReadX 11721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11722 NT_STATUS_OK
ReadX 11722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11723 NT_STATUS_OK
ReadX 11723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11724 NT_STATUS_OK
ReadX 11724 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11728 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11728 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11729 NT_STATUS_OK
QUERY_FILE_INFORMATION 11729 1004 NT_STATUS_OK
WriteX 11729 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11729 258 NT_STATUS_OK
WriteX 11729 0 2048 2048 NT_STATUS_OK
Close 11729 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11730 NT_STATUS_OK
ReadX 11730 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11731 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11732 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11732 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11736 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11737 NT_STATUS_OK
QUERY_FILE_INFORMATION 11737 1004 NT_STATUS_OK
WriteX 11737 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11737 258 NT_STATUS_OK
WriteX 11737 0 2048 2048 NT_STATUS_OK
Close 11737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11738 NT_STATUS_OK
ReadX 11738 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11730 0 4096 4096 NT_STATUS_OK
Flush 11730 NT_STATUS_OK
WriteX 11738 0 4096 4096 NT_STATUS_OK
Flush 11738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11730 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11738 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11732 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11740 NT_STATUS_OK
WriteX 11740 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11740 258 NT_STATUS_OK
WriteX 11740 0 4096 4096 NT_STATUS_OK
Close 11740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11741 NT_STATUS_OK
ReadX 11741 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11742 NT_STATUS_OK
Close 11742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11743 NT_STATUS_OK
WriteX 11743 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11743 258 NT_STATUS_OK
WriteX 11743 0 4096 4096 NT_STATUS_OK
Close 11743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11744 NT_STATUS_OK
ReadX 11744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11744 0 4096 4096 NT_STATUS_OK
Close 11741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11724 NT_STATUS_OK
Close 11718 NT_STATUS_OK
Close 11732 NT_STATUS_OK
Close 11721 NT_STATUS_OK
Close 11722 NT_STATUS_OK
Close 11723 NT_STATUS_OK
Close 11719 NT_STATUS_OK
Close 11712 NT_STATUS_OK
Close 11713 NT_STATUS_OK
Close 11716 NT_STATUS_OK
Close 11717 NT_STATUS_OK
Close 11714 NT_STATUS_OK
Close 11715 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11747 NT_STATUS_OK
Close 11747 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11749 NT_STATUS_OK
ReadX 11749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11750 NT_STATUS_OK
Close 11750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11751 NT_STATUS_OK
WriteX 11751 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11751 258 NT_STATUS_OK
WriteX 11751 0 2048 2048 NT_STATUS_OK
Close 11751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11753 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11754 NT_STATUS_OK
ReadX 11754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11755 NT_STATUS_OK
ReadX 11755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11756 NT_STATUS_OK
ReadX 11756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11758 NT_STATUS_OK
ReadX 11758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11760 NT_STATUS_OK
ReadX 11760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11761 NT_STATUS_OK
ReadX 11761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11762 NT_STATUS_OK
ReadX 11762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11763 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11764 NT_STATUS_OK
ReadX 11764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11765 NT_STATUS_OK
ReadX 11765 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11766 NT_STATUS_OK
QUERY_FILE_INFORMATION 11766 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11749 NT_STATUS_OK
Close 11752 NT_STATUS_OK
Close 11764 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Close 11760 NT_STATUS_OK
Close 11761 NT_STATUS_OK
Close 11762 NT_STATUS_OK
Close 11763 NT_STATUS_OK
Close 11765 NT_STATUS_OK
Close 11753 NT_STATUS_OK
Close 11754 NT_STATUS_OK
Close 11757 NT_STATUS_OK
Close 11758 NT_STATUS_OK
Close 11755 NT_STATUS_OK
Close 11756 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11768 NT_STATUS_OK
QUERY_FILE_INFORMATION 11768 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11770 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11771 NT_STATUS_OK
ReadX 11771 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11772 NT_STATUS_OK
ReadX 11772 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11773 NT_STATUS_OK
ReadX 11773 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11774 NT_STATUS_OK
ReadX 11774 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11775 NT_STATUS_OK
ReadX 11775 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11776 NT_STATUS_OK
ReadX 11776 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11777 NT_STATUS_OK
ReadX 11777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11778 NT_STATUS_OK
ReadX 11778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11779 NT_STATUS_OK
ReadX 11779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11780 NT_STATUS_OK
ReadX 11780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11781 NT_STATUS_OK
ReadX 11781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11782 NT_STATUS_OK
ReadX 11782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11783 NT_STATUS_OK
ReadX 11783 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11787 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11788 NT_STATUS_OK
QUERY_FILE_INFORMATION 11788 1004 NT_STATUS_OK
WriteX 11788 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11788 258 NT_STATUS_OK
WriteX 11788 0 2048 2048 NT_STATUS_OK
Close 11788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11789 NT_STATUS_OK
ReadX 11789 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11790 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11791 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11792 NT_STATUS_OK
ReadX 11792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11793 NT_STATUS_OK
ReadX 11793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11794 NT_STATUS_OK
ReadX 11794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11795 NT_STATUS_OK
ReadX 11795 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11799 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11800 NT_STATUS_OK
QUERY_FILE_INFORMATION 11800 1004 NT_STATUS_OK
WriteX 11800 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11800 258 NT_STATUS_OK
WriteX 11800 0 2048 2048 NT_STATUS_OK
Close 11800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11801 NT_STATUS_OK
ReadX 11801 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
Close 11776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11802 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11803 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11803 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11807 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11808 NT_STATUS_OK
QUERY_FILE_INFORMATION 11808 1004 NT_STATUS_OK
WriteX 11808 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11808 258 NT_STATUS_OK
WriteX 11808 0 2048 2048 NT_STATUS_OK
Close 11808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11809 NT_STATUS_OK
ReadX 11809 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11789 0 4096 4096 NT_STATUS_OK
Flush 11789 NT_STATUS_OK
WriteX 11801 0 4096 4096 NT_STATUS_OK
Flush 11801 NT_STATUS_OK
WriteX 11809 0 4096 4096 NT_STATUS_OK
Flush 11809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11789 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11801 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11809 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11791 4096 16384 16384 NT_STATUS_OK
ReadX 11771 4096 16384 16384 NT_STATUS_OK
ReadX 11803 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11810 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11811 NT_STATUS_OK
ReadX 11811 0 2048 2048 NT_STATUS_OK
WriteX 11811 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11789 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11812 NT_STATUS_OK
QUERY_FILE_INFORMATION 11812 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11811 NT_STATUS_OK
Close 11795 NT_STATUS_OK
Close 11783 NT_STATUS_OK
Close 11775 NT_STATUS_OK
Close 11791 NT_STATUS_OK
Close 11792 NT_STATUS_OK
Close 11793 NT_STATUS_OK
Close 11794 NT_STATUS_OK
Close 11782 NT_STATUS_OK
Close 11803 NT_STATUS_OK
Close 11777 NT_STATUS_OK
Close 11780 NT_STATUS_OK
Close 11781 NT_STATUS_OK
Close 11778 NT_STATUS_OK
Close 11779 NT_STATUS_OK
Close 11771 NT_STATUS_OK
Close 11772 NT_STATUS_OK
Close 11773 NT_STATUS_OK
Close 11774 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11814 NT_STATUS_OK
QUERY_FILE_INFORMATION 11814 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11816 NT_STATUS_OK
QUERY_FILE_INFORMATION 11816 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11818 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11819 NT_STATUS_OK
ReadX 11819 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11820 NT_STATUS_OK
ReadX 11820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11821 NT_STATUS_OK
ReadX 11821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11822 NT_STATUS_OK
ReadX 11822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11823 NT_STATUS_OK
ReadX 11823 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11819 4096 16384 16384 NT_STATUS_OK
WriteX 11819 0 4096 4096 NT_STATUS_OK
WriteX 11820 0 4096 4096 NT_STATUS_OK
WriteX 11821 0 4096 4096 NT_STATUS_OK
WriteX 11822 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11824 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11824 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11825 NT_STATUS_OK
ReadX 11825 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11826 NT_STATUS_OK
ReadX 11826 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11827 NT_STATUS_OK
ReadX 11827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11828 NT_STATUS_OK
ReadX 11828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11829 NT_STATUS_OK
ReadX 11829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11830 NT_STATUS_OK
ReadX 11830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11831 NT_STATUS_OK
ReadX 11831 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11832 NT_STATUS_OK
ReadX 11832 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11833 NT_STATUS_OK
ReadX 11833 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11834 NT_STATUS_OK
ReadX 11834 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11835 NT_STATUS_OK
ReadX 11835 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11836 NT_STATUS_OK
ReadX 11836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11837 NT_STATUS_OK
ReadX 11837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11838 NT_STATUS_OK
ReadX 11838 0 8192 8192 NT_STATUS_OK
ReadX 11825 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11839 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11839 0 4096 4096 NT_STATUS_OK
ReadX 11839 4096 4096 4096 NT_STATUS_OK
ReadX 11839 8192 4096 4096 NT_STATUS_OK
WriteX 11825 0 4096 4096 NT_STATUS_OK
WriteX 11826 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11840 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11840 0 4096 4096 NT_STATUS_OK
ReadX 11840 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11819 0 4096 4096 NT_STATUS_OK
WriteX 11820 0 4096 4096 NT_STATUS_OK
WriteX 11821 0 4096 4096 NT_STATUS_OK
WriteX 11822 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11844 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11845 NT_STATUS_OK
QUERY_FILE_INFORMATION 11845 1004 NT_STATUS_OK
WriteX 11845 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11845 258 NT_STATUS_OK
WriteX 11845 0 2048 2048 NT_STATUS_OK
Close 11845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11846 NT_STATUS_OK
ReadX 11846 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11846 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11846 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11847 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11848 NT_STATUS_OK
ReadX 11848 0 4096 4096 NT_STATUS_OK
ReadX 11848 4096 4096 4096 NT_STATUS_OK
WriteX 11848 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11846 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11848 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11849 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11850 NT_STATUS_OK
ReadX 11850 0 4096 4096 NT_STATUS_OK
ReadX 11850 4096 4096 4096 NT_STATUS_OK
WriteX 11850 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11851 NT_STATUS_OK
QUERY_FILE_INFORMATION 11851 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11838 NT_STATUS_OK
Close 11823 NT_STATUS_OK
Close 11819 NT_STATUS_OK
Close 11820 NT_STATUS_OK
Close 11821 NT_STATUS_OK
Close 11822 NT_STATUS_OK
Close 11831 NT_STATUS_OK
Close 11836 NT_STATUS_OK
Close 11832 NT_STATUS_OK
Close 11833 NT_STATUS_OK
Close 11834 NT_STATUS_OK
Close 11835 NT_STATUS_OK
Close 11837 NT_STATUS_OK
Close 11825 NT_STATUS_OK
Close 11826 NT_STATUS_OK
Close 11829 NT_STATUS_OK
Close 11830 NT_STATUS_OK
Close 11827 NT_STATUS_OK
Close 11828 NT_STATUS_OK
Close 11850 NT_STATUS_OK
Close 11839 NT_STATUS_OK
Close 11840 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11853 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11853 0 4096 4096 NT_STATUS_OK
ReadX 11853 4096 4096 4096 NT_STATUS_OK
ReadX 11853 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11854 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11855 NT_STATUS_OK
ReadX 11855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11856 NT_STATUS_OK
ReadX 11856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11857 NT_STATUS_OK
ReadX 11857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11858 NT_STATUS_OK
ReadX 11858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11859 NT_STATUS_OK
ReadX 11859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11860 NT_STATUS_OK
ReadX 11860 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11861 NT_STATUS_OK
ReadX 11861 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11862 NT_STATUS_OK
ReadX 11862 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11863 NT_STATUS_OK
ReadX 11863 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11864 NT_STATUS_OK
ReadX 11864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11865 NT_STATUS_OK
ReadX 11865 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11866 NT_STATUS_OK
ReadX 11866 0 4096 4096 NT_STATUS_OK
ReadX 11854 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11870 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11870 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11871 NT_STATUS_OK
QUERY_FILE_INFORMATION 11871 1004 NT_STATUS_OK
WriteX 11871 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11871 258 NT_STATUS_OK
WriteX 11871 0 2048 2048 NT_STATUS_OK
Close 11871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11872 NT_STATUS_OK
ReadX 11872 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11872 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11876 NT_STATUS_OK
Close 11876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11877 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 1004 NT_STATUS_OK
WriteX 11877 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 258 NT_STATUS_OK
WriteX 11877 0 2048 2048 NT_STATUS_OK
Close 11877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11878 NT_STATUS_OK
ReadX 11878 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11878 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11861 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11879 NT_STATUS_OK
QUERY_FILE_INFORMATION 11879 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11865 NT_STATUS_OK
Close 11860 NT_STATUS_OK
Close 11866 NT_STATUS_OK
Close 11854 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Close 11858 NT_STATUS_OK
Close 11859 NT_STATUS_OK
Close 11856 NT_STATUS_OK
Close 11857 NT_STATUS_OK
Close 11861 NT_STATUS_OK
Close 11862 NT_STATUS_OK
Close 11863 NT_STATUS_OK
Close 11864 NT_STATUS_OK
Close 11853 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11881 NT_STATUS_OK
QUERY_FILE_INFORMATION 11881 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11883 NT_STATUS_OK
ReadX 11883 61440 4096 4096 NT_STATUS_OK
ReadX 11883 126976 4096 4096 NT_STATUS_OK
WriteX 11883 0 65536 65536 NT_STATUS_OK
WriteX 11883 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11884 NT_STATUS_OK
ReadX 11884 61440 4096 4096 NT_STATUS_OK
ReadX 11884 126976 4096 4096 NT_STATUS_OK
ReadX 11884 192512 4096 4096 NT_STATUS_OK
ReadX 11884 258048 4096 4096 NT_STATUS_OK
WriteX 11884 0 65536 65536 NT_STATUS_OK
WriteX 11884 65536 65536 65536 NT_STATUS_OK
WriteX 11884 131072 65536 65536 NT_STATUS_OK
WriteX 11884 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11885 NT_STATUS_OK
ReadX 11885 61440 4096 4096 NT_STATUS_OK
ReadX 11885 126976 4096 4096 NT_STATUS_OK
ReadX 11885 192512 4096 4096 NT_STATUS_OK
ReadX 11885 258048 4096 4096 NT_STATUS_OK
ReadX 11885 323584 4096 4096 NT_STATUS_OK
ReadX 11885 389120 4096 4096 NT_STATUS_OK
ReadX 11885 454656 4096 4096 NT_STATUS_OK
ReadX 11885 520192 4096 4096 NT_STATUS_OK
WriteX 11885 0 65536 65536 NT_STATUS_OK
WriteX 11885 65536 65536 65536 NT_STATUS_OK
WriteX 11885 131072 65536 65536 NT_STATUS_OK
WriteX 11885 196608 65536 65536 NT_STATUS_OK
WriteX 11885 262144 65536 65536 NT_STATUS_OK
WriteX 11885 327680 65536 65536 NT_STATUS_OK
WriteX 11885 393216 65536 65536 NT_STATUS_OK
WriteX 11885 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11886 NT_STATUS_OK
ReadX 11886 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11886 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11886 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11886 8192 4096 4096 NT_STATUS_OK
ReadX 11886 12288 4096 4096 NT_STATUS_OK
ReadX 11886 16384 4096 4096 NT_STATUS_OK
ReadX 11886 20480 4096 4096 NT_STATUS_OK
ReadX 11886 24576 4096 4096 NT_STATUS_OK
ReadX 11886 28672 4096 4096 NT_STATUS_OK
ReadX 11886 32768 4096 4096 NT_STATUS_OK
ReadX 11886 36864 4096 4096 NT_STATUS_OK
ReadX 11886 40960 4096 4096 NT_STATUS_OK
ReadX 11886 45056 4096 4096 NT_STATUS_OK
ReadX 11886 49152 4096 4096 NT_STATUS_OK
ReadX 11886 53248 4096 4096 NT_STATUS_OK
ReadX 11886 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11886 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11887 NT_STATUS_OK
Close 11887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11883 NT_STATUS_OK
Close 11884 NT_STATUS_OK
Close 11885 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11889 NT_STATUS_OK
WriteX 11889 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11889 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11889 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11889 1004 NT_STATUS_OK
WriteX 11889 0 57088 57088 NT_STATUS_OK
WriteX 11889 0 4096 4096 NT_STATUS_OK
Flush 11889 NT_STATUS_OK
Close 11886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11890 NT_STATUS_OK
SET_FILE_INFORMATION 11890 1004 NT_STATUS_OK
Close 11890 NT_STATUS_OK
SET_FILE_INFORMATION 11889 1004 NT_STATUS_OK
WriteX 11889 0 4096 4096 NT_STATUS_OK
Close 11889 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11891 NT_STATUS_OK
Close 11891 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11893 NT_STATUS_OK
ReadX 11893 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11893 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11894 NT_STATUS_OK
WriteX 11894 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11894 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11894 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11894 1004 NT_STATUS_OK
WriteX 11894 0 51456 51456 NT_STATUS_OK
WriteX 11894 0 4096 4096 NT_STATUS_OK
Flush 11894 NT_STATUS_OK
SET_FILE_INFORMATION 11894 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11894 1004 NT_STATUS_OK
WriteX 11894 0 4096 4096 NT_STATUS_OK
Close 11894 NT_STATUS_OK
Close 11893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11896 NT_STATUS_OK
Close 11896 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11898 NT_STATUS_OK
ReadX 11898 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11898 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11900 NT_STATUS_OK
Close 11900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11903 NT_STATUS_OK
WriteX 11903 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11903 258 NT_STATUS_OK
WriteX 11903 0 53077 53077 NT_STATUS_OK
Close 11903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11904 NT_STATUS_OK
WriteX 11904 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11904 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11904 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11904 1004 NT_STATUS_OK
WriteX 11904 0 65536 65536 NT_STATUS_OK
WriteX 11904 65536 1856 1856 NT_STATUS_OK
WriteX 11904 0 4096 4096 NT_STATUS_OK
Flush 11904 NT_STATUS_OK
SET_FILE_INFORMATION 11904 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11904 1004 NT_STATUS_OK
WriteX 11904 0 4096 4096 NT_STATUS_OK
Close 11904 NT_STATUS_OK
Close 11898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11906 NT_STATUS_OK
Close 11906 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11908 NT_STATUS_OK
ReadX 11908 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11910 NT_STATUS_OK
Close 11910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11913 NT_STATUS_OK
WriteX 11913 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11913 258 NT_STATUS_OK
WriteX 11913 0 7983 7983 NT_STATUS_OK
Close 11913 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11915 NT_STATUS_OK
Close 11915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11918 NT_STATUS_OK
WriteX 11918 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11918 258 NT_STATUS_OK
WriteX 11918 0 65536 65536 NT_STATUS_OK
WriteX 11918 65536 65536 65536 NT_STATUS_OK
WriteX 11918 131072 65536 65536 NT_STATUS_OK
WriteX 11918 196608 65536 65536 NT_STATUS_OK
WriteX 11918 262144 65536 65536 NT_STATUS_OK
WriteX 11918 327680 65536 65536 NT_STATUS_OK
WriteX 11918 393216 65536 65536 NT_STATUS_OK
WriteX 11918 458752 46731 46731 NT_STATUS_OK
Close 11918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11919 NT_STATUS_OK
WriteX 11919 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11919 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11908 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11919 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11919 1004 NT_STATUS_OK
WriteX 11919 0 65536 65536 NT_STATUS_OK
WriteX 11919 65536 22848 22848 NT_STATUS_OK
WriteX 11919 0 4096 4096 NT_STATUS_OK
Flush 11919 NT_STATUS_OK
SET_FILE_INFORMATION 11919 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11919 1004 NT_STATUS_OK
WriteX 11919 0 4096 4096 NT_STATUS_OK
Close 11919 NT_STATUS_OK
Close 11908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11921 NT_STATUS_OK
Close 11921 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11923 NT_STATUS_OK
ReadX 11923 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11923 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11924 NT_STATUS_OK
ReadX 11924 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11924 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11924 1004 NT_STATUS_OK
ReadX 11924 8192 4096 4096 NT_STATUS_OK
ReadX 11924 12288 4096 4096 NT_STATUS_OK
ReadX 11924 16384 4096 4096 NT_STATUS_OK
ReadX 11924 20480 4096 4096 NT_STATUS_OK
ReadX 11924 24576 4096 4096 NT_STATUS_OK
ReadX 11924 28672 4096 4096 NT_STATUS_OK
ReadX 11924 32768 4096 4096 NT_STATUS_OK
ReadX 11924 36864 4096 4096 NT_STATUS_OK
ReadX 11924 40960 4096 4096 NT_STATUS_OK
ReadX 11924 45056 4096 4096 NT_STATUS_OK
ReadX 11924 49152 4096 4096 NT_STATUS_OK
ReadX 11924 53248 4096 4096 NT_STATUS_OK
ReadX 11924 57344 4096 4096 NT_STATUS_OK
ReadX 11924 61440 4096 4096 NT_STATUS_OK
ReadX 11924 65536 4096 4096 NT_STATUS_OK
ReadX 11924 69632 4096 4096 NT_STATUS_OK
ReadX 11924 73728 4096 4096 NT_STATUS_OK
ReadX 11924 77824 4096 4096 NT_STATUS_OK
ReadX 11924 81920 4096 4096 NT_STATUS_OK
ReadX 11924 86016 4096 4096 NT_STATUS_OK
ReadX 11924 90112 4096 4096 NT_STATUS_OK
ReadX 11924 94208 4096 4096 NT_STATUS_OK
ReadX 11924 98304 4096 4096 NT_STATUS_OK
ReadX 11924 102400 4096 4096 NT_STATUS_OK
ReadX 11924 106496 4096 4096 NT_STATUS_OK
ReadX 11924 110592 4096 4096 NT_STATUS_OK
ReadX 11924 114688 4096 4096 NT_STATUS_OK
ReadX 11924 118784 4096 4096 NT_STATUS_OK
ReadX 11924 122880 4096 4096 NT_STATUS_OK
ReadX 11924 126976 4096 4096 NT_STATUS_OK
ReadX 11924 131072 4096 4096 NT_STATUS_OK
ReadX 11924 135168 4096 4096 NT_STATUS_OK
ReadX 11924 139264 4096 4096 NT_STATUS_OK
ReadX 11924 143360 4096 4096 NT_STATUS_OK
ReadX 11924 147456 4096 4096 NT_STATUS_OK
ReadX 11924 151552 4096 4096 NT_STATUS_OK
ReadX 11924 155648 4096 4096 NT_STATUS_OK
ReadX 11924 159744 4096 4096 NT_STATUS_OK
ReadX 11924 163840 4096 4096 NT_STATUS_OK
ReadX 11924 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11924 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11925 NT_STATUS_OK
Close 11925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11923 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11927 NT_STATUS_OK
WriteX 11927 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11927 258 NT_STATUS_OK
Close 11924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11928 NT_STATUS_OK
SET_FILE_INFORMATION 11928 1004 NT_STATUS_OK
Close 11928 NT_STATUS_OK
WriteX 11927 0 42388 42388 NT_STATUS_OK
Close 11927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11929 NT_STATUS_OK
Close 11929 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11931 NT_STATUS_OK
ReadX 11931 0 4096 4096 NT_STATUS_OK
ReadX 11931 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11932 NT_STATUS_OK
WriteX 11932 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11932 258 NT_STATUS_OK
SET_FILE_INFORMATION 11932 1004 NT_STATUS_OK
WriteX 11932 0 42652 42652 NT_STATUS_OK
Close 11932 NT_STATUS_OK
Close 11931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11934 NT_STATUS_OK
Close 11934 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11936 NT_STATUS_OK
ReadX 11936 0 4096 4096 NT_STATUS_OK
ReadX 11936 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11938 NT_STATUS_OK
Close 11938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11941 NT_STATUS_OK
WriteX 11941 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11941 258 NT_STATUS_OK
WriteX 11941 0 65536 65536 NT_STATUS_OK
WriteX 11941 65536 49 49 NT_STATUS_OK
Close 11941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11942 NT_STATUS_OK
ReadX 11942 0 61440 61440 NT_STATUS_OK
ReadX 11942 61440 4096 4096 NT_STATUS_OK
ReadX 11942 65536 61440 61440 NT_STATUS_OK
ReadX 11942 126976 4096 4096 NT_STATUS_OK
ReadX 11942 131072 61440 61440 NT_STATUS_OK
ReadX 11942 192512 4096 4096 NT_STATUS_OK
ReadX 11942 196608 61440 61440 NT_STATUS_OK
ReadX 11942 258048 4096 4096 NT_STATUS_OK
ReadX 11942 262144 61440 61440 NT_STATUS_OK
ReadX 11942 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11943 NT_STATUS_OK
ReadX 11943 0 61440 61440 NT_STATUS_OK
ReadX 11943 61440 4096 4096 NT_STATUS_OK
ReadX 11943 65536 61440 61440 NT_STATUS_OK
ReadX 11943 126976 4096 4096 NT_STATUS_OK
ReadX 11943 131072 61440 61440 NT_STATUS_OK
ReadX 11943 192512 4096 4096 NT_STATUS_OK
ReadX 11943 196608 61440 61440 NT_STATUS_OK
ReadX 11943 258048 4096 4096 NT_STATUS_OK
ReadX 11943 262144 61440 61440 NT_STATUS_OK
ReadX 11943 323584 4096 4096 NT_STATUS_OK
ReadX 11943 327680 61440 61440 NT_STATUS_OK
ReadX 11943 389120 4096 4096 NT_STATUS_OK
ReadX 11943 393216 61440 61440 NT_STATUS_OK
ReadX 11943 454656 4096 4096 NT_STATUS_OK
ReadX 11943 458752 61440 61440 NT_STATUS_OK
ReadX 11943 520192 4096 4096 NT_STATUS_OK
ReadX 11943 524288 61440 61440 NT_STATUS_OK
ReadX 11943 585728 4096 4096 NT_STATUS_OK
ReadX 11943 589824 61440 61440 NT_STATUS_OK
ReadX 11943 651264 4096 4096 NT_STATUS_OK
ReadX 11943 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11944 NT_STATUS_OK
ReadX 11944 0 61440 61440 NT_STATUS_OK
ReadX 11944 61440 4096 4096 NT_STATUS_OK
ReadX 11944 65536 61440 61440 NT_STATUS_OK
ReadX 11944 126976 4096 4096 NT_STATUS_OK
ReadX 11944 131072 61440 61440 NT_STATUS_OK
ReadX 11944 192512 4096 4096 NT_STATUS_OK
ReadX 11944 196608 61440 61440 NT_STATUS_OK
ReadX 11944 258048 4096 4096 NT_STATUS_OK
ReadX 11944 262144 61440 61440 NT_STATUS_OK
ReadX 11944 323584 4096 4096 NT_STATUS_OK
ReadX 11944 327680 61440 61440 NT_STATUS_OK
ReadX 11944 389120 4096 4096 NT_STATUS_OK
ReadX 11944 393216 61440 61440 NT_STATUS_OK
ReadX 11944 454656 4096 4096 NT_STATUS_OK
ReadX 11944 458752 61440 61440 NT_STATUS_OK
ReadX 11944 520192 4096 4096 NT_STATUS_OK
ReadX 11944 524288 61440 61440 NT_STATUS_OK
ReadX 11944 585728 4096 4096 NT_STATUS_OK
ReadX 11944 589824 61440 61440 NT_STATUS_OK
ReadX 11944 651264 4096 4096 NT_STATUS_OK
ReadX 11944 655360 61440 61440 NT_STATUS_OK
ReadX 11944 716800 4096 4096 NT_STATUS_OK
ReadX 11944 720896 61440 61440 NT_STATUS_OK
ReadX 11944 782336 4096 4096 NT_STATUS_OK
ReadX 11944 786432 61440 61440 NT_STATUS_OK
ReadX 11944 847872 4096 4096 NT_STATUS_OK
ReadX 11944 851968 61440 61440 NT_STATUS_OK
ReadX 11944 913408 4096 4096 NT_STATUS_OK
ReadX 11944 917504 61440 61440 NT_STATUS_OK
ReadX 11944 978944 4096 4096 NT_STATUS_OK
ReadX 11944 983040 61440 61440 NT_STATUS_OK
ReadX 11944 1044480 4096 4096 NT_STATUS_OK
ReadX 11944 1048576 61440 61440 NT_STATUS_OK
ReadX 11944 1110016 4096 4096 NT_STATUS_OK
ReadX 11944 1114112 61440 61440 NT_STATUS_OK
ReadX 11944 1175552 4096 4096 NT_STATUS_OK
ReadX 11944 1179648 61440 61440 NT_STATUS_OK
ReadX 11944 1241088 4096 4096 NT_STATUS_OK
ReadX 11944 1245184 61440 61440 NT_STATUS_OK
ReadX 11944 1306624 4096 4096 NT_STATUS_OK
ReadX 11944 1310720 61440 61440 NT_STATUS_OK
ReadX 11944 1372160 4096 4096 NT_STATUS_OK
ReadX 11944 1376256 61440 61440 NT_STATUS_OK
ReadX 11944 1437696 4096 4096 NT_STATUS_OK
ReadX 11944 1441792 61440 61440 NT_STATUS_OK
ReadX 11944 1503232 4096 4096 NT_STATUS_OK
ReadX 11944 1507328 61440 61440 NT_STATUS_OK
ReadX 11944 1568768 4096 4096 NT_STATUS_OK
ReadX 11944 1572864 61440 61440 NT_STATUS_OK
ReadX 11944 1634304 4096 4096 NT_STATUS_OK
ReadX 11944 1638400 61440 61440 NT_STATUS_OK
ReadX 11944 1699840 4096 4096 NT_STATUS_OK
ReadX 11944 1703936 61440 61440 NT_STATUS_OK
ReadX 11944 1765376 4096 4096 NT_STATUS_OK
ReadX 11944 1769472 61440 61440 NT_STATUS_OK
ReadX 11944 1830912 4096 4096 NT_STATUS_OK
ReadX 11944 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11945 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11946 NT_STATUS_OK
QUERY_FILE_INFORMATION 11946 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11946 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11946 1005 NT_STATUS_OK
ReadX 11946 2156 24 24 NT_STATUS_OK
ReadX 11946 2139 276 276 NT_STATUS_OK
ReadX 11946 2136 14 14 NT_STATUS_OK
ReadX 11946 2136 7 7 NT_STATUS_OK
ReadX 11946 2138 12 12 NT_STATUS_OK
ReadX 11946 2137 8 8 NT_STATUS_OK
ReadX 11946 2135 15 15 NT_STATUS_OK
ReadX 11946 0 16 16 NT_STATUS_OK
ReadX 11946 16 2048 2048 NT_STATUS_OK
ReadX 11946 2064 2048 2048 NT_STATUS_OK
ReadX 11946 257 2048 2048 NT_STATUS_OK
ReadX 11946 385 2048 2048 NT_STATUS_OK
ReadX 11946 513 2048 2048 NT_STATUS_OK
ReadX 11946 641 2048 2048 NT_STATUS_OK
ReadX 11946 769 2048 2048 NT_STATUS_OK
ReadX 11946 897 2048 2048 NT_STATUS_OK
ReadX 11946 1025 2048 2048 NT_STATUS_OK
ReadX 11946 1153 2048 2048 NT_STATUS_OK
ReadX 11946 1281 2048 2048 NT_STATUS_OK
ReadX 11946 1409 2048 2048 NT_STATUS_OK
ReadX 11946 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11948 NT_STATUS_OK
Close 11948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11942 NT_STATUS_OK
Close 11943 NT_STATUS_OK
Close 11944 NT_STATUS_OK
Close 11936 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11951 NT_STATUS_OK
WriteX 11951 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11951 258 NT_STATUS_OK
WriteX 11951 0 10575 10575 NT_STATUS_OK
Flush 11951 NT_STATUS_OK
Close 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11952 NT_STATUS_OK
Close 11952 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11954 NT_STATUS_OK
ReadX 11954 0 4096 4096 NT_STATUS_OK
Close 11946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11956 NT_STATUS_OK
LockX 11956 2147483538 1 NT_STATUS_OK
UnlockX 11956 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11956 1005 NT_STATUS_OK
ReadX 11956 0 512 512 NT_STATUS_OK
ReadX 11956 512 512 512 NT_STATUS_OK
ReadX 11956 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11956 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11956 1004 NT_STATUS_OK
Close 11956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11957 NT_STATUS_OK
QUERY_FILE_INFORMATION 11957 1005 NT_STATUS_OK
ReadX 11957 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11958 NT_STATUS_OK
LockX 11958 2147483538 1 NT_STATUS_OK
UnlockX 11958 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11958 1005 NT_STATUS_OK
ReadX 11958 0 512 512 NT_STATUS_OK
ReadX 11958 512 512 512 NT_STATUS_OK
ReadX 11958 1024 512 512 NT_STATUS_OK
ReadX 11958 288 20 20 NT_STATUS_OK
ReadX 11958 308 2084 2084 NT_STATUS_OK
ReadX 11958 388 2084 2084 NT_STATUS_OK
ReadX 11958 388 2084 2084 NT_STATUS_OK
ReadX 11945 2157 1386 1386 NT_STATUS_OK
ReadX 11958 2472 399 399 NT_STATUS_OK
ReadX 11958 3072 1536 1536 NT_STATUS_OK
ReadX 11958 544 149 149 NT_STATUS_OK
ReadX 11958 693 485 485 NT_STATUS_OK
Close 11958 NT_STATUS_OK
ReadX 11945 2157 4096 4096 NT_STATUS_OK
ReadX 11945 6253 4096 4096 NT_STATUS_OK
ReadX 11945 10349 4096 4096 NT_STATUS_OK
ReadX 11945 14445 4096 4096 NT_STATUS_OK
ReadX 11945 18541 4096 4096 NT_STATUS_OK
ReadX 11945 22637 256 256 NT_STATUS_OK
ReadX 11945 22893 4096 4096 NT_STATUS_OK
ReadX 11945 26989 4096 4096 NT_STATUS_OK
ReadX 11945 31085 4096 4096 NT_STATUS_OK
ReadX 11945 35181 4096 4096 NT_STATUS_OK
ReadX 11945 39277 4096 4096 NT_STATUS_OK
ReadX 11945 43373 4096 4096 NT_STATUS_OK
ReadX 11945 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11945 2157 1024 1024 NT_STATUS_OK
ReadX 11945 1667 4688 4688 NT_STATUS_OK
ReadX 11945 6355 3516 3516 NT_STATUS_OK
ReadX 11945 9871 16384 16384 NT_STATUS_OK
ReadX 11945 26255 3771 3771 NT_STATUS_OK
ReadX 11945 30026 2048 2048 NT_STATUS_OK
ReadX 11945 32074 1024 1024 NT_STATUS_OK
ReadX 11945 33098 6652 6652 NT_STATUS_OK
ReadX 11945 39750 16384 16384 NT_STATUS_OK
ReadX 11945 56134 10496 10496 NT_STATUS_OK
ReadX 11945 66630 1784 1784 NT_STATUS_OK
ReadX 11945 68414 90 90 NT_STATUS_OK
ReadX 11945 68504 273 273 NT_STATUS_OK
ReadX 11945 68777 1600 1600 NT_STATUS_OK
ReadX 11945 70377 640 640 NT_STATUS_OK
ReadX 11945 71017 1280 1280 NT_STATUS_OK
ReadX 11945 72297 8464 8464 NT_STATUS_OK
ReadX 11945 80761 158 158 NT_STATUS_OK
ReadX 11945 80919 912 912 NT_STATUS_OK
ReadX 11945 81831 1980 1980 NT_STATUS_OK
ReadX 11945 83811 2256 2256 NT_STATUS_OK
ReadX 11945 86067 400 400 NT_STATUS_OK
ReadX 11945 86467 252 252 NT_STATUS_OK
ReadX 11945 86719 42 42 NT_STATUS_OK
ReadX 11945 86761 725 725 NT_STATUS_OK
ReadX 11945 2009 512 512 NT_STATUS_OK
ReadX 11945 3895 9 9 NT_STATUS_OK
ReadX 11945 3781 46 46 NT_STATUS_OK
ReadX 11945 4059 92 92 NT_STATUS_OK
ReadX 11945 3781 92 92 NT_STATUS_OK
ReadX 11945 3986 184 184 NT_STATUS_OK
ReadX 11945 3987 16384 16384 NT_STATUS_OK
ReadX 11945 3902 16384 16384 NT_STATUS_OK
ReadX 11945 3781 10240 10240 NT_STATUS_OK
ReadX 11945 3821 16384 16384 NT_STATUS_OK
ReadX 11945 3891 935 935 NT_STATUS_OK
ReadX 11945 4060 10240 10240 NT_STATUS_OK
ReadX 11945 4059 184 184 NT_STATUS_OK
ReadX 11945 256 184 184 NT_STATUS_OK
ReadX 11945 256 1026 1026 NT_STATUS_OK
ReadX 11945 3901 326 326 NT_STATUS_OK
ReadX 11945 3899 652 652 NT_STATUS_OK
ReadX 11945 256 2 2 NT_STATUS_OK
ReadX 11945 258 4948 4948 NT_STATUS_OK
Close 11945 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11960 NT_STATUS_OK
Close 11960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11963 NT_STATUS_OK
WriteX 11963 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11963 258 NT_STATUS_OK
WriteX 11963 0 65536 65536 NT_STATUS_OK
WriteX 11963 65536 65536 65536 NT_STATUS_OK
WriteX 11963 131072 65536 65536 NT_STATUS_OK
WriteX 11963 196608 65536 65536 NT_STATUS_OK
WriteX 11963 262144 65536 65536 NT_STATUS_OK
WriteX 11963 327680 65536 65536 NT_STATUS_OK
WriteX 11963 393216 65536 65536 NT_STATUS_OK
WriteX 11963 458752 65536 65536 NT_STATUS_OK
WriteX 11963 524288 65536 65536 NT_STATUS_OK
WriteX 11963 589824 35257 35257 NT_STATUS_OK
Close 11963 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11965 NT_STATUS_OK
Close 11965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11968 NT_STATUS_OK
WriteX 11968 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11968 258 NT_STATUS_OK
WriteX 11968 0 65536 65536 NT_STATUS_OK
WriteX 11968 65536 65536 65536 NT_STATUS_OK
WriteX 11968 131072 65536 65536 NT_STATUS_OK
WriteX 11968 196608 65536 65536 NT_STATUS_OK
WriteX 11968 262144 65536 65536 NT_STATUS_OK
WriteX 11968 327680 65536 65536 NT_STATUS_OK
WriteX 11968 393216 65536 65536 NT_STATUS_OK
WriteX 11968 458752 65536 65536 NT_STATUS_OK
WriteX 11968 524288 65536 65536 NT_STATUS_OK
WriteX 11968 589824 57598 57598 NT_STATUS_OK
Close 11968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11970 NT_STATUS_OK
WriteX 11970 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11970 258 NT_STATUS_OK
WriteX 11970 0 12543 12543 NT_STATUS_OK
Flush 11970 NT_STATUS_OK
Close 11970 NT_STATUS_OK
Close 11954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11972 NT_STATUS_OK
Close 11972 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11974 NT_STATUS_OK
ReadX 11974 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11975 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11976 NT_STATUS_OK
QUERY_FILE_INFORMATION 11976 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11976 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11976 1005 NT_STATUS_OK
ReadX 11976 1938 24 24 NT_STATUS_OK
ReadX 11976 1920 276 276 NT_STATUS_OK
ReadX 11976 1918 14 14 NT_STATUS_OK
ReadX 11976 1918 7 7 NT_STATUS_OK
ReadX 11976 1919 12 12 NT_STATUS_OK
ReadX 11976 1919 8 8 NT_STATUS_OK
ReadX 11976 1917 15 15 NT_STATUS_OK
ReadX 11976 0 16 16 NT_STATUS_OK
ReadX 11976 16 2048 2048 NT_STATUS_OK
ReadX 11976 2064 2048 2048 NT_STATUS_OK
ReadX 11976 257 2048 2048 NT_STATUS_OK
ReadX 11976 385 2048 2048 NT_STATUS_OK
ReadX 11976 513 2048 2048 NT_STATUS_OK
ReadX 11976 641 2048 2048 NT_STATUS_OK
ReadX 11976 769 2048 2048 NT_STATUS_OK
ReadX 11976 897 2048 2048 NT_STATUS_OK
ReadX 11976 1025 2048 2048 NT_STATUS_OK
ReadX 11976 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11978 NT_STATUS_OK
Close 11978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11981 NT_STATUS_OK
WriteX 11981 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11981 258 NT_STATUS_OK
WriteX 11981 0 11588 11588 NT_STATUS_OK
Flush 11981 NT_STATUS_OK
Close 11981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11982 NT_STATUS_OK
Close 11982 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11984 NT_STATUS_OK
ReadX 11984 0 4096 4096 NT_STATUS_OK
Close 11976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11986 NT_STATUS_OK
WriteX 11986 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11986 258 NT_STATUS_OK
WriteX 11986 0 11615 11615 NT_STATUS_OK
Flush 11986 NT_STATUS_OK
Close 11986 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11988 NT_STATUS_OK
Close 11988 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11990 NT_STATUS_OK
ReadX 11990 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11992 NT_STATUS_OK
Close 11992 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11995 NT_STATUS_OK
WriteX 11995 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11995 258 NT_STATUS_OK
WriteX 11995 0 65536 65536 NT_STATUS_OK
WriteX 11995 65536 16050 16050 NT_STATUS_OK
Close 11995 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11975 1939 64 64 NT_STATUS_OK
ReadX 11975 128 248 248 NT_STATUS_OK
ReadX 11975 128 568 568 NT_STATUS_OK
ReadX 11975 3872 1536 1536 NT_STATUS_OK
ReadX 11975 3456 2560 2560 NT_STATUS_OK
ReadX 11975 3136 512 512 NT_STATUS_OK
ReadX 11975 2880 4096 4096 NT_STATUS_OK
ReadX 11975 3264 3072 3072 NT_STATUS_OK
ReadX 11975 320 4096 4096 NT_STATUS_OK
ReadX 11975 1024 4096 4096 NT_STATUS_OK
ReadX 11975 3616 4096 4096 NT_STATUS_OK
ReadX 11975 1939 64 64 NT_STATUS_OK
ReadX 11975 128 248 248 NT_STATUS_OK
ReadX 11975 128 608 608 NT_STATUS_OK
ReadX 11975 2858 1024 1024 NT_STATUS_OK
ReadX 11975 2810 4096 4096 NT_STATUS_OK
ReadX 11975 2826 4096 4096 NT_STATUS_OK
ReadX 11975 2580 2048 2048 NT_STATUS_OK
ReadX 11975 2800 2560 2560 NT_STATUS_OK
ReadX 11975 2100 4096 4096 NT_STATUS_OK
ReadX 11975 2084 4096 4096 NT_STATUS_OK
ReadX 11975 868 4096 4096 NT_STATUS_OK
ReadX 11975 2324 4096 4096 NT_STATUS_OK
ReadX 11975 884 4096 4096 NT_STATUS_OK
ReadX 11975 2604 1024 1024 NT_STATUS_OK
ReadX 11975 580 4096 4096 NT_STATUS_OK
ReadX 11975 596 4096 4096 NT_STATUS_OK
ReadX 11975 2752 4096 4096 NT_STATUS_OK
ReadX 11975 2842 1024 1024 NT_STATUS_OK
ReadX 11975 660 4096 4096 NT_STATUS_OK
ReadX 11975 2720 4096 4096 NT_STATUS_OK
ReadX 11975 2736 4096 4096 NT_STATUS_OK
ReadX 11975 628 4096 4096 NT_STATUS_OK
ReadX 11975 2704 4096 4096 NT_STATUS_OK
ReadX 11975 1556 4096 4096 NT_STATUS_OK
ReadX 11975 576 4096 4096 NT_STATUS_OK
ReadX 11975 3168 1536 1536 NT_STATUS_OK
ReadX 11975 832 4096 4096 NT_STATUS_OK
ReadX 11975 1088 4096 4096 NT_STATUS_OK
ReadX 11975 1344 4096 4096 NT_STATUS_OK
ReadX 11975 1600 4096 4096 NT_STATUS_OK
ReadX 11975 1856 4096 4096 NT_STATUS_OK
ReadX 11975 2112 4096 4096 NT_STATUS_OK
ReadX 11975 1892 4096 4096 NT_STATUS_OK
ReadX 11975 820 4096 4096 NT_STATUS_OK
ReadX 11975 788 4096 4096 NT_STATUS_OK
ReadX 11975 1604 4096 4096 NT_STATUS_OK
ReadX 11975 3648 4096 4096 NT_STATUS_OK
ReadX 11975 2608 4096 4096 NT_STATUS_OK
ReadX 11975 548 4096 4096 NT_STATUS_OK
ReadX 11975 740 4096 4096 NT_STATUS_OK
ReadX 11975 1344 4096 4096 NT_STATUS_OK
ReadX 11975 3392 4096 4096 NT_STATUS_OK
ReadX 11975 3904 4096 4096 NT_STATUS_OK
ReadX 11975 644 4096 4096 NT_STATUS_OK
ReadX 11975 676 4096 4096 NT_STATUS_OK
ReadX 11975 2688 4096 4096 NT_STATUS_OK
ReadX 11975 320 4096 4096 NT_STATUS_OK
ReadX 11975 900 4096 4096 NT_STATUS_OK
ReadX 11975 1908 4096 4096 NT_STATUS_OK
ReadX 11975 852 4096 4096 NT_STATUS_OK
ReadX 11975 724 4096 4096 NT_STATUS_OK
ReadX 11975 2292 4096 4096 NT_STATUS_OK
ReadX 11975 612 4096 4096 NT_STATUS_OK
ReadX 11975 388 4096 4096 NT_STATUS_OK
ReadX 11975 2368 4096 4096 NT_STATUS_OK
ReadX 11975 2624 4096 4096 NT_STATUS_OK
ReadX 11975 500 4096 4096 NT_STATUS_OK
ReadX 11975 356 4096 4096 NT_STATUS_OK
ReadX 11975 1024 4096 4096 NT_STATUS_OK
ReadX 11975 576 4096 4096 NT_STATUS_OK
ReadX 11975 340 4096 4096 NT_STATUS_OK
ReadX 11975 420 4096 4096 NT_STATUS_OK
ReadX 11975 1600 4096 4096 NT_STATUS_OK
ReadX 11975 404 4096 4096 NT_STATUS_OK
ReadX 11975 1428 4096 4096 NT_STATUS_OK
ReadX 11975 2656 4096 4096 NT_STATUS_OK
ReadX 11975 2624 4096 4096 NT_STATUS_OK
ReadX 11975 452 4096 4096 NT_STATUS_OK
ReadX 11975 692 4096 4096 NT_STATUS_OK
ReadX 11975 564 4096 4096 NT_STATUS_OK
ReadX 11975 372 4096 4096 NT_STATUS_OK
ReadX 11975 468 4096 4096 NT_STATUS_OK
ReadX 11975 484 4096 4096 NT_STATUS_OK
ReadX 11975 1088 4096 4096 NT_STATUS_OK
ReadX 11975 1924 4096 4096 NT_STATUS_OK
ReadX 11975 2768 4096 4096 NT_STATUS_OK
ReadX 11975 832 4096 4096 NT_STATUS_OK
ReadX 11975 836 4096 4096 NT_STATUS_OK
ReadX 11975 1856 4096 4096 NT_STATUS_OK
ReadX 11975 2640 4096 4096 NT_STATUS_OK
ReadX 11975 436 4096 4096 NT_STATUS_OK
ReadX 11975 1828 4096 4096 NT_STATUS_OK
ReadX 11975 804 4096 4096 NT_STATUS_OK
ReadX 11975 1860 4096 4096 NT_STATUS_OK
ReadX 11975 1812 4096 4096 NT_STATUS_OK
ReadX 11975 756 4096 4096 NT_STATUS_OK
ReadX 11975 1636 4096 4096 NT_STATUS_OK
ReadX 11975 772 4096 4096 NT_STATUS_OK
ReadX 11975 2036 4096 4096 NT_STATUS_OK
ReadX 11975 1220 4096 4096 NT_STATUS_OK
ReadX 11975 1652 4096 4096 NT_STATUS_OK
ReadX 11975 2588 4096 4096 NT_STATUS_OK
ReadX 11975 916 4096 4096 NT_STATUS_OK
ReadX 11975 260 4096 4096 NT_STATUS_OK
ReadX 11975 932 4096 4096 NT_STATUS_OK
ReadX 11975 2624 4096 4096 NT_STATUS_OK
ReadX 11975 308 4096 4096 NT_STATUS_OK
ReadX 11975 292 4096 4096 NT_STATUS_OK
ReadX 11975 1140 4096 4096 NT_STATUS_OK
ReadX 11975 276 4096 4096 NT_STATUS_OK
ReadX 11975 2020 4096 4096 NT_STATUS_OK
ReadX 11975 2880 4096 4096 NT_STATUS_OK
ReadX 11975 516 4096 4096 NT_STATUS_OK
ReadX 11975 1844 4096 4096 NT_STATUS_OK
ReadX 11975 1124 4096 4096 NT_STATUS_OK
ReadX 11975 3136 4096 4096 NT_STATUS_OK
ReadX 11975 324 4096 4096 NT_STATUS_OK
ReadX 11975 1156 4096 4096 NT_STATUS_OK
ReadX 11975 1172 4096 4096 NT_STATUS_OK
ReadX 11975 2112 4096 4096 NT_STATUS_OK
ReadX 11975 2368 4096 4096 NT_STATUS_OK
ReadX 11975 964 4096 4096 NT_STATUS_OK
ReadX 11975 980 4096 4096 NT_STATUS_OK
ReadX 11975 1012 4096 4096 NT_STATUS_OK
ReadX 11975 532 4096 4096 NT_STATUS_OK
ReadX 11975 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11975 1620 4096 4096 NT_STATUS_OK
ReadX 11975 1604 4096 4096 NT_STATUS_OK
ReadX 11975 2116 4096 4096 NT_STATUS_OK
ReadX 11975 2132 4096 4096 NT_STATUS_OK
ReadX 11975 2148 4096 4096 NT_STATUS_OK
ReadX 11975 2276 4096 4096 NT_STATUS_OK
ReadX 11975 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11997 NT_STATUS_OK
Close 11997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12000 NT_STATUS_OK
QUERY_FILE_INFORMATION 11955 1004 NT_STATUS_OK
Close 11955 NT_STATUS_OK
WriteX 12000 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12000 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11957 1004 NT_STATUS_OK
Close 11957 NT_STATUS_OK
WriteX 12000 0 65536 65536 NT_STATUS_OK
WriteX 12000 65536 64850 64850 NT_STATUS_OK
Close 12000 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12002 NT_STATUS_OK
WriteX 12002 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12002 258 NT_STATUS_OK
ReadX 11975 2068 4096 4096 NT_STATUS_OK
ReadX 11975 1588 4096 4096 NT_STATUS_OK
ReadX 11975 1572 4096 4096 NT_STATUS_OK
WriteX 12002 0 18630 18630 NT_STATUS_OK
Flush 12002 NT_STATUS_OK
Close 12002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12004 NT_STATUS_OK
Close 12004 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12006 NT_STATUS_OK
ReadX 12006 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11975 612 4096 4096 NT_STATUS_OK
ReadX 11975 564 4096 4096 NT_STATUS_OK
ReadX 11975 1876 4096 4096 NT_STATUS_OK
ReadX 11975 628 4096 4096 NT_STATUS_OK
ReadX 11975 740 4096 4096 NT_STATUS_OK
ReadX 11975 724 4096 4096 NT_STATUS_OK
ReadX 11975 644 4096 4096 NT_STATUS_OK
ReadX 11975 2324 4096 4096 NT_STATUS_OK
ReadX 11975 660 4096 4096 NT_STATUS_OK
ReadX 11975 852 4096 4096 NT_STATUS_OK
ReadX 11975 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11975 2368 4096 4096 NT_STATUS_OK
ReadX 11975 1024 4096 4096 NT_STATUS_OK
ReadX 11975 320 4096 4096 NT_STATUS_OK
ReadX 11975 580 4096 4096 NT_STATUS_OK
ReadX 11975 3136 512 512 NT_STATUS_OK
ReadX 11975 2880 4096 4096 NT_STATUS_OK
Close 11975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12007 NT_STATUS_OK
ReadX 12007 61440 4096 4096 NT_STATUS_OK
ReadX 12007 126976 4096 4096 NT_STATUS_OK
WriteX 12007 0 65536 65536 NT_STATUS_OK
WriteX 12007 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12008 NT_STATUS_OK
ReadX 12008 61440 4096 4096 NT_STATUS_OK
ReadX 12008 126976 4096 4096 NT_STATUS_OK
ReadX 12008 192512 4096 4096 NT_STATUS_OK
ReadX 12008 258048 4096 4096 NT_STATUS_OK
WriteX 12008 0 65536 65536 NT_STATUS_OK
WriteX 12008 65536 65536 65536 NT_STATUS_OK
WriteX 12008 131072 65536 65536 NT_STATUS_OK
WriteX 12008 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12009 NT_STATUS_OK
ReadX 12009 61440 4096 4096 NT_STATUS_OK
ReadX 12009 126976 4096 4096 NT_STATUS_OK
ReadX 12009 192512 4096 4096 NT_STATUS_OK
ReadX 12009 258048 4096 4096 NT_STATUS_OK
ReadX 12009 323584 4096 4096 NT_STATUS_OK
ReadX 12009 389120 4096 4096 NT_STATUS_OK
ReadX 12009 454656 4096 4096 NT_STATUS_OK
ReadX 12009 520192 4096 4096 NT_STATUS_OK
WriteX 12009 0 65536 65536 NT_STATUS_OK
WriteX 12009 65536 65536 65536 NT_STATUS_OK
WriteX 12009 131072 65536 65536 NT_STATUS_OK
WriteX 12009 196608 65536 65536 NT_STATUS_OK
WriteX 12009 262144 65536 65536 NT_STATUS_OK
WriteX 12009 327680 65536 65536 NT_STATUS_OK
WriteX 12009 393216 65536 65536 NT_STATUS_OK
WriteX 12009 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12010 NT_STATUS_OK
ReadX 12010 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12011 NT_STATUS_OK
Close 12011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12012 NT_STATUS_OK
WriteX 12012 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12012 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12010 0 8192 8192 NT_STATUS_OK
Flush 12010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12010 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12010 0 8192 8192 NT_STATUS_OK
Flush 12010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12010 0 8192 8192 NT_STATUS_OK
Flush 12010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12010 0 8192 8192 NT_STATUS_OK
Flush 12010 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12014 NT_STATUS_OK
Close 12014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12006 NT_STATUS_OK
Close 11974 NT_STATUS_OK
Close 12007 NT_STATUS_OK
Close 12008 NT_STATUS_OK
Close 12009 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12017 NT_STATUS_OK
WriteX 12017 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12017 258 NT_STATUS_OK
WriteX 12017 0 62591 62591 NT_STATUS_OK
Close 12017 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12019 NT_STATUS_OK
Close 12019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12022 NT_STATUS_OK
WriteX 12022 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12022 258 NT_STATUS_OK
WriteX 12022 0 10845 10845 NT_STATUS_OK
Close 12022 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12024 NT_STATUS_OK
Close 12024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12027 NT_STATUS_OK
WriteX 12027 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12027 258 NT_STATUS_OK
WriteX 12027 0 30118 30118 NT_STATUS_OK
Close 12027 NT_STATUS_OK
WriteX 12010 0 4096 4096 NT_STATUS_OK
WriteX 12012 0 64 64 NT_STATUS_OK
Close 12012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12010 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12029 NT_STATUS_OK
ReadX 12029 0 61440 61440 NT_STATUS_OK
ReadX 12029 61440 4096 4096 NT_STATUS_OK
ReadX 12029 65536 61440 61440 NT_STATUS_OK
ReadX 12029 126976 4096 4096 NT_STATUS_OK
ReadX 12029 131072 61440 61440 NT_STATUS_OK
ReadX 12029 192512 4096 4096 NT_STATUS_OK
ReadX 12029 196608 61440 61440 NT_STATUS_OK
ReadX 12029 258048 4096 4096 NT_STATUS_OK
ReadX 12029 262144 61440 61440 NT_STATUS_OK
ReadX 12029 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12030 NT_STATUS_OK
ReadX 12030 0 61440 61440 NT_STATUS_OK
ReadX 12030 61440 4096 4096 NT_STATUS_OK
ReadX 12030 65536 61440 61440 NT_STATUS_OK
ReadX 12030 126976 4096 4096 NT_STATUS_OK
ReadX 12030 131072 61440 61440 NT_STATUS_OK
ReadX 12030 192512 4096 4096 NT_STATUS_OK
ReadX 12030 196608 61440 61440 NT_STATUS_OK
ReadX 12030 258048 4096 4096 NT_STATUS_OK
ReadX 12030 262144 61440 61440 NT_STATUS_OK
ReadX 12030 323584 4096 4096 NT_STATUS_OK
ReadX 12030 327680 61440 61440 NT_STATUS_OK
ReadX 12030 389120 4096 4096 NT_STATUS_OK
ReadX 12030 393216 61440 61440 NT_STATUS_OK
ReadX 12030 454656 4096 4096 NT_STATUS_OK
ReadX 12030 458752 61440 61440 NT_STATUS_OK
ReadX 12030 520192 4096 4096 NT_STATUS_OK
ReadX 12030 524288 61440 61440 NT_STATUS_OK
ReadX 12030 585728 4096 4096 NT_STATUS_OK
ReadX 12030 589824 61440 61440 NT_STATUS_OK
ReadX 12030 651264 4096 4096 NT_STATUS_OK
ReadX 12030 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12031 NT_STATUS_OK
ReadX 12031 0 61440 61440 NT_STATUS_OK
ReadX 12031 61440 4096 4096 NT_STATUS_OK
ReadX 12031 65536 61440 61440 NT_STATUS_OK
ReadX 12031 126976 4096 4096 NT_STATUS_OK
ReadX 12031 131072 61440 61440 NT_STATUS_OK
ReadX 12031 192512 4096 4096 NT_STATUS_OK
ReadX 12031 196608 61440 61440 NT_STATUS_OK
ReadX 12031 258048 4096 4096 NT_STATUS_OK
ReadX 12031 262144 61440 61440 NT_STATUS_OK
ReadX 12031 323584 4096 4096 NT_STATUS_OK
ReadX 12031 327680 61440 61440 NT_STATUS_OK
ReadX 12031 389120 4096 4096 NT_STATUS_OK
ReadX 12031 393216 61440 61440 NT_STATUS_OK
ReadX 12031 454656 4096 4096 NT_STATUS_OK
ReadX 12031 458752 61440 61440 NT_STATUS_OK
ReadX 12031 520192 4096 4096 NT_STATUS_OK
ReadX 12031 524288 61440 61440 NT_STATUS_OK
ReadX 12031 585728 4096 4096 NT_STATUS_OK
ReadX 12031 589824 61440 61440 NT_STATUS_OK
ReadX 12031 651264 4096 4096 NT_STATUS_OK
ReadX 12031 655360 61440 61440 NT_STATUS_OK
ReadX 12031 716800 4096 4096 NT_STATUS_OK
ReadX 12031 720896 61440 61440 NT_STATUS_OK
ReadX 12031 782336 4096 4096 NT_STATUS_OK
ReadX 12031 786432 61440 61440 NT_STATUS_OK
ReadX 12031 847872 4096 4096 NT_STATUS_OK
ReadX 12031 851968 61440 61440 NT_STATUS_OK
ReadX 12031 913408 4096 4096 NT_STATUS_OK
ReadX 12031 917504 61440 61440 NT_STATUS_OK
ReadX 12031 978944 4096 4096 NT_STATUS_OK
ReadX 12031 983040 61440 61440 NT_STATUS_OK
ReadX 12031 1044480 4096 4096 NT_STATUS_OK
ReadX 12031 1048576 61440 61440 NT_STATUS_OK
ReadX 12031 1110016 4096 4096 NT_STATUS_OK
ReadX 12031 1114112 61440 61440 NT_STATUS_OK
ReadX 12031 1175552 4096 4096 NT_STATUS_OK
ReadX 12031 1179648 61440 61440 NT_STATUS_OK
ReadX 12031 1241088 4096 4096 NT_STATUS_OK
ReadX 12031 1245184 61440 61440 NT_STATUS_OK
ReadX 12031 1306624 4096 4096 NT_STATUS_OK
ReadX 12031 1310720 61440 61440 NT_STATUS_OK
ReadX 12031 1372160 4096 4096 NT_STATUS_OK
ReadX 12031 1376256 61440 61440 NT_STATUS_OK
ReadX 12031 1437696 4096 4096 NT_STATUS_OK
ReadX 12031 1441792 61440 61440 NT_STATUS_OK
ReadX 12031 1503232 4096 4096 NT_STATUS_OK
ReadX 12031 1507328 61440 61440 NT_STATUS_OK
ReadX 12031 1568768 4096 4096 NT_STATUS_OK
ReadX 12031 1572864 61440 61440 NT_STATUS_OK
ReadX 12031 1634304 4096 4096 NT_STATUS_OK
ReadX 12031 1638400 61440 61440 NT_STATUS_OK
ReadX 12031 1699840 4096 4096 NT_STATUS_OK
ReadX 12031 1703936 61440 61440 NT_STATUS_OK
ReadX 12031 1765376 4096 4096 NT_STATUS_OK
ReadX 12031 1769472 61440 61440 NT_STATUS_OK
ReadX 12031 1830912 4096 4096 NT_STATUS_OK
ReadX 12031 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12032 NT_STATUS_OK
Close 12032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12029 NT_STATUS_OK
Close 12030 NT_STATUS_OK
Close 12031 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12034 NT_STATUS_OK
ReadX 12034 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12035 NT_STATUS_OK
ReadX 12035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12036 NT_STATUS_OK
ReadX 12036 0 4096 4096 NT_STATUS_OK
ReadX 12036 4096 4096 4096 NT_STATUS_OK
ReadX 12036 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12037 NT_STATUS_OK
Close 12037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12034 NT_STATUS_OK
Close 12035 NT_STATUS_OK
Close 12036 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12039 NT_STATUS_OK
ReadX 12039 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12040 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12040 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12041 NT_STATUS_OK
Close 12041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12039 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12043 NT_STATUS_OK
ReadX 12043 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12044 NT_STATUS_OK
ReadX 12044 0 8192 8192 NT_STATUS_OK
ReadX 12044 8192 8192 8192 NT_STATUS_OK
ReadX 12044 16384 8192 8192 NT_STATUS_OK
ReadX 12044 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12046 NT_STATUS_OK
Close 12046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12044 NT_STATUS_OK
Close 12043 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12049 NT_STATUS_OK
WriteX 12049 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12049 258 NT_STATUS_OK
WriteX 12049 0 10438 10438 NT_STATUS_OK
Close 12049 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12050 NT_STATUS_OK
Close 12050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12051 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12052 NT_STATUS_OK
Close 12052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12053 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12054 NT_STATUS_OK
Close 12054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12055 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12056 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12057 NT_STATUS_OK
Close 12057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12058 NT_STATUS_OK
ReadX 12058 0 4096 4096 NT_STATUS_OK
ReadX 12058 4096 4096 4096 NT_STATUS_OK
ReadX 12058 8192 4096 4096 NT_STATUS_OK
ReadX 12058 12288 8192 8192 NT_STATUS_OK
ReadX 12058 20480 8192 8192 NT_STATUS_OK
ReadX 12058 28672 8192 8192 NT_STATUS_OK
ReadX 12058 36864 8192 8192 NT_STATUS_OK
ReadX 12058 45056 8192 8192 NT_STATUS_OK
ReadX 12058 53248 8192 8192 NT_STATUS_OK
ReadX 12058 61440 8192 8192 NT_STATUS_OK
ReadX 12058 69632 8192 8192 NT_STATUS_OK
ReadX 12058 77824 8192 8192 NT_STATUS_OK
ReadX 12058 86016 8192 8192 NT_STATUS_OK
ReadX 12058 94208 8192 8192 NT_STATUS_OK
ReadX 12058 102400 8192 8192 NT_STATUS_OK
ReadX 12058 110592 8192 8192 NT_STATUS_OK
ReadX 12058 118784 8192 8192 NT_STATUS_OK
ReadX 12058 126976 8192 8192 NT_STATUS_OK
ReadX 12058 135168 8192 8192 NT_STATUS_OK
ReadX 12058 143360 8192 8192 NT_STATUS_OK
ReadX 12058 151552 8192 8192 NT_STATUS_OK
ReadX 12058 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12058 NT_STATUS_OK
Close 12051 NT_STATUS_OK
Close 12053 NT_STATUS_OK
Close 12055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12060 NT_STATUS_OK
Close 12060 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12063 NT_STATUS_OK
WriteX 12063 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12063 258 NT_STATUS_OK
WriteX 12063 0 28489 28489 NT_STATUS_OK
Close 12063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12064 NT_STATUS_OK
Close 12064 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12066 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12067 NT_STATUS_OK
Close 12067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12066 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12069 NT_STATUS_OK
ReadX 12069 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12070 NT_STATUS_OK
ReadX 12070 0 8192 8192 NT_STATUS_OK
ReadX 12070 8192 8192 8192 NT_STATUS_OK
ReadX 12070 16384 8192 8192 NT_STATUS_OK
ReadX 12070 24576 8192 8192 NT_STATUS_OK
ReadX 12070 32768 16384 16384 NT_STATUS_OK
ReadX 12070 49152 8192 8192 NT_STATUS_OK
ReadX 12070 57344 8192 8192 NT_STATUS_OK
ReadX 12070 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12072 NT_STATUS_OK
Close 12072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12070 NT_STATUS_OK
Close 12069 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12075 NT_STATUS_OK
WriteX 12075 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12075 258 NT_STATUS_OK
WriteX 12075 0 29253 29253 NT_STATUS_OK
Close 12075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12076 NT_STATUS_OK
Close 12076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12077 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12079 NT_STATUS_OK
Close 12079 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12082 NT_STATUS_OK
WriteX 12082 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12082 258 NT_STATUS_OK
WriteX 12082 0 30183 30183 NT_STATUS_OK
Close 12082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12083 NT_STATUS_OK
Close 12083 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12085 NT_STATUS_OK
WriteX 12085 0 510 510 NT_STATUS_OK
WriteX 12085 510 512 512 NT_STATUS_OK
WriteX 12085 1022 510 510 NT_STATUS_OK
WriteX 12085 1532 510 510 NT_STATUS_OK
WriteX 12085 2042 168 168 NT_STATUS_OK
Close 12085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12086 NT_STATUS_OK
Close 12086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12088 NT_STATUS_OK
ReadX 12088 0 4096 4096 NT_STATUS_OK
WriteX 12088 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12089 NT_STATUS_OK
ReadX 12089 61440 4096 4096 NT_STATUS_OK
ReadX 12089 126976 4096 4096 NT_STATUS_OK
WriteX 12089 0 65536 65536 NT_STATUS_OK
WriteX 12089 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12090 NT_STATUS_OK
ReadX 12090 61440 4096 4096 NT_STATUS_OK
ReadX 12090 126976 4096 4096 NT_STATUS_OK
ReadX 12090 192512 4096 4096 NT_STATUS_OK
ReadX 12090 258048 4096 4096 NT_STATUS_OK
WriteX 12090 0 65536 65536 NT_STATUS_OK
WriteX 12090 65536 65536 65536 NT_STATUS_OK
WriteX 12090 131072 65536 65536 NT_STATUS_OK
WriteX 12090 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12091 NT_STATUS_OK
ReadX 12091 61440 4096 4096 NT_STATUS_OK
ReadX 12091 126976 4096 4096 NT_STATUS_OK
ReadX 12091 192512 4096 4096 NT_STATUS_OK
ReadX 12091 258048 4096 4096 NT_STATUS_OK
ReadX 12091 323584 4096 4096 NT_STATUS_OK
ReadX 12091 389120 4096 4096 NT_STATUS_OK
ReadX 12091 454656 4096 4096 NT_STATUS_OK
ReadX 12091 520192 4096 4096 NT_STATUS_OK
WriteX 12091 0 65536 65536 NT_STATUS_OK
WriteX 12091 65536 65536 65536 NT_STATUS_OK
WriteX 12091 131072 65536 65536 NT_STATUS_OK
WriteX 12091 196608 65536 65536 NT_STATUS_OK
WriteX 12091 262144 65536 65536 NT_STATUS_OK
WriteX 12091 327680 65536 65536 NT_STATUS_OK
WriteX 12091 393216 65536 65536 NT_STATUS_OK
WriteX 12091 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12092 NT_STATUS_OK
Close 12092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12088 NT_STATUS_OK
Close 12089 NT_STATUS_OK
Close 12090 NT_STATUS_OK
Close 12091 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12094 NT_STATUS_OK
Close 12094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12098 NT_STATUS_OK
Close 12098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12101 NT_STATUS_OK
Close 12101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12103 NT_STATUS_OK
Close 12103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12107 NT_STATUS_OK
Close 12107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12110 NT_STATUS_OK
Close 12110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12112 NT_STATUS_OK
Close 12112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12116 NT_STATUS_OK
Close 12116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12121 NT_STATUS_OK
Close 12121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12126 NT_STATUS_OK
Close 12126 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12131 NT_STATUS_OK
Close 12131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12136 NT_STATUS_OK
Close 12136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12141 NT_STATUS_OK
Close 12141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12146 NT_STATUS_OK
Close 12146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12151 NT_STATUS_OK
Close 12151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12154 NT_STATUS_OK
Close 12154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12157 NT_STATUS_OK
Close 12157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12160 NT_STATUS_OK
WriteX 12160 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12160 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12160 0 65536 65536 NT_STATUS_OK
WriteX 12160 65536 65536 65536 NT_STATUS_OK
WriteX 12160 131072 65536 65536 NT_STATUS_OK
WriteX 12160 196608 65536 65536 NT_STATUS_OK
WriteX 12160 262144 26634 26634 NT_STATUS_OK
Close 12160 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12165 NT_STATUS_OK
Close 12165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12166 NT_STATUS_OK
Close 12166 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12167 NT_STATUS_OK
ReadX 12167 0 4096 4096 NT_STATUS_OK
Close 12167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12168 NT_STATUS_OK
ReadX 12168 0 4096 4096 NT_STATUS_OK
ReadX 12168 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12169 NT_STATUS_OK
Close 12169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12168 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12173 NT_STATUS_OK
Close 12173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12176 NT_STATUS_OK
Close 12176 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12178 NT_STATUS_OK
Close 12178 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12182 NT_STATUS_OK
Close 12182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12185 NT_STATUS_OK
Close 12185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12187 NT_STATUS_OK
Close 12187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12191 NT_STATUS_OK
Close 12191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12196 NT_STATUS_OK
Close 12196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12201 NT_STATUS_OK
Close 12201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12206 NT_STATUS_OK
Close 12206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12211 NT_STATUS_OK
Close 12211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12216 NT_STATUS_OK
Close 12216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12220 NT_STATUS_OK
Close 12220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12225 NT_STATUS_OK
Close 12225 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12230 NT_STATUS_OK
Close 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12233 NT_STATUS_OK
Close 12233 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12235 NT_STATUS_OK
Close 12235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12245 NT_STATUS_OK
Close 12245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12247 NT_STATUS_OK
ReadX 12247 0 4096 4096 NT_STATUS_OK
Close 12247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12248 NT_STATUS_OK
ReadX 12248 0 4096 4096 NT_STATUS_OK
Close 12248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12249 NT_STATUS_OK
ReadX 12249 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12259 NT_STATUS_OK
Close 12259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12260 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12261 NT_STATUS_OK
ReadX 12261 0 4096 4096 NT_STATUS_OK
Close 12261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12262 NT_STATUS_OK
ReadX 12262 0 4096 4096 NT_STATUS_OK
Close 12262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12263 NT_STATUS_OK
ReadX 12263 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12249 NT_STATUS_OK
Close 12263 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12292 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12292 0 4096 4096 NT_STATUS_OK
Close 12292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12293 NT_STATUS_OK
ReadX 12293 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12294 NT_STATUS_OK
ReadX 12294 0 4096 4096 NT_STATUS_OK
ReadX 12294 4096 4096 4096 NT_STATUS_OK
ReadX 12294 8192 4096 4096 NT_STATUS_OK
ReadX 12294 12288 4096 4096 NT_STATUS_OK
ReadX 12294 16384 4096 4096 NT_STATUS_OK
ReadX 12294 20480 4096 4096 NT_STATUS_OK
ReadX 12294 24576 4096 4096 NT_STATUS_OK
ReadX 12294 28672 4096 4096 NT_STATUS_OK
ReadX 12294 32768 4096 4096 NT_STATUS_OK
ReadX 12294 36864 4096 4096 NT_STATUS_OK
ReadX 12294 40960 4096 4096 NT_STATUS_OK
ReadX 12294 45056 4096 4096 NT_STATUS_OK
ReadX 12294 49152 4096 4096 NT_STATUS_OK
ReadX 12294 53248 4096 4096 NT_STATUS_OK
ReadX 12294 57344 4096 4096 NT_STATUS_OK
ReadX 12294 61440 4096 4096 NT_STATUS_OK
ReadX 12294 65536 4096 4096 NT_STATUS_OK
ReadX 12294 69632 4096 4096 NT_STATUS_OK
ReadX 12294 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12294 1004 NT_STATUS_OK
WriteX 12294 0 4096 4096 NT_STATUS_OK
Close 12294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12295 NT_STATUS_OK
SET_FILE_INFORMATION 12295 1004 NT_STATUS_OK
Close 12295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12296 NT_STATUS_OK
ReadX 12296 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12297 NT_STATUS_OK
Close 12297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12300 NT_STATUS_OK
WriteX 12300 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12300 258 NT_STATUS_OK
WriteX 12300 0 65536 65536 NT_STATUS_OK
WriteX 12300 65536 19979 19979 NT_STATUS_OK
Close 12300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12301 NT_STATUS_OK
ReadX 12301 0 4096 4096 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
QUERY_FILE_INFORMATION 12301 1004 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
SET_FILE_INFORMATION 12301 1004 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
Close 12301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12302 NT_STATUS_OK
ReadX 12302 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12303 NT_STATUS_OK
ReadX 12303 0 4096 4096 NT_STATUS_OK
Close 12302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12304 NT_STATUS_OK
ReadX 12304 0 4096 4096 NT_STATUS_OK
Close 12304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12305 NT_STATUS_OK
ReadX 12305 0 4096 4096 NT_STATUS_OK
Close 12305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12306 NT_STATUS_OK
ReadX 12306 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12306 1004 NT_STATUS_OK
WriteX 12306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12307 NT_STATUS_OK
Close 12307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12303 NT_STATUS_OK
Close 12306 NT_STATUS_OK
Close 12296 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12309 NT_STATUS_OK
Close 12309 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12312 NT_STATUS_OK
WriteX 12312 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12312 258 NT_STATUS_OK
WriteX 12312 0 65536 65536 NT_STATUS_OK
WriteX 12312 65536 17654 17654 NT_STATUS_OK
Close 12312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12313 NT_STATUS_OK
ReadX 12313 0 4096 4096 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
QUERY_FILE_INFORMATION 12313 1004 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
SET_FILE_INFORMATION 12313 1004 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
Close 12313 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12314 NT_STATUS_OK
SET_FILE_INFORMATION 12314 1004 NT_STATUS_OK
Close 12314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12315 NT_STATUS_OK
ReadX 12315 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12316 NT_STATUS_OK
Close 12316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12318 NT_STATUS_OK
ReadX 12318 0 4096 4096 NT_STATUS_OK
ReadX 12318 4096 4096 4096 NT_STATUS_OK
ReadX 12318 8192 4096 4096 NT_STATUS_OK
ReadX 12318 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12318 16384 4096 4096 NT_STATUS_OK
ReadX 12318 20480 4096 4096 NT_STATUS_OK
ReadX 12318 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12315 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12319 NT_STATUS_OK
ReadX 12319 0 4096 4096 NT_STATUS_OK
Close 12319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12320 NT_STATUS_OK
ReadX 12320 0 4096 4096 NT_STATUS_OK
Close 12320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12321 NT_STATUS_OK
ReadX 12321 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12321 1004 NT_STATUS_OK
WriteX 12321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12322 NT_STATUS_OK
Close 12322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12321 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12324 NT_STATUS_OK
Close 12324 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12327 NT_STATUS_OK
WriteX 12327 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12327 258 NT_STATUS_OK
WriteX 12327 0 65536 65536 NT_STATUS_OK
WriteX 12327 65536 19490 19490 NT_STATUS_OK
Close 12327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12328 NT_STATUS_OK
ReadX 12328 0 4096 4096 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
QUERY_FILE_INFORMATION 12328 1004 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
SET_FILE_INFORMATION 12328 1004 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
Close 12328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12329 NT_STATUS_OK
SET_FILE_INFORMATION 12329 1004 NT_STATUS_OK
Close 12329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12330 NT_STATUS_OK
ReadX 12330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12331 NT_STATUS_OK
Close 12331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12333 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12333 0 4096 4096 NT_STATUS_OK
Close 12333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12334 NT_STATUS_OK
ReadX 12334 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12335 NT_STATUS_OK
ReadX 12335 0 4096 4096 NT_STATUS_OK
ReadX 12335 4096 4096 4096 NT_STATUS_OK
ReadX 12335 8192 4096 4096 NT_STATUS_OK
ReadX 12335 12288 4096 4096 NT_STATUS_OK
ReadX 12335 16384 4096 4096 NT_STATUS_OK
ReadX 12335 20480 4096 4096 NT_STATUS_OK
ReadX 12335 24576 4096 4096 NT_STATUS_OK
ReadX 12335 28672 4096 4096 NT_STATUS_OK
ReadX 12335 32768 4096 4096 NT_STATUS_OK
ReadX 12335 36864 4096 4096 NT_STATUS_OK
ReadX 12335 40960 4096 4096 NT_STATUS_OK
ReadX 12335 45056 4096 4096 NT_STATUS_OK
ReadX 12335 49152 4096 4096 NT_STATUS_OK
ReadX 12335 53248 4096 4096 NT_STATUS_OK
ReadX 12335 57344 4096 4096 NT_STATUS_OK
ReadX 12335 61440 4096 4096 NT_STATUS_OK
ReadX 12335 65536 4096 4096 NT_STATUS_OK
ReadX 12335 69632 4096 4096 NT_STATUS_OK
ReadX 12335 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12335 1004 NT_STATUS_OK
WriteX 12335 0 4096 4096 NT_STATUS_OK
Close 12335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12336 NT_STATUS_OK
SET_FILE_INFORMATION 12336 1004 NT_STATUS_OK
Close 12336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12337 NT_STATUS_OK
ReadX 12337 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12338 NT_STATUS_OK
Close 12338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12330 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12341 NT_STATUS_OK
WriteX 12341 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12341 258 NT_STATUS_OK
WriteX 12341 0 65536 65536 NT_STATUS_OK
WriteX 12341 65536 8866 8866 NT_STATUS_OK
Close 12341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12342 NT_STATUS_OK
ReadX 12342 0 4096 4096 NT_STATUS_OK
WriteX 12342 0 4096 4096 NT_STATUS_OK
Flush 12342 NT_STATUS_OK
SET_FILE_INFORMATION 12342 1004 NT_STATUS_OK
WriteX 12342 0 4096 4096 NT_STATUS_OK
Flush 12342 NT_STATUS_OK
Close 12342 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12343 NT_STATUS_OK
ReadX 12343 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12344 NT_STATUS_OK
ReadX 12344 0 4096 4096 NT_STATUS_OK
Close 12344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12345 NT_STATUS_OK
ReadX 12345 0 4096 4096 NT_STATUS_OK
Close 12345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12346 NT_STATUS_OK
ReadX 12346 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12346 1004 NT_STATUS_OK
WriteX 12346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12347 NT_STATUS_OK
Close 12347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12346 NT_STATUS_OK
Close 12337 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12349 NT_STATUS_OK
Close 12349 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12352 NT_STATUS_OK
WriteX 12352 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12352 258 NT_STATUS_OK
WriteX 12352 0 65536 65536 NT_STATUS_OK
WriteX 12352 65536 9298 9298 NT_STATUS_OK
Close 12352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12353 NT_STATUS_OK
ReadX 12353 0 4096 4096 NT_STATUS_OK
WriteX 12353 0 4096 4096 NT_STATUS_OK
Flush 12353 NT_STATUS_OK
SET_FILE_INFORMATION 12353 1004 NT_STATUS_OK
WriteX 12353 0 4096 4096 NT_STATUS_OK
Flush 12353 NT_STATUS_OK
Close 12353 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12354 NT_STATUS_OK
SET_FILE_INFORMATION 12354 1004 NT_STATUS_OK
Close 12354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12355 NT_STATUS_OK
ReadX 12355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12356 NT_STATUS_OK
Close 12356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12359 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12359 0 4096 4096 NT_STATUS_OK
Close 12359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12360 NT_STATUS_OK
ReadX 12360 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12360 4096 4096 4096 NT_STATUS_OK
ReadX 12360 8192 4096 4096 NT_STATUS_OK
ReadX 12360 12288 4096 4096 NT_STATUS_OK
ReadX 12360 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12355 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12361 NT_STATUS_OK
ReadX 12361 0 4096 4096 NT_STATUS_OK
Close 12361 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12362 NT_STATUS_OK
ReadX 12362 0 4096 4096 NT_STATUS_OK
Close 12362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12363 NT_STATUS_OK
ReadX 12363 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12363 1004 NT_STATUS_OK
WriteX 12363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12364 NT_STATUS_OK
Close 12364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12360 NT_STATUS_OK
Close 12363 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12366 NT_STATUS_OK
Close 12366 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12369 NT_STATUS_OK
WriteX 12369 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12369 258 NT_STATUS_OK
WriteX 12369 0 65536 65536 NT_STATUS_OK
WriteX 12369 65536 11540 11540 NT_STATUS_OK
Close 12369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12370 NT_STATUS_OK
ReadX 12370 0 4096 4096 NT_STATUS_OK
WriteX 12370 0 4096 4096 NT_STATUS_OK
Flush 12370 NT_STATUS_OK
SET_FILE_INFORMATION 12370 1004 NT_STATUS_OK
WriteX 12370 0 4096 4096 NT_STATUS_OK
Flush 12370 NT_STATUS_OK
Close 12370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12371 NT_STATUS_OK
SET_FILE_INFORMATION 12371 1004 NT_STATUS_OK
Close 12371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12372 NT_STATUS_OK
ReadX 12372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12373 NT_STATUS_OK
Close 12373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12375 NT_STATUS_OK
ReadX 12375 61440 4096 4096 NT_STATUS_OK
ReadX 12375 126976 4096 4096 NT_STATUS_OK
WriteX 12375 0 65536 65536 NT_STATUS_OK
WriteX 12375 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12376 NT_STATUS_OK
ReadX 12376 61440 4096 4096 NT_STATUS_OK
ReadX 12376 126976 4096 4096 NT_STATUS_OK
ReadX 12376 192512 4096 4096 NT_STATUS_OK
ReadX 12376 258048 4096 4096 NT_STATUS_OK
WriteX 12376 0 65536 65536 NT_STATUS_OK
WriteX 12376 65536 65536 65536 NT_STATUS_OK
WriteX 12376 131072 65536 65536 NT_STATUS_OK
WriteX 12376 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12377 NT_STATUS_OK
ReadX 12377 61440 4096 4096 NT_STATUS_OK
ReadX 12377 126976 4096 4096 NT_STATUS_OK
ReadX 12377 192512 4096 4096 NT_STATUS_OK
ReadX 12377 258048 4096 4096 NT_STATUS_OK
ReadX 12377 323584 4096 4096 NT_STATUS_OK
ReadX 12377 389120 4096 4096 NT_STATUS_OK
ReadX 12377 454656 4096 4096 NT_STATUS_OK
ReadX 12377 520192 4096 4096 NT_STATUS_OK
WriteX 12377 0 65536 65536 NT_STATUS_OK
WriteX 12377 65536 65536 65536 NT_STATUS_OK
WriteX 12377 131072 65536 65536 NT_STATUS_OK
WriteX 12377 196608 65536 65536 NT_STATUS_OK
WriteX 12377 262144 65536 65536 NT_STATUS_OK
WriteX 12377 327680 65536 65536 NT_STATUS_OK
WriteX 12377 393216 65536 65536 NT_STATUS_OK
WriteX 12377 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12378 NT_STATUS_OK
ReadX 12378 0 4096 4096 NT_STATUS_OK
ReadX 12378 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12379 NT_STATUS_OK
WriteX 12379 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12379 258 NT_STATUS_OK
WriteX 12379 0 53 53 NT_STATUS_OK
Close 12379 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12380 NT_STATUS_OK
Close 12380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12372 NT_STATUS_OK
Close 12318 NT_STATUS_OK
Close 12375 NT_STATUS_OK
Close 12376 NT_STATUS_OK
Close 12377 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12378 8192 4096 4096 NT_STATUS_OK
ReadX 12378 12288 4096 4096 NT_STATUS_OK
WriteX 12382 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12382 258 NT_STATUS_OK
ReadX 12378 16384 4096 4096 NT_STATUS_OK
ReadX 12378 20480 4096 4096 NT_STATUS_OK
WriteX 12382 0 15360 15360 NT_STATUS_OK
Close 12382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12383 NT_STATUS_OK
ReadX 12383 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12383 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12383 1004 NT_STATUS_OK
WriteX 12383 0 4096 4096 NT_STATUS_OK
Close 12383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12384 NT_STATUS_OK
Close 12384 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12386 NT_STATUS_OK
ReadX 12386 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12387 NT_STATUS_OK
Close 12387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12386 4096 4096 4096 NT_STATUS_OK
ReadX 12386 8192 4096 4096 NT_STATUS_OK
ReadX 12386 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12389 NT_STATUS_OK
ReadX 12389 0 4096 4096 NT_STATUS_OK
ReadX 12389 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12390 NT_STATUS_OK
ReadX 12390 0 4096 4096 NT_STATUS_OK
ReadX 12390 4096 4096 4096 NT_STATUS_OK
ReadX 12390 8192 4096 4096 NT_STATUS_OK
Close 12389 NT_STATUS_OK
Close 12390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12391 NT_STATUS_OK
WriteX 12391 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12391 258 NT_STATUS_OK
WriteX 12391 0 15360 15360 NT_STATUS_OK
Close 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12392 NT_STATUS_OK
ReadX 12392 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12392 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12392 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12393 NT_STATUS_OK
Close 12393 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12395 NT_STATUS_OK
ReadX 12395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12396 NT_STATUS_OK
SET_FILE_INFORMATION 12396 1004 NT_STATUS_OK
Close 12396 NT_STATUS_OK
WriteX 12392 0 4096 4096 NT_STATUS_OK
Close 12392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12397 NT_STATUS_OK
Close 12397 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12399 NT_STATUS_OK
ReadX 12399 0 4096 4096 NT_STATUS_OK
ReadX 12399 4096 4096 4096 NT_STATUS_OK
ReadX 12399 8192 4096 4096 NT_STATUS_OK
ReadX 12399 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12399 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12399 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12400 NT_STATUS_OK
ReadX 12400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12401 NT_STATUS_OK
WriteX 12401 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12401 258 NT_STATUS_OK
WriteX 12401 0 53 53 NT_STATUS_OK
Close 12401 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12402 NT_STATUS_OK
Close 12402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12400 4096 4096 4096 NT_STATUS_OK
ReadX 12400 8192 4096 4096 NT_STATUS_OK
ReadX 12400 12288 4096 4096 NT_STATUS_OK
WriteX 12404 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12404 258 NT_STATUS_OK
WriteX 12404 0 12006 12006 NT_STATUS_OK
Close 12404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12405 NT_STATUS_OK
ReadX 12405 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12405 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12405 1004 NT_STATUS_OK
WriteX 12405 0 4096 4096 NT_STATUS_OK
Close 12405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12406 NT_STATUS_OK
Close 12406 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12408 NT_STATUS_OK
ReadX 12408 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12409 NT_STATUS_OK
Close 12409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12408 4096 4096 4096 NT_STATUS_OK
ReadX 12408 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12411 NT_STATUS_OK
WriteX 12411 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12411 258 NT_STATUS_OK
WriteX 12411 0 11991 11991 NT_STATUS_OK
Close 12411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12412 NT_STATUS_OK
ReadX 12412 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12412 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12412 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12413 NT_STATUS_OK
Close 12413 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12415 NT_STATUS_OK
ReadX 12415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12416 NT_STATUS_OK
SET_FILE_INFORMATION 12416 1004 NT_STATUS_OK
Close 12416 NT_STATUS_OK
WriteX 12412 0 4096 4096 NT_STATUS_OK
Close 12412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12417 NT_STATUS_OK
Close 12417 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12419 NT_STATUS_OK
ReadX 12419 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12420 NT_STATUS_OK
Close 12420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12419 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12419 1004 NT_STATUS_OK
ReadX 12419 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12419 1004 NT_STATUS_OK
WriteX 12419 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12419 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12419 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12419 1004 NT_STATUS_OK
Close 12395 NT_STATUS_OK
WriteX 12399 0 19054 19054 NT_STATUS_OK
WriteX 12419 0 12288 12288 NT_STATUS_OK
Close 12415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12422 NT_STATUS_OK
Close 12422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12399 NT_STATUS_OK
Close 12419 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12424 NT_STATUS_OK
Close 12424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12426 NT_STATUS_OK
ReadX 12426 0 61440 61440 NT_STATUS_OK
ReadX 12426 61440 4096 4096 NT_STATUS_OK
ReadX 12426 65536 61440 61440 NT_STATUS_OK
ReadX 12426 126976 4096 4096 NT_STATUS_OK
ReadX 12426 131072 61440 61440 NT_STATUS_OK
ReadX 12426 192512 4096 4096 NT_STATUS_OK
ReadX 12426 196608 61440 61440 NT_STATUS_OK
ReadX 12426 258048 4096 4096 NT_STATUS_OK
ReadX 12426 262144 61440 61440 NT_STATUS_OK
ReadX 12426 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12427 NT_STATUS_OK
ReadX 12427 0 61440 61440 NT_STATUS_OK
ReadX 12427 61440 4096 4096 NT_STATUS_OK
ReadX 12427 65536 61440 61440 NT_STATUS_OK
ReadX 12427 126976 4096 4096 NT_STATUS_OK
ReadX 12427 131072 61440 61440 NT_STATUS_OK
ReadX 12427 192512 4096 4096 NT_STATUS_OK
ReadX 12427 196608 61440 61440 NT_STATUS_OK
ReadX 12427 258048 4096 4096 NT_STATUS_OK
ReadX 12427 262144 61440 61440 NT_STATUS_OK
ReadX 12427 323584 4096 4096 NT_STATUS_OK
ReadX 12427 327680 61440 61440 NT_STATUS_OK
ReadX 12427 389120 4096 4096 NT_STATUS_OK
ReadX 12427 393216 61440 61440 NT_STATUS_OK
ReadX 12427 454656 4096 4096 NT_STATUS_OK
ReadX 12427 458752 61440 61440 NT_STATUS_OK
ReadX 12427 520192 4096 4096 NT_STATUS_OK
ReadX 12427 524288 61440 61440 NT_STATUS_OK
ReadX 12427 585728 4096 4096 NT_STATUS_OK
ReadX 12427 589824 61440 61440 NT_STATUS_OK
ReadX 12427 651264 4096 4096 NT_STATUS_OK
ReadX 12427 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12428 NT_STATUS_OK
ReadX 12428 0 61440 61440 NT_STATUS_OK
ReadX 12428 61440 4096 4096 NT_STATUS_OK
ReadX 12428 65536 61440 61440 NT_STATUS_OK
ReadX 12428 126976 4096 4096 NT_STATUS_OK
ReadX 12428 131072 61440 61440 NT_STATUS_OK
ReadX 12428 192512 4096 4096 NT_STATUS_OK
ReadX 12428 196608 61440 61440 NT_STATUS_OK
ReadX 12428 258048 4096 4096 NT_STATUS_OK
ReadX 12428 262144 61440 61440 NT_STATUS_OK
ReadX 12428 323584 4096 4096 NT_STATUS_OK
ReadX 12428 327680 61440 61440 NT_STATUS_OK
ReadX 12428 389120 4096 4096 NT_STATUS_OK
ReadX 12428 393216 61440 61440 NT_STATUS_OK
ReadX 12428 454656 4096 4096 NT_STATUS_OK
ReadX 12428 458752 61440 61440 NT_STATUS_OK
ReadX 12428 520192 4096 4096 NT_STATUS_OK
ReadX 12428 524288 61440 61440 NT_STATUS_OK
ReadX 12428 585728 4096 4096 NT_STATUS_OK
ReadX 12428 589824 61440 61440 NT_STATUS_OK
ReadX 12428 651264 4096 4096 NT_STATUS_OK
ReadX 12428 655360 61440 61440 NT_STATUS_OK
ReadX 12428 716800 4096 4096 NT_STATUS_OK
ReadX 12428 720896 61440 61440 NT_STATUS_OK
ReadX 12428 782336 4096 4096 NT_STATUS_OK
ReadX 12428 786432 61440 61440 NT_STATUS_OK
ReadX 12428 847872 4096 4096 NT_STATUS_OK
ReadX 12428 851968 61440 61440 NT_STATUS_OK
ReadX 12428 913408 4096 4096 NT_STATUS_OK
ReadX 12428 917504 61440 61440 NT_STATUS_OK
ReadX 12428 978944 4096 4096 NT_STATUS_OK
ReadX 12428 983040 61440 61440 NT_STATUS_OK
ReadX 12428 1044480 4096 4096 NT_STATUS_OK
ReadX 12428 1048576 61440 61440 NT_STATUS_OK
ReadX 12428 1110016 4096 4096 NT_STATUS_OK
ReadX 12428 1114112 61440 61440 NT_STATUS_OK
ReadX 12428 1175552 4096 4096 NT_STATUS_OK
ReadX 12428 1179648 61440 61440 NT_STATUS_OK
ReadX 12428 1241088 4096 4096 NT_STATUS_OK
ReadX 12428 1245184 61440 61440 NT_STATUS_OK
ReadX 12428 1306624 4096 4096 NT_STATUS_OK
ReadX 12428 1310720 61440 61440 NT_STATUS_OK
ReadX 12428 1372160 4096 4096 NT_STATUS_OK
ReadX 12428 1376256 61440 61440 NT_STATUS_OK
ReadX 12428 1437696 4096 4096 NT_STATUS_OK
ReadX 12428 1441792 61440 61440 NT_STATUS_OK
ReadX 12428 1503232 4096 4096 NT_STATUS_OK
ReadX 12428 1507328 61440 61440 NT_STATUS_OK
ReadX 12428 1568768 4096 4096 NT_STATUS_OK
ReadX 12428 1572864 61440 61440 NT_STATUS_OK
ReadX 12428 1634304 4096 4096 NT_STATUS_OK
ReadX 12428 1638400 61440 61440 NT_STATUS_OK
ReadX 12428 1699840 4096 4096 NT_STATUS_OK
ReadX 12428 1703936 61440 61440 NT_STATUS_OK
ReadX 12428 1765376 4096 4096 NT_STATUS_OK
ReadX 12428 1769472 61440 61440 NT_STATUS_OK
ReadX 12428 1830912 4096 4096 NT_STATUS_OK
ReadX 12428 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12429 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12430 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12430 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12431 NT_STATUS_OK
ReadX 12431 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12432 NT_STATUS_OK
ReadX 12432 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12433 NT_STATUS_OK
ReadX 12433 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12434 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12435 NT_STATUS_OK
QUERY_FILE_INFORMATION 12435 1004 NT_STATUS_OK
WriteX 12435 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12435 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12436 NT_STATUS_OK
Close 12436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12437 NT_STATUS_OK
WriteX 12437 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12437 258 NT_STATUS_OK
WriteX 12437 0 491 491 NT_STATUS_OK
Close 12437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12438 NT_STATUS_OK
ReadX 12438 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12435 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12440 NT_STATUS_OK
Close 12440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12441 NT_STATUS_OK
WriteX 12441 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12441 258 NT_STATUS_OK
WriteX 12441 0 543 543 NT_STATUS_OK
Close 12441 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12442 NT_STATUS_OK
ReadX 12442 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12426 NT_STATUS_OK
Close 12427 NT_STATUS_OK
Close 12428 NT_STATUS_OK
Close 12442 NT_STATUS_OK
Close 12430 NT_STATUS_OK
Close 12431 NT_STATUS_OK
Close 12432 NT_STATUS_OK
Close 12433 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12445 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12447 NT_STATUS_OK
ReadX 12447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12448 NT_STATUS_OK
ReadX 12448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12449 NT_STATUS_OK
ReadX 12449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12450 NT_STATUS_OK
ReadX 12450 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12454 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12455 NT_STATUS_OK
QUERY_FILE_INFORMATION 12455 1004 NT_STATUS_OK
WriteX 12455 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12455 258 NT_STATUS_OK
WriteX 12455 0 2048 2048 NT_STATUS_OK
Close 12455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12456 NT_STATUS_OK
ReadX 12456 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12456 0 4096 4096 NT_STATUS_OK
Flush 12456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12456 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12460 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12461 NT_STATUS_OK
WriteX 12461 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12461 258 NT_STATUS_OK
WriteX 12461 0 2048 2048 NT_STATUS_OK
Close 12461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12462 NT_STATUS_OK
ReadX 12462 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12466 NT_STATUS_OK
Close 12466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12467 NT_STATUS_OK
WriteX 12467 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12467 258 NT_STATUS_OK
WriteX 12467 0 2048 2048 NT_STATUS_OK
Close 12467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12468 NT_STATUS_OK
ReadX 12468 0 2048 2048 NT_STATUS_OK
ReadX 12446 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12450 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12462 0 4096 4096 NT_STATUS_OK
WriteX 12446 0 8192 8192 NT_STATUS_OK
WriteX 12447 0 4096 4096 NT_STATUS_OK
WriteX 12448 0 4096 4096 NT_STATUS_OK
ReadX 12462 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12471 NT_STATUS_OK
ReadX 12471 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12472 NT_STATUS_OK
QUERY_FILE_INFORMATION 12472 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12471 NT_STATUS_OK
Close 12447 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Close 12449 NT_STATUS_OK
Close 12462 NT_STATUS_OK
Close 12446 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12474 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12475 NT_STATUS_OK
ReadX 12475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12476 NT_STATUS_OK
ReadX 12476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12477 NT_STATUS_OK
ReadX 12477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12478 NT_STATUS_OK
ReadX 12478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12479 NT_STATUS_OK
ReadX 12479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12480 NT_STATUS_OK
ReadX 12480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12481 NT_STATUS_OK
ReadX 12481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12482 NT_STATUS_OK
ReadX 12482 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12483 NT_STATUS_OK
ReadX 12483 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12484 NT_STATUS_OK
ReadX 12484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12485 NT_STATUS_OK
ReadX 12485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12486 NT_STATUS_OK
ReadX 12486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12487 NT_STATUS_OK
ReadX 12487 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12491 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12491 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12492 NT_STATUS_OK
QUERY_FILE_INFORMATION 12492 1004 NT_STATUS_OK
WriteX 12492 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12492 258 NT_STATUS_OK
WriteX 12492 0 2048 2048 NT_STATUS_OK
Close 12492 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12493 NT_STATUS_OK
ReadX 12493 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12494 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12495 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12495 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12500 NT_STATUS_OK
QUERY_FILE_INFORMATION 12500 1004 NT_STATUS_OK
WriteX 12500 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12500 258 NT_STATUS_OK
WriteX 12500 0 2048 2048 NT_STATUS_OK
Close 12500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12501 NT_STATUS_OK
ReadX 12501 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12493 0 4096 4096 NT_STATUS_OK
Flush 12493 NT_STATUS_OK
WriteX 12501 0 4096 4096 NT_STATUS_OK
Flush 12501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12493 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12501 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12495 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12503 NT_STATUS_OK
WriteX 12503 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12503 258 NT_STATUS_OK
WriteX 12503 0 4096 4096 NT_STATUS_OK
Close 12503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12504 NT_STATUS_OK
ReadX 12504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12505 NT_STATUS_OK
Close 12505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12506 NT_STATUS_OK
WriteX 12506 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12506 258 NT_STATUS_OK
WriteX 12506 0 4096 4096 NT_STATUS_OK
Close 12506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12507 NT_STATUS_OK
ReadX 12507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12507 0 4096 4096 NT_STATUS_OK
Close 12504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12487 NT_STATUS_OK
Close 12481 NT_STATUS_OK
Close 12495 NT_STATUS_OK
Close 12484 NT_STATUS_OK
Close 12485 NT_STATUS_OK
Close 12486 NT_STATUS_OK
Close 12482 NT_STATUS_OK
Close 12475 NT_STATUS_OK
Close 12476 NT_STATUS_OK
Close 12479 NT_STATUS_OK
Close 12480 NT_STATUS_OK
Close 12477 NT_STATUS_OK
Close 12478 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12510 NT_STATUS_OK
Close 12510 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12512 NT_STATUS_OK
ReadX 12512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12513 NT_STATUS_OK
Close 12513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12514 NT_STATUS_OK
WriteX 12514 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12514 258 NT_STATUS_OK
WriteX 12514 0 2048 2048 NT_STATUS_OK
Close 12514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12516 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12517 NT_STATUS_OK
ReadX 12517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12518 NT_STATUS_OK
ReadX 12518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12519 NT_STATUS_OK
ReadX 12519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12520 NT_STATUS_OK
ReadX 12520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12521 NT_STATUS_OK
ReadX 12521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12523 NT_STATUS_OK
ReadX 12523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12524 NT_STATUS_OK
ReadX 12524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12525 NT_STATUS_OK
ReadX 12525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12526 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12527 NT_STATUS_OK
ReadX 12527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12528 NT_STATUS_OK
ReadX 12528 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12529 NT_STATUS_OK
QUERY_FILE_INFORMATION 12529 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12512 NT_STATUS_OK
Close 12515 NT_STATUS_OK
Close 12527 NT_STATUS_OK
Close 12522 NT_STATUS_OK
Close 12523 NT_STATUS_OK
Close 12524 NT_STATUS_OK
Close 12525 NT_STATUS_OK
Close 12526 NT_STATUS_OK
Close 12528 NT_STATUS_OK
Close 12516 NT_STATUS_OK
Close 12517 NT_STATUS_OK
Close 12520 NT_STATUS_OK
Close 12521 NT_STATUS_OK
Close 12518 NT_STATUS_OK
Close 12519 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12531 NT_STATUS_OK
QUERY_FILE_INFORMATION 12531 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12533 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12534 NT_STATUS_OK
ReadX 12534 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12535 NT_STATUS_OK
ReadX 12535 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12536 NT_STATUS_OK
ReadX 12536 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12537 NT_STATUS_OK
ReadX 12537 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12538 NT_STATUS_OK
ReadX 12538 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12539 NT_STATUS_OK
ReadX 12539 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12540 NT_STATUS_OK
ReadX 12540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12541 NT_STATUS_OK
ReadX 12541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12542 NT_STATUS_OK
ReadX 12542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12543 NT_STATUS_OK
ReadX 12543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12544 NT_STATUS_OK
Close 12538 NT_STATUS_OK
ReadX 12544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12545 NT_STATUS_OK
ReadX 12545 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12546 NT_STATUS_OK
ReadX 12546 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12550 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12551 NT_STATUS_OK
QUERY_FILE_INFORMATION 12551 1004 NT_STATUS_OK
WriteX 12551 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12551 258 NT_STATUS_OK
WriteX 12551 0 2048 2048 NT_STATUS_OK
Close 12551 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12552 NT_STATUS_OK
ReadX 12552 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12553 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12553 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12554 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12555 NT_STATUS_OK
ReadX 12555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12556 NT_STATUS_OK
ReadX 12556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12557 NT_STATUS_OK
ReadX 12557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12558 NT_STATUS_OK
ReadX 12558 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12562 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12563 NT_STATUS_OK
QUERY_FILE_INFORMATION 12563 1004 NT_STATUS_OK
WriteX 12563 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12563 258 NT_STATUS_OK
WriteX 12563 0 2048 2048 NT_STATUS_OK
Close 12563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12564 NT_STATUS_OK
ReadX 12564 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12565 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12566 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12567 NT_STATUS_OK
ReadX 12567 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12571 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12572 NT_STATUS_OK
QUERY_FILE_INFORMATION 12572 1004 NT_STATUS_OK
WriteX 12572 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12572 258 NT_STATUS_OK
WriteX 12572 0 2048 2048 NT_STATUS_OK
Close 12572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12573 NT_STATUS_OK
ReadX 12573 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12552 0 4096 4096 NT_STATUS_OK
Flush 12552 NT_STATUS_OK
WriteX 12564 0 4096 4096 NT_STATUS_OK
Flush 12564 NT_STATUS_OK
WriteX 12573 0 4096 4096 NT_STATUS_OK
Flush 12573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12552 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12564 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12573 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12554 4096 16384 16384 NT_STATUS_OK
ReadX 12534 4096 16384 16384 NT_STATUS_OK
ReadX 12566 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12574 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12575 NT_STATUS_OK
ReadX 12575 0 2048 2048 NT_STATUS_OK
WriteX 12575 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12552 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12576 NT_STATUS_OK
QUERY_FILE_INFORMATION 12576 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12575 NT_STATUS_OK
Close 12558 NT_STATUS_OK
Close 12546 NT_STATUS_OK
Close 12567 NT_STATUS_OK
Close 12554 NT_STATUS_OK
Close 12555 NT_STATUS_OK
Close 12556 NT_STATUS_OK
Close 12557 NT_STATUS_OK
Close 12545 NT_STATUS_OK
Close 12566 NT_STATUS_OK
Close 12540 NT_STATUS_OK
Close 12543 NT_STATUS_OK
Close 12544 NT_STATUS_OK
Close 12541 NT_STATUS_OK
Close 12542 NT_STATUS_OK
Close 12534 NT_STATUS_OK
Close 12535 NT_STATUS_OK
Close 12536 NT_STATUS_OK
Close 12537 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12578 NT_STATUS_OK
QUERY_FILE_INFORMATION 12578 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12580 NT_STATUS_OK
QUERY_FILE_INFORMATION 12580 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12582 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12583 NT_STATUS_OK
ReadX 12583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12584 NT_STATUS_OK
ReadX 12584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12585 NT_STATUS_OK
ReadX 12585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12586 NT_STATUS_OK
ReadX 12586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12587 NT_STATUS_OK
ReadX 12587 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12583 4096 16384 16384 NT_STATUS_OK
WriteX 12583 0 4096 4096 NT_STATUS_OK
WriteX 12584 0 4096 4096 NT_STATUS_OK
WriteX 12585 0 4096 4096 NT_STATUS_OK
WriteX 12586 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12588 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12589 NT_STATUS_OK
ReadX 12589 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12590 NT_STATUS_OK
ReadX 12590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12591 NT_STATUS_OK
ReadX 12591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12592 NT_STATUS_OK
ReadX 12592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12593 NT_STATUS_OK
ReadX 12593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12594 NT_STATUS_OK
ReadX 12594 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12595 NT_STATUS_OK
ReadX 12595 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12596 NT_STATUS_OK
ReadX 12596 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12597 NT_STATUS_OK
ReadX 12597 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12598 NT_STATUS_OK
ReadX 12598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12599 NT_STATUS_OK
ReadX 12599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12600 NT_STATUS_OK
ReadX 12600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12601 NT_STATUS_OK
ReadX 12601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12602 NT_STATUS_OK
ReadX 12602 0 8192 8192 NT_STATUS_OK
ReadX 12589 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12603 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12603 0 4096 4096 NT_STATUS_OK
ReadX 12603 4096 4096 4096 NT_STATUS_OK
ReadX 12603 8192 4096 4096 NT_STATUS_OK
WriteX 12589 0 4096 4096 NT_STATUS_OK
WriteX 12590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12604 0 4096 4096 NT_STATUS_OK
ReadX 12604 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12583 0 4096 4096 NT_STATUS_OK
WriteX 12584 0 4096 4096 NT_STATUS_OK
WriteX 12585 0 4096 4096 NT_STATUS_OK
WriteX 12586 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12608 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12609 NT_STATUS_OK
QUERY_FILE_INFORMATION 12609 1004 NT_STATUS_OK
WriteX 12609 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12609 258 NT_STATUS_OK
WriteX 12609 0 2048 2048 NT_STATUS_OK
Close 12609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12610 NT_STATUS_OK
ReadX 12610 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12610 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12610 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12611 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12611 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12612 NT_STATUS_OK
ReadX 12612 0 4096 4096 NT_STATUS_OK
ReadX 12612 4096 4096 4096 NT_STATUS_OK
WriteX 12612 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12610 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12613 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12614 NT_STATUS_OK
ReadX 12614 0 4096 4096 NT_STATUS_OK
ReadX 12614 4096 4096 4096 NT_STATUS_OK
WriteX 12614 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12615 NT_STATUS_OK
QUERY_FILE_INFORMATION 12615 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12602 NT_STATUS_OK
Close 12587 NT_STATUS_OK
Close 12583 NT_STATUS_OK
Close 12584 NT_STATUS_OK
Close 12585 NT_STATUS_OK
Close 12586 NT_STATUS_OK
Close 12595 NT_STATUS_OK
Close 12600 NT_STATUS_OK
Close 12596 NT_STATUS_OK
Close 12597 NT_STATUS_OK
Close 12598 NT_STATUS_OK
Close 12599 NT_STATUS_OK
Close 12601 NT_STATUS_OK
Close 12589 NT_STATUS_OK
Close 12590 NT_STATUS_OK
Close 12593 NT_STATUS_OK
Close 12594 NT_STATUS_OK
Close 12591 NT_STATUS_OK
Close 12592 NT_STATUS_OK
Close 12614 NT_STATUS_OK
Close 12603 NT_STATUS_OK
Close 12604 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12617 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12617 0 4096 4096 NT_STATUS_OK
ReadX 12617 4096 4096 4096 NT_STATUS_OK
ReadX 12617 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12618 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12619 NT_STATUS_OK
ReadX 12619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12620 NT_STATUS_OK
ReadX 12620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12621 NT_STATUS_OK
ReadX 12621 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12622 NT_STATUS_OK
ReadX 12622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12623 NT_STATUS_OK
ReadX 12623 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12624 NT_STATUS_OK
ReadX 12624 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12625 NT_STATUS_OK
ReadX 12625 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12626 NT_STATUS_OK
ReadX 12626 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12627 NT_STATUS_OK
ReadX 12627 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12628 NT_STATUS_OK
ReadX 12628 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12629 NT_STATUS_OK
ReadX 12629 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12630 NT_STATUS_OK
ReadX 12630 0 4096 4096 NT_STATUS_OK
ReadX 12618 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12634 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12635 NT_STATUS_OK
QUERY_FILE_INFORMATION 12635 1004 NT_STATUS_OK
WriteX 12635 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12635 258 NT_STATUS_OK
WriteX 12635 0 2048 2048 NT_STATUS_OK
Close 12635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12636 NT_STATUS_OK
ReadX 12636 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12636 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12640 NT_STATUS_OK
Close 12640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12641 NT_STATUS_OK
QUERY_FILE_INFORMATION 12641 1004 NT_STATUS_OK
WriteX 12641 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12641 258 NT_STATUS_OK
WriteX 12641 0 2048 2048 NT_STATUS_OK
Close 12641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12642 NT_STATUS_OK
ReadX 12642 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12642 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12625 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12643 NT_STATUS_OK
QUERY_FILE_INFORMATION 12643 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12629 NT_STATUS_OK
Close 12624 NT_STATUS_OK
Close 12630 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Close 12619 NT_STATUS_OK
Close 12622 NT_STATUS_OK
Close 12623 NT_STATUS_OK
Close 12620 NT_STATUS_OK
Close 12621 NT_STATUS_OK
Close 12625 NT_STATUS_OK
Close 12626 NT_STATUS_OK
Close 12627 NT_STATUS_OK
Close 12628 NT_STATUS_OK
Close 12617 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12645 NT_STATUS_OK
QUERY_FILE_INFORMATION 12645 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12647 NT_STATUS_OK
ReadX 12647 61440 4096 4096 NT_STATUS_OK
ReadX 12647 126976 4096 4096 NT_STATUS_OK
WriteX 12647 0 65536 65536 NT_STATUS_OK
WriteX 12647 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12648 NT_STATUS_OK
ReadX 12648 61440 4096 4096 NT_STATUS_OK
ReadX 12648 126976 4096 4096 NT_STATUS_OK
ReadX 12648 192512 4096 4096 NT_STATUS_OK
ReadX 12648 258048 4096 4096 NT_STATUS_OK
WriteX 12648 0 65536 65536 NT_STATUS_OK
WriteX 12648 65536 65536 65536 NT_STATUS_OK
WriteX 12648 131072 65536 65536 NT_STATUS_OK
WriteX 12648 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12649 NT_STATUS_OK
ReadX 12649 61440 4096 4096 NT_STATUS_OK
ReadX 12649 126976 4096 4096 NT_STATUS_OK
ReadX 12649 192512 4096 4096 NT_STATUS_OK
ReadX 12649 258048 4096 4096 NT_STATUS_OK
ReadX 12649 323584 4096 4096 NT_STATUS_OK
ReadX 12649 389120 4096 4096 NT_STATUS_OK
ReadX 12649 454656 4096 4096 NT_STATUS_OK
ReadX 12649 520192 4096 4096 NT_STATUS_OK
WriteX 12649 0 65536 65536 NT_STATUS_OK
WriteX 12649 65536 65536 65536 NT_STATUS_OK
WriteX 12649 131072 65536 65536 NT_STATUS_OK
WriteX 12649 196608 65536 65536 NT_STATUS_OK
WriteX 12649 262144 65536 65536 NT_STATUS_OK
WriteX 12649 327680 65536 65536 NT_STATUS_OK
WriteX 12649 393216 65536 65536 NT_STATUS_OK
WriteX 12649 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12650 NT_STATUS_OK
ReadX 12650 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12650 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12650 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12650 8192 4096 4096 NT_STATUS_OK
ReadX 12650 12288 4096 4096 NT_STATUS_OK
ReadX 12650 16384 4096 4096 NT_STATUS_OK
ReadX 12650 20480 4096 4096 NT_STATUS_OK
ReadX 12650 24576 4096 4096 NT_STATUS_OK
ReadX 12650 28672 4096 4096 NT_STATUS_OK
ReadX 12650 32768 4096 4096 NT_STATUS_OK
ReadX 12650 36864 4096 4096 NT_STATUS_OK
ReadX 12650 40960 4096 4096 NT_STATUS_OK
ReadX 12650 45056 4096 4096 NT_STATUS_OK
ReadX 12650 49152 4096 4096 NT_STATUS_OK
ReadX 12650 53248 4096 4096 NT_STATUS_OK
ReadX 12650 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12650 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12651 NT_STATUS_OK
Close 12651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12647 NT_STATUS_OK
Close 12648 NT_STATUS_OK
Close 12649 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12653 NT_STATUS_OK
WriteX 12653 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12653 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12653 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12653 1004 NT_STATUS_OK
WriteX 12653 0 57088 57088 NT_STATUS_OK
WriteX 12653 0 4096 4096 NT_STATUS_OK
Flush 12653 NT_STATUS_OK
Close 12650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12654 NT_STATUS_OK
SET_FILE_INFORMATION 12654 1004 NT_STATUS_OK
Close 12654 NT_STATUS_OK
SET_FILE_INFORMATION 12653 1004 NT_STATUS_OK
WriteX 12653 0 4096 4096 NT_STATUS_OK
Close 12653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12655 NT_STATUS_OK
Close 12655 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12657 NT_STATUS_OK
ReadX 12657 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12657 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12658 NT_STATUS_OK
WriteX 12658 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12658 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12658 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12658 1004 NT_STATUS_OK
WriteX 12658 0 51456 51456 NT_STATUS_OK
WriteX 12658 0 4096 4096 NT_STATUS_OK
Flush 12658 NT_STATUS_OK
SET_FILE_INFORMATION 12658 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12658 1004 NT_STATUS_OK
WriteX 12658 0 4096 4096 NT_STATUS_OK
Close 12658 NT_STATUS_OK
Close 12657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12660 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12662 NT_STATUS_OK
ReadX 12662 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12662 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12664 NT_STATUS_OK
Close 12664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12667 NT_STATUS_OK
WriteX 12667 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12667 258 NT_STATUS_OK
WriteX 12667 0 53077 53077 NT_STATUS_OK
Close 12667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12668 NT_STATUS_OK
WriteX 12668 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12668 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12668 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12668 1004 NT_STATUS_OK
WriteX 12668 0 65536 65536 NT_STATUS_OK
WriteX 12668 65536 1856 1856 NT_STATUS_OK
WriteX 12668 0 4096 4096 NT_STATUS_OK
Flush 12668 NT_STATUS_OK
SET_FILE_INFORMATION 12668 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12668 1004 NT_STATUS_OK
WriteX 12668 0 4096 4096 NT_STATUS_OK
Close 12668 NT_STATUS_OK
Close 12662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12670 NT_STATUS_OK
Close 12670 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12672 NT_STATUS_OK
ReadX 12672 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12674 NT_STATUS_OK
Close 12674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12677 NT_STATUS_OK
WriteX 12677 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12677 258 NT_STATUS_OK
WriteX 12677 0 7983 7983 NT_STATUS_OK
Close 12677 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12679 NT_STATUS_OK
Close 12679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12682 NT_STATUS_OK
WriteX 12682 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12682 258 NT_STATUS_OK
WriteX 12682 0 65536 65536 NT_STATUS_OK
WriteX 12682 65536 65536 65536 NT_STATUS_OK
WriteX 12682 131072 65536 65536 NT_STATUS_OK
WriteX 12682 196608 65536 65536 NT_STATUS_OK
WriteX 12682 262144 65536 65536 NT_STATUS_OK
WriteX 12682 327680 65536 65536 NT_STATUS_OK
WriteX 12682 393216 65536 65536 NT_STATUS_OK
WriteX 12682 458752 46731 46731 NT_STATUS_OK
Close 12682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12683 NT_STATUS_OK
WriteX 12683 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12683 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12672 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12683 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12683 1004 NT_STATUS_OK
WriteX 12683 0 65536 65536 NT_STATUS_OK
WriteX 12683 65536 22848 22848 NT_STATUS_OK
WriteX 12683 0 4096 4096 NT_STATUS_OK
Flush 12683 NT_STATUS_OK
SET_FILE_INFORMATION 12683 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12683 1004 NT_STATUS_OK
WriteX 12683 0 4096 4096 NT_STATUS_OK
Close 12683 NT_STATUS_OK
Close 12672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12685 NT_STATUS_OK
Close 12685 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12687 NT_STATUS_OK
ReadX 12687 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12687 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12688 NT_STATUS_OK
ReadX 12688 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12688 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12688 1004 NT_STATUS_OK
ReadX 12688 8192 4096 4096 NT_STATUS_OK
ReadX 12688 12288 4096 4096 NT_STATUS_OK
ReadX 12688 16384 4096 4096 NT_STATUS_OK
ReadX 12688 20480 4096 4096 NT_STATUS_OK
ReadX 12688 24576 4096 4096 NT_STATUS_OK
ReadX 12688 28672 4096 4096 NT_STATUS_OK
ReadX 12688 32768 4096 4096 NT_STATUS_OK
ReadX 12688 36864 4096 4096 NT_STATUS_OK
ReadX 12688 40960 4096 4096 NT_STATUS_OK
ReadX 12688 45056 4096 4096 NT_STATUS_OK
ReadX 12688 49152 4096 4096 NT_STATUS_OK
ReadX 12688 53248 4096 4096 NT_STATUS_OK
ReadX 12688 57344 4096 4096 NT_STATUS_OK
ReadX 12688 61440 4096 4096 NT_STATUS_OK
ReadX 12688 65536 4096 4096 NT_STATUS_OK
ReadX 12688 69632 4096 4096 NT_STATUS_OK
ReadX 12688 73728 4096 4096 NT_STATUS_OK
ReadX 12688 77824 4096 4096 NT_STATUS_OK
ReadX 12688 81920 4096 4096 NT_STATUS_OK
ReadX 12688 86016 4096 4096 NT_STATUS_OK
ReadX 12688 90112 4096 4096 NT_STATUS_OK
ReadX 12688 94208 4096 4096 NT_STATUS_OK
ReadX 12688 98304 4096 4096 NT_STATUS_OK
ReadX 12688 102400 4096 4096 NT_STATUS_OK
ReadX 12688 106496 4096 4096 NT_STATUS_OK
ReadX 12688 110592 4096 4096 NT_STATUS_OK
ReadX 12688 114688 4096 4096 NT_STATUS_OK
ReadX 12688 118784 4096 4096 NT_STATUS_OK
ReadX 12688 122880 4096 4096 NT_STATUS_OK
ReadX 12688 126976 4096 4096 NT_STATUS_OK
ReadX 12688 131072 4096 4096 NT_STATUS_OK
ReadX 12688 135168 4096 4096 NT_STATUS_OK
ReadX 12688 139264 4096 4096 NT_STATUS_OK
ReadX 12688 143360 4096 4096 NT_STATUS_OK
ReadX 12688 147456 4096 4096 NT_STATUS_OK
ReadX 12688 151552 4096 4096 NT_STATUS_OK
ReadX 12688 155648 4096 4096 NT_STATUS_OK
ReadX 12688 159744 4096 4096 NT_STATUS_OK
ReadX 12688 163840 4096 4096 NT_STATUS_OK
ReadX 12688 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12688 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12689 NT_STATUS_OK
Close 12689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12687 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12691 NT_STATUS_OK
WriteX 12691 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12691 258 NT_STATUS_OK
Close 12688 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12692 NT_STATUS_OK
SET_FILE_INFORMATION 12692 1004 NT_STATUS_OK
Close 12692 NT_STATUS_OK
WriteX 12691 0 42388 42388 NT_STATUS_OK
Close 12691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12693 NT_STATUS_OK
Close 12693 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12695 NT_STATUS_OK
ReadX 12695 0 4096 4096 NT_STATUS_OK
ReadX 12695 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12696 NT_STATUS_OK
WriteX 12696 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12696 258 NT_STATUS_OK
SET_FILE_INFORMATION 12696 1004 NT_STATUS_OK
WriteX 12696 0 42652 42652 NT_STATUS_OK
Close 12696 NT_STATUS_OK
Close 12695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12698 NT_STATUS_OK
Close 12698 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12700 NT_STATUS_OK
ReadX 12700 0 4096 4096 NT_STATUS_OK
ReadX 12700 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12702 NT_STATUS_OK
Close 12702 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12705 NT_STATUS_OK
WriteX 12705 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12705 258 NT_STATUS_OK
WriteX 12705 0 65536 65536 NT_STATUS_OK
WriteX 12705 65536 49 49 NT_STATUS_OK
Close 12705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12706 NT_STATUS_OK
ReadX 12706 0 61440 61440 NT_STATUS_OK
ReadX 12706 61440 4096 4096 NT_STATUS_OK
ReadX 12706 65536 61440 61440 NT_STATUS_OK
ReadX 12706 126976 4096 4096 NT_STATUS_OK
ReadX 12706 131072 61440 61440 NT_STATUS_OK
ReadX 12706 192512 4096 4096 NT_STATUS_OK
ReadX 12706 196608 61440 61440 NT_STATUS_OK
ReadX 12706 258048 4096 4096 NT_STATUS_OK
ReadX 12706 262144 61440 61440 NT_STATUS_OK
ReadX 12706 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12707 NT_STATUS_OK
ReadX 12707 0 61440 61440 NT_STATUS_OK
ReadX 12707 61440 4096 4096 NT_STATUS_OK
ReadX 12707 65536 61440 61440 NT_STATUS_OK
ReadX 12707 126976 4096 4096 NT_STATUS_OK
ReadX 12707 131072 61440 61440 NT_STATUS_OK
ReadX 12707 192512 4096 4096 NT_STATUS_OK
ReadX 12707 196608 61440 61440 NT_STATUS_OK
ReadX 12707 258048 4096 4096 NT_STATUS_OK
ReadX 12707 262144 61440 61440 NT_STATUS_OK
ReadX 12707 323584 4096 4096 NT_STATUS_OK
ReadX 12707 327680 61440 61440 NT_STATUS_OK
ReadX 12707 389120 4096 4096 NT_STATUS_OK
ReadX 12707 393216 61440 61440 NT_STATUS_OK
ReadX 12707 454656 4096 4096 NT_STATUS_OK
ReadX 12707 458752 61440 61440 NT_STATUS_OK
ReadX 12707 520192 4096 4096 NT_STATUS_OK
ReadX 12707 524288 61440 61440 NT_STATUS_OK
ReadX 12707 585728 4096 4096 NT_STATUS_OK
ReadX 12707 589824 61440 61440 NT_STATUS_OK
ReadX 12707 651264 4096 4096 NT_STATUS_OK
ReadX 12707 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12708 NT_STATUS_OK
ReadX 12708 0 61440 61440 NT_STATUS_OK
ReadX 12708 61440 4096 4096 NT_STATUS_OK
ReadX 12708 65536 61440 61440 NT_STATUS_OK
ReadX 12708 126976 4096 4096 NT_STATUS_OK
ReadX 12708 131072 61440 61440 NT_STATUS_OK
ReadX 12708 192512 4096 4096 NT_STATUS_OK
ReadX 12708 196608 61440 61440 NT_STATUS_OK
ReadX 12708 258048 4096 4096 NT_STATUS_OK
ReadX 12708 262144 61440 61440 NT_STATUS_OK
ReadX 12708 323584 4096 4096 NT_STATUS_OK
ReadX 12708 327680 61440 61440 NT_STATUS_OK
ReadX 12708 389120 4096 4096 NT_STATUS_OK
ReadX 12708 393216 61440 61440 NT_STATUS_OK
ReadX 12708 454656 4096 4096 NT_STATUS_OK
ReadX 12708 458752 61440 61440 NT_STATUS_OK
ReadX 12708 520192 4096 4096 NT_STATUS_OK
ReadX 12708 524288 61440 61440 NT_STATUS_OK
ReadX 12708 585728 4096 4096 NT_STATUS_OK
ReadX 12708 589824 61440 61440 NT_STATUS_OK
ReadX 12708 651264 4096 4096 NT_STATUS_OK
ReadX 12708 655360 61440 61440 NT_STATUS_OK
ReadX 12708 716800 4096 4096 NT_STATUS_OK
ReadX 12708 720896 61440 61440 NT_STATUS_OK
ReadX 12708 782336 4096 4096 NT_STATUS_OK
ReadX 12708 786432 61440 61440 NT_STATUS_OK
ReadX 12708 847872 4096 4096 NT_STATUS_OK
ReadX 12708 851968 61440 61440 NT_STATUS_OK
ReadX 12708 913408 4096 4096 NT_STATUS_OK
ReadX 12708 917504 61440 61440 NT_STATUS_OK
ReadX 12708 978944 4096 4096 NT_STATUS_OK
ReadX 12708 983040 61440 61440 NT_STATUS_OK
ReadX 12708 1044480 4096 4096 NT_STATUS_OK
ReadX 12708 1048576 61440 61440 NT_STATUS_OK
ReadX 12708 1110016 4096 4096 NT_STATUS_OK
ReadX 12708 1114112 61440 61440 NT_STATUS_OK
ReadX 12708 1175552 4096 4096 NT_STATUS_OK
ReadX 12708 1179648 61440 61440 NT_STATUS_OK
ReadX 12708 1241088 4096 4096 NT_STATUS_OK
ReadX 12708 1245184 61440 61440 NT_STATUS_OK
ReadX 12708 1306624 4096 4096 NT_STATUS_OK
ReadX 12708 1310720 61440 61440 NT_STATUS_OK
ReadX 12708 1372160 4096 4096 NT_STATUS_OK
ReadX 12708 1376256 61440 61440 NT_STATUS_OK
ReadX 12708 1437696 4096 4096 NT_STATUS_OK
ReadX 12708 1441792 61440 61440 NT_STATUS_OK
ReadX 12708 1503232 4096 4096 NT_STATUS_OK
ReadX 12708 1507328 61440 61440 NT_STATUS_OK
ReadX 12708 1568768 4096 4096 NT_STATUS_OK
ReadX 12708 1572864 61440 61440 NT_STATUS_OK
ReadX 12708 1634304 4096 4096 NT_STATUS_OK
ReadX 12708 1638400 61440 61440 NT_STATUS_OK
ReadX 12708 1699840 4096 4096 NT_STATUS_OK
ReadX 12708 1703936 61440 61440 NT_STATUS_OK
ReadX 12708 1765376 4096 4096 NT_STATUS_OK
ReadX 12708 1769472 61440 61440 NT_STATUS_OK
ReadX 12708 1830912 4096 4096 NT_STATUS_OK
ReadX 12708 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12709 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12710 NT_STATUS_OK
QUERY_FILE_INFORMATION 12710 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12710 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12710 1005 NT_STATUS_OK
ReadX 12710 2156 24 24 NT_STATUS_OK
ReadX 12710 2139 276 276 NT_STATUS_OK
ReadX 12710 2136 14 14 NT_STATUS_OK
ReadX 12710 2136 7 7 NT_STATUS_OK
ReadX 12710 2138 12 12 NT_STATUS_OK
ReadX 12710 2137 8 8 NT_STATUS_OK
ReadX 12710 2135 15 15 NT_STATUS_OK
ReadX 12710 0 16 16 NT_STATUS_OK
ReadX 12710 16 2048 2048 NT_STATUS_OK
ReadX 12710 2064 2048 2048 NT_STATUS_OK
ReadX 12710 257 2048 2048 NT_STATUS_OK
ReadX 12710 385 2048 2048 NT_STATUS_OK
ReadX 12710 513 2048 2048 NT_STATUS_OK
ReadX 12710 641 2048 2048 NT_STATUS_OK
ReadX 12710 769 2048 2048 NT_STATUS_OK
ReadX 12710 897 2048 2048 NT_STATUS_OK
ReadX 12710 1025 2048 2048 NT_STATUS_OK
ReadX 12710 1153 2048 2048 NT_STATUS_OK
ReadX 12710 1281 2048 2048 NT_STATUS_OK
ReadX 12710 1409 2048 2048 NT_STATUS_OK
ReadX 12710 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12712 NT_STATUS_OK
Close 12712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12706 NT_STATUS_OK
Close 12707 NT_STATUS_OK
Close 12708 NT_STATUS_OK
Close 12700 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12715 NT_STATUS_OK
WriteX 12715 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12715 258 NT_STATUS_OK
WriteX 12715 0 10575 10575 NT_STATUS_OK
Flush 12715 NT_STATUS_OK
Close 12715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12716 NT_STATUS_OK
Close 12716 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12718 NT_STATUS_OK
ReadX 12718 0 4096 4096 NT_STATUS_OK
Close 12710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12720 NT_STATUS_OK
LockX 12720 2147483538 1 NT_STATUS_OK
UnlockX 12720 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12720 1005 NT_STATUS_OK
ReadX 12720 0 512 512 NT_STATUS_OK
ReadX 12720 512 512 512 NT_STATUS_OK
ReadX 12720 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12720 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12720 1004 NT_STATUS_OK
Close 12720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12721 NT_STATUS_OK
QUERY_FILE_INFORMATION 12721 1005 NT_STATUS_OK
ReadX 12721 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12722 NT_STATUS_OK
LockX 12722 2147483538 1 NT_STATUS_OK
UnlockX 12722 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12722 1005 NT_STATUS_OK
ReadX 12722 0 512 512 NT_STATUS_OK
ReadX 12722 512 512 512 NT_STATUS_OK
ReadX 12722 1024 512 512 NT_STATUS_OK
ReadX 12722 288 20 20 NT_STATUS_OK
ReadX 12722 308 2084 2084 NT_STATUS_OK
ReadX 12722 388 2084 2084 NT_STATUS_OK
ReadX 12722 388 2084 2084 NT_STATUS_OK
ReadX 12709 2157 1386 1386 NT_STATUS_OK
ReadX 12722 2472 399 399 NT_STATUS_OK
ReadX 12722 3072 1536 1536 NT_STATUS_OK
ReadX 12722 544 149 149 NT_STATUS_OK
ReadX 12722 693 485 485 NT_STATUS_OK
Close 12722 NT_STATUS_OK
ReadX 12709 2157 4096 4096 NT_STATUS_OK
ReadX 12709 6253 4096 4096 NT_STATUS_OK
ReadX 12709 10349 4096 4096 NT_STATUS_OK
ReadX 12709 14445 4096 4096 NT_STATUS_OK
ReadX 12709 18541 4096 4096 NT_STATUS_OK
ReadX 12709 22637 256 256 NT_STATUS_OK
ReadX 12709 22893 4096 4096 NT_STATUS_OK
ReadX 12709 26989 4096 4096 NT_STATUS_OK
ReadX 12709 31085 4096 4096 NT_STATUS_OK
ReadX 12709 35181 4096 4096 NT_STATUS_OK
ReadX 12709 39277 4096 4096 NT_STATUS_OK
ReadX 12709 43373 4096 4096 NT_STATUS_OK
ReadX 12709 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12709 2157 1024 1024 NT_STATUS_OK
ReadX 12709 1667 4688 4688 NT_STATUS_OK
ReadX 12709 6355 3516 3516 NT_STATUS_OK
ReadX 12709 9871 16384 16384 NT_STATUS_OK
ReadX 12709 26255 3771 3771 NT_STATUS_OK
ReadX 12709 30026 2048 2048 NT_STATUS_OK
ReadX 12709 32074 1024 1024 NT_STATUS_OK
ReadX 12709 33098 6652 6652 NT_STATUS_OK
ReadX 12709 39750 16384 16384 NT_STATUS_OK
ReadX 12709 56134 10496 10496 NT_STATUS_OK
ReadX 12709 66630 1784 1784 NT_STATUS_OK
ReadX 12709 68414 90 90 NT_STATUS_OK
ReadX 12709 68504 273 273 NT_STATUS_OK
ReadX 12709 68777 1600 1600 NT_STATUS_OK
ReadX 12709 70377 640 640 NT_STATUS_OK
ReadX 12709 71017 1280 1280 NT_STATUS_OK
ReadX 12709 72297 8464 8464 NT_STATUS_OK
ReadX 12709 80761 158 158 NT_STATUS_OK
ReadX 12709 80919 912 912 NT_STATUS_OK
ReadX 12709 81831 1980 1980 NT_STATUS_OK
ReadX 12709 83811 2256 2256 NT_STATUS_OK
ReadX 12709 86067 400 400 NT_STATUS_OK
ReadX 12709 86467 252 252 NT_STATUS_OK
ReadX 12709 86719 42 42 NT_STATUS_OK
ReadX 12709 86761 725 725 NT_STATUS_OK
ReadX 12709 2009 512 512 NT_STATUS_OK
ReadX 12709 3895 9 9 NT_STATUS_OK
ReadX 12709 3781 46 46 NT_STATUS_OK
ReadX 12709 4059 92 92 NT_STATUS_OK
ReadX 12709 3781 92 92 NT_STATUS_OK
ReadX 12709 3986 184 184 NT_STATUS_OK
ReadX 12709 3987 16384 16384 NT_STATUS_OK
ReadX 12709 3902 16384 16384 NT_STATUS_OK
ReadX 12709 3781 10240 10240 NT_STATUS_OK
ReadX 12709 3821 16384 16384 NT_STATUS_OK
ReadX 12709 3891 935 935 NT_STATUS_OK
ReadX 12709 4060 10240 10240 NT_STATUS_OK
ReadX 12709 4059 184 184 NT_STATUS_OK
ReadX 12709 256 184 184 NT_STATUS_OK
ReadX 12709 256 1026 1026 NT_STATUS_OK
ReadX 12709 3901 326 326 NT_STATUS_OK
ReadX 12709 3899 652 652 NT_STATUS_OK
ReadX 12709 256 2 2 NT_STATUS_OK
ReadX 12709 258 4948 4948 NT_STATUS_OK
Close 12709 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12724 NT_STATUS_OK
Close 12724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12727 NT_STATUS_OK
WriteX 12727 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12727 258 NT_STATUS_OK
WriteX 12727 0 65536 65536 NT_STATUS_OK
WriteX 12727 65536 65536 65536 NT_STATUS_OK
WriteX 12727 131072 65536 65536 NT_STATUS_OK
WriteX 12727 196608 65536 65536 NT_STATUS_OK
WriteX 12727 262144 65536 65536 NT_STATUS_OK
WriteX 12727 327680 65536 65536 NT_STATUS_OK
WriteX 12727 393216 65536 65536 NT_STATUS_OK
WriteX 12727 458752 65536 65536 NT_STATUS_OK
WriteX 12727 524288 65536 65536 NT_STATUS_OK
WriteX 12727 589824 35257 35257 NT_STATUS_OK
Close 12727 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12729 NT_STATUS_OK
Close 12729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12732 NT_STATUS_OK
WriteX 12732 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12732 258 NT_STATUS_OK
WriteX 12732 0 65536 65536 NT_STATUS_OK
WriteX 12732 65536 65536 65536 NT_STATUS_OK
WriteX 12732 131072 65536 65536 NT_STATUS_OK
WriteX 12732 196608 65536 65536 NT_STATUS_OK
WriteX 12732 262144 65536 65536 NT_STATUS_OK
WriteX 12732 327680 65536 65536 NT_STATUS_OK
WriteX 12732 393216 65536 65536 NT_STATUS_OK
WriteX 12732 458752 65536 65536 NT_STATUS_OK
WriteX 12732 524288 65536 65536 NT_STATUS_OK
WriteX 12732 589824 57598 57598 NT_STATUS_OK
Close 12732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12734 NT_STATUS_OK
WriteX 12734 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12734 258 NT_STATUS_OK
WriteX 12734 0 12543 12543 NT_STATUS_OK
Flush 12734 NT_STATUS_OK
Close 12734 NT_STATUS_OK
Close 12718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12736 NT_STATUS_OK
Close 12736 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12738 NT_STATUS_OK
ReadX 12738 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12740 NT_STATUS_OK
QUERY_FILE_INFORMATION 12740 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12740 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12740 1005 NT_STATUS_OK
ReadX 12740 1938 24 24 NT_STATUS_OK
ReadX 12740 1920 276 276 NT_STATUS_OK
ReadX 12740 1918 14 14 NT_STATUS_OK
ReadX 12740 1918 7 7 NT_STATUS_OK
ReadX 12740 1919 12 12 NT_STATUS_OK
ReadX 12740 1919 8 8 NT_STATUS_OK
ReadX 12740 1917 15 15 NT_STATUS_OK
ReadX 12740 0 16 16 NT_STATUS_OK
ReadX 12740 16 2048 2048 NT_STATUS_OK
ReadX 12740 2064 2048 2048 NT_STATUS_OK
ReadX 12740 257 2048 2048 NT_STATUS_OK
ReadX 12740 385 2048 2048 NT_STATUS_OK
ReadX 12740 513 2048 2048 NT_STATUS_OK
ReadX 12740 641 2048 2048 NT_STATUS_OK
ReadX 12740 769 2048 2048 NT_STATUS_OK
ReadX 12740 897 2048 2048 NT_STATUS_OK
ReadX 12740 1025 2048 2048 NT_STATUS_OK
ReadX 12740 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12742 NT_STATUS_OK
Close 12742 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12745 NT_STATUS_OK
WriteX 12745 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12745 258 NT_STATUS_OK
WriteX 12745 0 11588 11588 NT_STATUS_OK
Flush 12745 NT_STATUS_OK
Close 12745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12746 NT_STATUS_OK
Close 12746 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12748 NT_STATUS_OK
ReadX 12748 0 4096 4096 NT_STATUS_OK
Close 12740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12750 NT_STATUS_OK
WriteX 12750 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12750 258 NT_STATUS_OK
WriteX 12750 0 11615 11615 NT_STATUS_OK
Flush 12750 NT_STATUS_OK
Close 12750 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12752 NT_STATUS_OK
Close 12752 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12754 NT_STATUS_OK
ReadX 12754 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12756 NT_STATUS_OK
Close 12756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12759 NT_STATUS_OK
WriteX 12759 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12759 258 NT_STATUS_OK
WriteX 12759 0 65536 65536 NT_STATUS_OK
WriteX 12759 65536 16050 16050 NT_STATUS_OK
Close 12759 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12739 1939 64 64 NT_STATUS_OK
ReadX 12739 128 248 248 NT_STATUS_OK
ReadX 12739 128 568 568 NT_STATUS_OK
ReadX 12739 3872 1536 1536 NT_STATUS_OK
ReadX 12739 3456 2560 2560 NT_STATUS_OK
ReadX 12739 3136 512 512 NT_STATUS_OK
ReadX 12739 2880 4096 4096 NT_STATUS_OK
ReadX 12739 3264 3072 3072 NT_STATUS_OK
ReadX 12739 320 4096 4096 NT_STATUS_OK
ReadX 12739 1024 4096 4096 NT_STATUS_OK
ReadX 12739 3616 4096 4096 NT_STATUS_OK
ReadX 12739 1939 64 64 NT_STATUS_OK
ReadX 12739 128 248 248 NT_STATUS_OK
ReadX 12739 128 608 608 NT_STATUS_OK
ReadX 12739 2858 1024 1024 NT_STATUS_OK
ReadX 12739 2810 4096 4096 NT_STATUS_OK
ReadX 12739 2826 4096 4096 NT_STATUS_OK
ReadX 12739 2580 2048 2048 NT_STATUS_OK
ReadX 12739 2800 2560 2560 NT_STATUS_OK
ReadX 12739 2100 4096 4096 NT_STATUS_OK
ReadX 12739 2084 4096 4096 NT_STATUS_OK
ReadX 12739 868 4096 4096 NT_STATUS_OK
ReadX 12739 2324 4096 4096 NT_STATUS_OK
ReadX 12739 884 4096 4096 NT_STATUS_OK
ReadX 12739 2604 1024 1024 NT_STATUS_OK
ReadX 12739 580 4096 4096 NT_STATUS_OK
ReadX 12739 596 4096 4096 NT_STATUS_OK
ReadX 12739 2752 4096 4096 NT_STATUS_OK
ReadX 12739 2842 1024 1024 NT_STATUS_OK
ReadX 12739 660 4096 4096 NT_STATUS_OK
ReadX 12739 2720 4096 4096 NT_STATUS_OK
ReadX 12739 2736 4096 4096 NT_STATUS_OK
ReadX 12739 628 4096 4096 NT_STATUS_OK
ReadX 12739 2704 4096 4096 NT_STATUS_OK
ReadX 12739 1556 4096 4096 NT_STATUS_OK
ReadX 12739 576 4096 4096 NT_STATUS_OK
ReadX 12739 3168 1536 1536 NT_STATUS_OK
ReadX 12739 832 4096 4096 NT_STATUS_OK
ReadX 12739 1088 4096 4096 NT_STATUS_OK
ReadX 12739 1344 4096 4096 NT_STATUS_OK
ReadX 12739 1600 4096 4096 NT_STATUS_OK
ReadX 12739 1856 4096 4096 NT_STATUS_OK
ReadX 12739 2112 4096 4096 NT_STATUS_OK
ReadX 12739 1892 4096 4096 NT_STATUS_OK
ReadX 12739 820 4096 4096 NT_STATUS_OK
ReadX 12739 788 4096 4096 NT_STATUS_OK
ReadX 12739 1604 4096 4096 NT_STATUS_OK
ReadX 12739 3648 4096 4096 NT_STATUS_OK
ReadX 12739 2608 4096 4096 NT_STATUS_OK
ReadX 12739 548 4096 4096 NT_STATUS_OK
ReadX 12739 740 4096 4096 NT_STATUS_OK
ReadX 12739 1344 4096 4096 NT_STATUS_OK
ReadX 12739 3392 4096 4096 NT_STATUS_OK
ReadX 12739 3904 4096 4096 NT_STATUS_OK
ReadX 12739 644 4096 4096 NT_STATUS_OK
ReadX 12739 676 4096 4096 NT_STATUS_OK
ReadX 12739 2688 4096 4096 NT_STATUS_OK
ReadX 12739 320 4096 4096 NT_STATUS_OK
ReadX 12739 900 4096 4096 NT_STATUS_OK
ReadX 12739 1908 4096 4096 NT_STATUS_OK
ReadX 12739 852 4096 4096 NT_STATUS_OK
ReadX 12739 724 4096 4096 NT_STATUS_OK
ReadX 12739 2292 4096 4096 NT_STATUS_OK
ReadX 12739 612 4096 4096 NT_STATUS_OK
ReadX 12739 388 4096 4096 NT_STATUS_OK
ReadX 12739 2368 4096 4096 NT_STATUS_OK
ReadX 12739 2624 4096 4096 NT_STATUS_OK
ReadX 12739 500 4096 4096 NT_STATUS_OK
ReadX 12739 356 4096 4096 NT_STATUS_OK
ReadX 12739 1024 4096 4096 NT_STATUS_OK
ReadX 12739 576 4096 4096 NT_STATUS_OK
ReadX 12739 340 4096 4096 NT_STATUS_OK
ReadX 12739 420 4096 4096 NT_STATUS_OK
ReadX 12739 1600 4096 4096 NT_STATUS_OK
ReadX 12739 404 4096 4096 NT_STATUS_OK
ReadX 12739 1428 4096 4096 NT_STATUS_OK
ReadX 12739 2656 4096 4096 NT_STATUS_OK
ReadX 12739 2624 4096 4096 NT_STATUS_OK
ReadX 12739 452 4096 4096 NT_STATUS_OK
ReadX 12739 692 4096 4096 NT_STATUS_OK
ReadX 12739 564 4096 4096 NT_STATUS_OK
ReadX 12739 372 4096 4096 NT_STATUS_OK
ReadX 12739 468 4096 4096 NT_STATUS_OK
ReadX 12739 484 4096 4096 NT_STATUS_OK
ReadX 12739 1088 4096 4096 NT_STATUS_OK
ReadX 12739 1924 4096 4096 NT_STATUS_OK
ReadX 12739 2768 4096 4096 NT_STATUS_OK
ReadX 12739 832 4096 4096 NT_STATUS_OK
ReadX 12739 836 4096 4096 NT_STATUS_OK
ReadX 12739 1856 4096 4096 NT_STATUS_OK
ReadX 12739 2640 4096 4096 NT_STATUS_OK
ReadX 12739 436 4096 4096 NT_STATUS_OK
ReadX 12739 1828 4096 4096 NT_STATUS_OK
ReadX 12739 804 4096 4096 NT_STATUS_OK
ReadX 12739 1860 4096 4096 NT_STATUS_OK
ReadX 12739 1812 4096 4096 NT_STATUS_OK
ReadX 12739 756 4096 4096 NT_STATUS_OK
ReadX 12739 1636 4096 4096 NT_STATUS_OK
ReadX 12739 772 4096 4096 NT_STATUS_OK
ReadX 12739 2036 4096 4096 NT_STATUS_OK
ReadX 12739 1220 4096 4096 NT_STATUS_OK
ReadX 12739 1652 4096 4096 NT_STATUS_OK
ReadX 12739 2588 4096 4096 NT_STATUS_OK
ReadX 12739 916 4096 4096 NT_STATUS_OK
ReadX 12739 260 4096 4096 NT_STATUS_OK
ReadX 12739 932 4096 4096 NT_STATUS_OK
ReadX 12739 2624 4096 4096 NT_STATUS_OK
ReadX 12739 308 4096 4096 NT_STATUS_OK
ReadX 12739 292 4096 4096 NT_STATUS_OK
ReadX 12739 1140 4096 4096 NT_STATUS_OK
ReadX 12739 276 4096 4096 NT_STATUS_OK
ReadX 12739 2020 4096 4096 NT_STATUS_OK
ReadX 12739 2880 4096 4096 NT_STATUS_OK
ReadX 12739 516 4096 4096 NT_STATUS_OK
ReadX 12739 1844 4096 4096 NT_STATUS_OK
ReadX 12739 1124 4096 4096 NT_STATUS_OK
ReadX 12739 3136 4096 4096 NT_STATUS_OK
ReadX 12739 324 4096 4096 NT_STATUS_OK
ReadX 12739 1156 4096 4096 NT_STATUS_OK
ReadX 12739 1172 4096 4096 NT_STATUS_OK
ReadX 12739 2112 4096 4096 NT_STATUS_OK
ReadX 12739 2368 4096 4096 NT_STATUS_OK
ReadX 12739 964 4096 4096 NT_STATUS_OK
ReadX 12739 980 4096 4096 NT_STATUS_OK
ReadX 12739 1012 4096 4096 NT_STATUS_OK
ReadX 12739 532 4096 4096 NT_STATUS_OK
ReadX 12739 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12739 1620 4096 4096 NT_STATUS_OK
ReadX 12739 1604 4096 4096 NT_STATUS_OK
ReadX 12739 2116 4096 4096 NT_STATUS_OK
ReadX 12739 2132 4096 4096 NT_STATUS_OK
ReadX 12739 2148 4096 4096 NT_STATUS_OK
ReadX 12739 2276 4096 4096 NT_STATUS_OK
ReadX 12739 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12761 NT_STATUS_OK
Close 12761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12764 NT_STATUS_OK
QUERY_FILE_INFORMATION 12719 1004 NT_STATUS_OK
Close 12719 NT_STATUS_OK
WriteX 12764 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12764 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12721 1004 NT_STATUS_OK
Close 12721 NT_STATUS_OK
WriteX 12764 0 65536 65536 NT_STATUS_OK
WriteX 12764 65536 64850 64850 NT_STATUS_OK
Close 12764 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12766 NT_STATUS_OK
WriteX 12766 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12766 258 NT_STATUS_OK
ReadX 12739 2068 4096 4096 NT_STATUS_OK
ReadX 12739 1588 4096 4096 NT_STATUS_OK
ReadX 12739 1572 4096 4096 NT_STATUS_OK
WriteX 12766 0 18630 18630 NT_STATUS_OK
Flush 12766 NT_STATUS_OK
Close 12766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12768 NT_STATUS_OK
Close 12768 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12770 NT_STATUS_OK
ReadX 12770 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12739 612 4096 4096 NT_STATUS_OK
ReadX 12739 564 4096 4096 NT_STATUS_OK
ReadX 12739 1876 4096 4096 NT_STATUS_OK
ReadX 12739 628 4096 4096 NT_STATUS_OK
ReadX 12739 740 4096 4096 NT_STATUS_OK
ReadX 12739 724 4096 4096 NT_STATUS_OK
ReadX 12739 644 4096 4096 NT_STATUS_OK
ReadX 12739 2324 4096 4096 NT_STATUS_OK
ReadX 12739 660 4096 4096 NT_STATUS_OK
ReadX 12739 852 4096 4096 NT_STATUS_OK
ReadX 12739 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12739 2368 4096 4096 NT_STATUS_OK
ReadX 12739 1024 4096 4096 NT_STATUS_OK
ReadX 12739 320 4096 4096 NT_STATUS_OK
ReadX 12739 580 4096 4096 NT_STATUS_OK
ReadX 12739 3136 512 512 NT_STATUS_OK
ReadX 12739 2880 4096 4096 NT_STATUS_OK
Close 12739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12771 NT_STATUS_OK
ReadX 12771 61440 4096 4096 NT_STATUS_OK
ReadX 12771 126976 4096 4096 NT_STATUS_OK
WriteX 12771 0 65536 65536 NT_STATUS_OK
WriteX 12771 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12772 NT_STATUS_OK
ReadX 12772 61440 4096 4096 NT_STATUS_OK
ReadX 12772 126976 4096 4096 NT_STATUS_OK
ReadX 12772 192512 4096 4096 NT_STATUS_OK
ReadX 12772 258048 4096 4096 NT_STATUS_OK
WriteX 12772 0 65536 65536 NT_STATUS_OK
WriteX 12772 65536 65536 65536 NT_STATUS_OK
WriteX 12772 131072 65536 65536 NT_STATUS_OK
WriteX 12772 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12773 NT_STATUS_OK
ReadX 12773 61440 4096 4096 NT_STATUS_OK
ReadX 12773 126976 4096 4096 NT_STATUS_OK
ReadX 12773 192512 4096 4096 NT_STATUS_OK
ReadX 12773 258048 4096 4096 NT_STATUS_OK
ReadX 12773 323584 4096 4096 NT_STATUS_OK
ReadX 12773 389120 4096 4096 NT_STATUS_OK
ReadX 12773 454656 4096 4096 NT_STATUS_OK
ReadX 12773 520192 4096 4096 NT_STATUS_OK
WriteX 12773 0 65536 65536 NT_STATUS_OK
WriteX 12773 65536 65536 65536 NT_STATUS_OK
WriteX 12773 131072 65536 65536 NT_STATUS_OK
WriteX 12773 196608 65536 65536 NT_STATUS_OK
WriteX 12773 262144 65536 65536 NT_STATUS_OK
WriteX 12773 327680 65536 65536 NT_STATUS_OK
WriteX 12773 393216 65536 65536 NT_STATUS_OK
WriteX 12773 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12774 NT_STATUS_OK
ReadX 12774 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12775 NT_STATUS_OK
Close 12775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12776 NT_STATUS_OK
WriteX 12776 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12776 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12774 0 8192 8192 NT_STATUS_OK
Flush 12774 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12774 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12774 0 8192 8192 NT_STATUS_OK
Flush 12774 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12774 0 8192 8192 NT_STATUS_OK
Flush 12774 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12774 0 8192 8192 NT_STATUS_OK
Flush 12774 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12778 NT_STATUS_OK
Close 12778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12770 NT_STATUS_OK
Close 12738 NT_STATUS_OK
Close 12771 NT_STATUS_OK
Close 12772 NT_STATUS_OK
Close 12773 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12781 NT_STATUS_OK
WriteX 12781 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12781 258 NT_STATUS_OK
WriteX 12781 0 62591 62591 NT_STATUS_OK
Close 12781 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12783 NT_STATUS_OK
Close 12783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12786 NT_STATUS_OK
WriteX 12786 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12786 258 NT_STATUS_OK
WriteX 12786 0 10845 10845 NT_STATUS_OK
Close 12786 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12788 NT_STATUS_OK
Close 12788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12791 NT_STATUS_OK
WriteX 12791 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12791 258 NT_STATUS_OK
WriteX 12791 0 30118 30118 NT_STATUS_OK
Close 12791 NT_STATUS_OK
WriteX 12774 0 4096 4096 NT_STATUS_OK
WriteX 12776 0 64 64 NT_STATUS_OK
Close 12776 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12774 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12793 NT_STATUS_OK
ReadX 12793 0 61440 61440 NT_STATUS_OK
ReadX 12793 61440 4096 4096 NT_STATUS_OK
ReadX 12793 65536 61440 61440 NT_STATUS_OK
ReadX 12793 126976 4096 4096 NT_STATUS_OK
ReadX 12793 131072 61440 61440 NT_STATUS_OK
ReadX 12793 192512 4096 4096 NT_STATUS_OK
ReadX 12793 196608 61440 61440 NT_STATUS_OK
ReadX 12793 258048 4096 4096 NT_STATUS_OK
ReadX 12793 262144 61440 61440 NT_STATUS_OK
ReadX 12793 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12794 NT_STATUS_OK
ReadX 12794 0 61440 61440 NT_STATUS_OK
ReadX 12794 61440 4096 4096 NT_STATUS_OK
ReadX 12794 65536 61440 61440 NT_STATUS_OK
ReadX 12794 126976 4096 4096 NT_STATUS_OK
ReadX 12794 131072 61440 61440 NT_STATUS_OK
ReadX 12794 192512 4096 4096 NT_STATUS_OK
ReadX 12794 196608 61440 61440 NT_STATUS_OK
ReadX 12794 258048 4096 4096 NT_STATUS_OK
ReadX 12794 262144 61440 61440 NT_STATUS_OK
ReadX 12794 323584 4096 4096 NT_STATUS_OK
ReadX 12794 327680 61440 61440 NT_STATUS_OK
ReadX 12794 389120 4096 4096 NT_STATUS_OK
ReadX 12794 393216 61440 61440 NT_STATUS_OK
ReadX 12794 454656 4096 4096 NT_STATUS_OK
ReadX 12794 458752 61440 61440 NT_STATUS_OK
ReadX 12794 520192 4096 4096 NT_STATUS_OK
ReadX 12794 524288 61440 61440 NT_STATUS_OK
ReadX 12794 585728 4096 4096 NT_STATUS_OK
ReadX 12794 589824 61440 61440 NT_STATUS_OK
ReadX 12794 651264 4096 4096 NT_STATUS_OK
ReadX 12794 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12795 NT_STATUS_OK
ReadX 12795 0 61440 61440 NT_STATUS_OK
ReadX 12795 61440 4096 4096 NT_STATUS_OK
ReadX 12795 65536 61440 61440 NT_STATUS_OK
ReadX 12795 126976 4096 4096 NT_STATUS_OK
ReadX 12795 131072 61440 61440 NT_STATUS_OK
ReadX 12795 192512 4096 4096 NT_STATUS_OK
ReadX 12795 196608 61440 61440 NT_STATUS_OK
ReadX 12795 258048 4096 4096 NT_STATUS_OK
ReadX 12795 262144 61440 61440 NT_STATUS_OK
ReadX 12795 323584 4096 4096 NT_STATUS_OK
ReadX 12795 327680 61440 61440 NT_STATUS_OK
ReadX 12795 389120 4096 4096 NT_STATUS_OK
ReadX 12795 393216 61440 61440 NT_STATUS_OK
ReadX 12795 454656 4096 4096 NT_STATUS_OK
ReadX 12795 458752 61440 61440 NT_STATUS_OK
ReadX 12795 520192 4096 4096 NT_STATUS_OK
ReadX 12795 524288 61440 61440 NT_STATUS_OK
ReadX 12795 585728 4096 4096 NT_STATUS_OK
ReadX 12795 589824 61440 61440 NT_STATUS_OK
ReadX 12795 651264 4096 4096 NT_STATUS_OK
ReadX 12795 655360 61440 61440 NT_STATUS_OK
ReadX 12795 716800 4096 4096 NT_STATUS_OK
ReadX 12795 720896 61440 61440 NT_STATUS_OK
ReadX 12795 782336 4096 4096 NT_STATUS_OK
ReadX 12795 786432 61440 61440 NT_STATUS_OK
ReadX 12795 847872 4096 4096 NT_STATUS_OK
ReadX 12795 851968 61440 61440 NT_STATUS_OK
ReadX 12795 913408 4096 4096 NT_STATUS_OK
ReadX 12795 917504 61440 61440 NT_STATUS_OK
ReadX 12795 978944 4096 4096 NT_STATUS_OK
ReadX 12795 983040 61440 61440 NT_STATUS_OK
ReadX 12795 1044480 4096 4096 NT_STATUS_OK
ReadX 12795 1048576 61440 61440 NT_STATUS_OK
ReadX 12795 1110016 4096 4096 NT_STATUS_OK
ReadX 12795 1114112 61440 61440 NT_STATUS_OK
ReadX 12795 1175552 4096 4096 NT_STATUS_OK
ReadX 12795 1179648 61440 61440 NT_STATUS_OK
ReadX 12795 1241088 4096 4096 NT_STATUS_OK
ReadX 12795 1245184 61440 61440 NT_STATUS_OK
ReadX 12795 1306624 4096 4096 NT_STATUS_OK
ReadX 12795 1310720 61440 61440 NT_STATUS_OK
ReadX 12795 1372160 4096 4096 NT_STATUS_OK
ReadX 12795 1376256 61440 61440 NT_STATUS_OK
ReadX 12795 1437696 4096 4096 NT_STATUS_OK
ReadX 12795 1441792 61440 61440 NT_STATUS_OK
ReadX 12795 1503232 4096 4096 NT_STATUS_OK
ReadX 12795 1507328 61440 61440 NT_STATUS_OK
ReadX 12795 1568768 4096 4096 NT_STATUS_OK
ReadX 12795 1572864 61440 61440 NT_STATUS_OK
ReadX 12795 1634304 4096 4096 NT_STATUS_OK
ReadX 12795 1638400 61440 61440 NT_STATUS_OK
ReadX 12795 1699840 4096 4096 NT_STATUS_OK
ReadX 12795 1703936 61440 61440 NT_STATUS_OK
ReadX 12795 1765376 4096 4096 NT_STATUS_OK
ReadX 12795 1769472 61440 61440 NT_STATUS_OK
ReadX 12795 1830912 4096 4096 NT_STATUS_OK
ReadX 12795 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12796 NT_STATUS_OK
Close 12796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12793 NT_STATUS_OK
Close 12794 NT_STATUS_OK
Close 12795 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12798 NT_STATUS_OK
ReadX 12798 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12799 NT_STATUS_OK
ReadX 12799 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12800 NT_STATUS_OK
ReadX 12800 0 4096 4096 NT_STATUS_OK
ReadX 12800 4096 4096 4096 NT_STATUS_OK
ReadX 12800 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12801 NT_STATUS_OK
Close 12801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12798 NT_STATUS_OK
Close 12799 NT_STATUS_OK
Close 12800 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12803 NT_STATUS_OK
ReadX 12803 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12804 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12804 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12805 NT_STATUS_OK
Close 12805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12803 NT_STATUS_OK
Close 12804 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12807 NT_STATUS_OK
ReadX 12807 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12808 NT_STATUS_OK
ReadX 12808 0 8192 8192 NT_STATUS_OK
ReadX 12808 8192 8192 8192 NT_STATUS_OK
ReadX 12808 16384 8192 8192 NT_STATUS_OK
ReadX 12808 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12810 NT_STATUS_OK
Close 12810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12808 NT_STATUS_OK
Close 12807 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12813 NT_STATUS_OK
WriteX 12813 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12813 258 NT_STATUS_OK
WriteX 12813 0 10438 10438 NT_STATUS_OK
Close 12813 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12814 NT_STATUS_OK
Close 12814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12815 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12816 NT_STATUS_OK
Close 12816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12817 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12818 NT_STATUS_OK
Close 12818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12819 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12820 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12821 NT_STATUS_OK
Close 12821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12822 NT_STATUS_OK
ReadX 12822 0 4096 4096 NT_STATUS_OK
ReadX 12822 4096 4096 4096 NT_STATUS_OK
ReadX 12822 8192 4096 4096 NT_STATUS_OK
ReadX 12822 12288 8192 8192 NT_STATUS_OK
ReadX 12822 20480 8192 8192 NT_STATUS_OK
ReadX 12822 28672 8192 8192 NT_STATUS_OK
ReadX 12822 36864 8192 8192 NT_STATUS_OK
ReadX 12822 45056 8192 8192 NT_STATUS_OK
ReadX 12822 53248 8192 8192 NT_STATUS_OK
ReadX 12822 61440 8192 8192 NT_STATUS_OK
ReadX 12822 69632 8192 8192 NT_STATUS_OK
ReadX 12822 77824 8192 8192 NT_STATUS_OK
ReadX 12822 86016 8192 8192 NT_STATUS_OK
ReadX 12822 94208 8192 8192 NT_STATUS_OK
ReadX 12822 102400 8192 8192 NT_STATUS_OK
ReadX 12822 110592 8192 8192 NT_STATUS_OK
ReadX 12822 118784 8192 8192 NT_STATUS_OK
ReadX 12822 126976 8192 8192 NT_STATUS_OK
ReadX 12822 135168 8192 8192 NT_STATUS_OK
ReadX 12822 143360 8192 8192 NT_STATUS_OK
ReadX 12822 151552 8192 8192 NT_STATUS_OK
ReadX 12822 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12822 NT_STATUS_OK
Close 12815 NT_STATUS_OK
Close 12817 NT_STATUS_OK
Close 12819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12824 NT_STATUS_OK
Close 12824 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12827 NT_STATUS_OK
WriteX 12827 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12827 258 NT_STATUS_OK
WriteX 12827 0 28489 28489 NT_STATUS_OK
Close 12827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12828 NT_STATUS_OK
Close 12828 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12830 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12830 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12831 NT_STATUS_OK
Close 12831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12830 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12833 NT_STATUS_OK
ReadX 12833 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12834 NT_STATUS_OK
ReadX 12834 0 8192 8192 NT_STATUS_OK
ReadX 12834 8192 8192 8192 NT_STATUS_OK
ReadX 12834 16384 8192 8192 NT_STATUS_OK
ReadX 12834 24576 8192 8192 NT_STATUS_OK
ReadX 12834 32768 16384 16384 NT_STATUS_OK
ReadX 12834 49152 8192 8192 NT_STATUS_OK
ReadX 12834 57344 8192 8192 NT_STATUS_OK
ReadX 12834 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12836 NT_STATUS_OK
Close 12836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12834 NT_STATUS_OK
Close 12833 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12839 NT_STATUS_OK
WriteX 12839 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12839 258 NT_STATUS_OK
WriteX 12839 0 29253 29253 NT_STATUS_OK
Close 12839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12840 NT_STATUS_OK
Close 12840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12843 NT_STATUS_OK
Close 12843 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12846 NT_STATUS_OK
WriteX 12846 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12846 258 NT_STATUS_OK
WriteX 12846 0 30183 30183 NT_STATUS_OK
Close 12846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12847 NT_STATUS_OK
Close 12847 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12849 NT_STATUS_OK
WriteX 12849 0 510 510 NT_STATUS_OK
WriteX 12849 510 512 512 NT_STATUS_OK
WriteX 12849 1022 510 510 NT_STATUS_OK
WriteX 12849 1532 510 510 NT_STATUS_OK
WriteX 12849 2042 168 168 NT_STATUS_OK
Close 12849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12850 NT_STATUS_OK
Close 12850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12852 NT_STATUS_OK
ReadX 12852 0 4096 4096 NT_STATUS_OK
WriteX 12852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12853 NT_STATUS_OK
ReadX 12853 61440 4096 4096 NT_STATUS_OK
ReadX 12853 126976 4096 4096 NT_STATUS_OK
WriteX 12853 0 65536 65536 NT_STATUS_OK
WriteX 12853 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12854 NT_STATUS_OK
ReadX 12854 61440 4096 4096 NT_STATUS_OK
ReadX 12854 126976 4096 4096 NT_STATUS_OK
ReadX 12854 192512 4096 4096 NT_STATUS_OK
ReadX 12854 258048 4096 4096 NT_STATUS_OK
WriteX 12854 0 65536 65536 NT_STATUS_OK
WriteX 12854 65536 65536 65536 NT_STATUS_OK
WriteX 12854 131072 65536 65536 NT_STATUS_OK
WriteX 12854 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12855 NT_STATUS_OK
ReadX 12855 61440 4096 4096 NT_STATUS_OK
ReadX 12855 126976 4096 4096 NT_STATUS_OK
ReadX 12855 192512 4096 4096 NT_STATUS_OK
ReadX 12855 258048 4096 4096 NT_STATUS_OK
ReadX 12855 323584 4096 4096 NT_STATUS_OK
ReadX 12855 389120 4096 4096 NT_STATUS_OK
ReadX 12855 454656 4096 4096 NT_STATUS_OK
ReadX 12855 520192 4096 4096 NT_STATUS_OK
WriteX 12855 0 65536 65536 NT_STATUS_OK
WriteX 12855 65536 65536 65536 NT_STATUS_OK
WriteX 12855 131072 65536 65536 NT_STATUS_OK
WriteX 12855 196608 65536 65536 NT_STATUS_OK
WriteX 12855 262144 65536 65536 NT_STATUS_OK
WriteX 12855 327680 65536 65536 NT_STATUS_OK
WriteX 12855 393216 65536 65536 NT_STATUS_OK
WriteX 12855 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12856 NT_STATUS_OK
Close 12856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12852 NT_STATUS_OK
Close 12853 NT_STATUS_OK
Close 12854 NT_STATUS_OK
Close 12855 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12858 NT_STATUS_OK
Close 12858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12862 NT_STATUS_OK
Close 12862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12865 NT_STATUS_OK
Close 12865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12867 NT_STATUS_OK
Close 12867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12871 NT_STATUS_OK
Close 12871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12874 NT_STATUS_OK
Close 12874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12876 NT_STATUS_OK
Close 12876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12880 NT_STATUS_OK
Close 12880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12885 NT_STATUS_OK
Close 12885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12890 NT_STATUS_OK
Close 12890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12895 NT_STATUS_OK
Close 12895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12900 NT_STATUS_OK
Close 12900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12905 NT_STATUS_OK
Close 12905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12910 NT_STATUS_OK
Close 12910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12915 NT_STATUS_OK
Close 12915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12918 NT_STATUS_OK
Close 12918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12921 NT_STATUS_OK
Close 12921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12924 NT_STATUS_OK
WriteX 12924 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12924 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12924 0 65536 65536 NT_STATUS_OK
WriteX 12924 65536 65536 65536 NT_STATUS_OK
WriteX 12924 131072 65536 65536 NT_STATUS_OK
WriteX 12924 196608 65536 65536 NT_STATUS_OK
WriteX 12924 262144 26634 26634 NT_STATUS_OK
Close 12924 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12929 NT_STATUS_OK
Close 12929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12930 NT_STATUS_OK
Close 12930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12931 NT_STATUS_OK
ReadX 12931 0 4096 4096 NT_STATUS_OK
Close 12931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12932 NT_STATUS_OK
ReadX 12932 0 4096 4096 NT_STATUS_OK
ReadX 12932 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12933 NT_STATUS_OK
Close 12933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12932 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12937 NT_STATUS_OK
Close 12937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12940 NT_STATUS_OK
Close 12940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12942 NT_STATUS_OK
Close 12942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12946 NT_STATUS_OK
Close 12946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12949 NT_STATUS_OK
Close 12949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12951 NT_STATUS_OK
Close 12951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12955 NT_STATUS_OK
Close 12955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12960 NT_STATUS_OK
Close 12960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12965 NT_STATUS_OK
Close 12965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12970 NT_STATUS_OK
Close 12970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12975 NT_STATUS_OK
Close 12975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12980 NT_STATUS_OK
Close 12980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12984 NT_STATUS_OK
Close 12984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12989 NT_STATUS_OK
Close 12989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12994 NT_STATUS_OK
Close 12994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12997 NT_STATUS_OK
Close 12997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12999 NT_STATUS_OK
Close 12999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13009 NT_STATUS_OK
Close 13009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13011 NT_STATUS_OK
ReadX 13011 0 4096 4096 NT_STATUS_OK
Close 13011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13012 NT_STATUS_OK
ReadX 13012 0 4096 4096 NT_STATUS_OK
Close 13012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13013 NT_STATUS_OK
ReadX 13013 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13023 NT_STATUS_OK
Close 13023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13025 NT_STATUS_OK
ReadX 13025 0 4096 4096 NT_STATUS_OK
Close 13025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13026 NT_STATUS_OK
ReadX 13026 0 4096 4096 NT_STATUS_OK
Close 13026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13027 NT_STATUS_OK
ReadX 13027 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13013 NT_STATUS_OK
Close 13027 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13056 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13056 0 4096 4096 NT_STATUS_OK
Close 13056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13057 NT_STATUS_OK
ReadX 13057 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13058 NT_STATUS_OK
ReadX 13058 0 4096 4096 NT_STATUS_OK
ReadX 13058 4096 4096 4096 NT_STATUS_OK
ReadX 13058 8192 4096 4096 NT_STATUS_OK
ReadX 13058 12288 4096 4096 NT_STATUS_OK
ReadX 13058 16384 4096 4096 NT_STATUS_OK
ReadX 13058 20480 4096 4096 NT_STATUS_OK
ReadX 13058 24576 4096 4096 NT_STATUS_OK
ReadX 13058 28672 4096 4096 NT_STATUS_OK
ReadX 13058 32768 4096 4096 NT_STATUS_OK
ReadX 13058 36864 4096 4096 NT_STATUS_OK
ReadX 13058 40960 4096 4096 NT_STATUS_OK
ReadX 13058 45056 4096 4096 NT_STATUS_OK
ReadX 13058 49152 4096 4096 NT_STATUS_OK
ReadX 13058 53248 4096 4096 NT_STATUS_OK
ReadX 13058 57344 4096 4096 NT_STATUS_OK
ReadX 13058 61440 4096 4096 NT_STATUS_OK
ReadX 13058 65536 4096 4096 NT_STATUS_OK
ReadX 13058 69632 4096 4096 NT_STATUS_OK
ReadX 13058 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13058 1004 NT_STATUS_OK
WriteX 13058 0 4096 4096 NT_STATUS_OK
Close 13058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13059 NT_STATUS_OK
SET_FILE_INFORMATION 13059 1004 NT_STATUS_OK
Close 13059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13060 NT_STATUS_OK
ReadX 13060 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13061 NT_STATUS_OK
Close 13061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13064 NT_STATUS_OK
WriteX 13064 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13064 258 NT_STATUS_OK
WriteX 13064 0 65536 65536 NT_STATUS_OK
WriteX 13064 65536 19979 19979 NT_STATUS_OK
Close 13064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13065 NT_STATUS_OK
ReadX 13065 0 4096 4096 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
QUERY_FILE_INFORMATION 13065 1004 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
SET_FILE_INFORMATION 13065 1004 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
Close 13065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13066 NT_STATUS_OK
ReadX 13066 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13067 NT_STATUS_OK
ReadX 13067 0 4096 4096 NT_STATUS_OK
Close 13066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13068 NT_STATUS_OK
ReadX 13068 0 4096 4096 NT_STATUS_OK
Close 13068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13069 NT_STATUS_OK
ReadX 13069 0 4096 4096 NT_STATUS_OK
Close 13069 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13070 NT_STATUS_OK
ReadX 13070 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13070 1004 NT_STATUS_OK
WriteX 13070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13071 NT_STATUS_OK
Close 13071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13067 NT_STATUS_OK
Close 13070 NT_STATUS_OK
Close 13060 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13073 NT_STATUS_OK
Close 13073 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13076 NT_STATUS_OK
WriteX 13076 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13076 258 NT_STATUS_OK
WriteX 13076 0 65536 65536 NT_STATUS_OK
WriteX 13076 65536 17654 17654 NT_STATUS_OK
Close 13076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13077 NT_STATUS_OK
ReadX 13077 0 4096 4096 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
QUERY_FILE_INFORMATION 13077 1004 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
SET_FILE_INFORMATION 13077 1004 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
Close 13077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13078 NT_STATUS_OK
SET_FILE_INFORMATION 13078 1004 NT_STATUS_OK
Close 13078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13079 NT_STATUS_OK
ReadX 13079 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13080 NT_STATUS_OK
Close 13080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13082 NT_STATUS_OK
ReadX 13082 0 4096 4096 NT_STATUS_OK
ReadX 13082 4096 4096 4096 NT_STATUS_OK
ReadX 13082 8192 4096 4096 NT_STATUS_OK
ReadX 13082 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13082 16384 4096 4096 NT_STATUS_OK
ReadX 13082 20480 4096 4096 NT_STATUS_OK
ReadX 13082 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13083 NT_STATUS_OK
ReadX 13083 0 4096 4096 NT_STATUS_OK
Close 13083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13084 NT_STATUS_OK
ReadX 13084 0 4096 4096 NT_STATUS_OK
Close 13084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13085 NT_STATUS_OK
ReadX 13085 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13085 1004 NT_STATUS_OK
WriteX 13085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13086 NT_STATUS_OK
Close 13086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13085 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13088 NT_STATUS_OK
Close 13088 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13091 NT_STATUS_OK
WriteX 13091 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13091 258 NT_STATUS_OK
WriteX 13091 0 65536 65536 NT_STATUS_OK
WriteX 13091 65536 19490 19490 NT_STATUS_OK
Close 13091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13092 NT_STATUS_OK
ReadX 13092 0 4096 4096 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
QUERY_FILE_INFORMATION 13092 1004 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
SET_FILE_INFORMATION 13092 1004 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
Close 13092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13093 NT_STATUS_OK
SET_FILE_INFORMATION 13093 1004 NT_STATUS_OK
Close 13093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13094 NT_STATUS_OK
ReadX 13094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13095 NT_STATUS_OK
Close 13095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13097 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13097 0 4096 4096 NT_STATUS_OK
Close 13097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13098 NT_STATUS_OK
ReadX 13098 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13099 NT_STATUS_OK
ReadX 13099 0 4096 4096 NT_STATUS_OK
ReadX 13099 4096 4096 4096 NT_STATUS_OK
ReadX 13099 8192 4096 4096 NT_STATUS_OK
ReadX 13099 12288 4096 4096 NT_STATUS_OK
ReadX 13099 16384 4096 4096 NT_STATUS_OK
ReadX 13099 20480 4096 4096 NT_STATUS_OK
ReadX 13099 24576 4096 4096 NT_STATUS_OK
ReadX 13099 28672 4096 4096 NT_STATUS_OK
ReadX 13099 32768 4096 4096 NT_STATUS_OK
ReadX 13099 36864 4096 4096 NT_STATUS_OK
ReadX 13099 40960 4096 4096 NT_STATUS_OK
ReadX 13099 45056 4096 4096 NT_STATUS_OK
ReadX 13099 49152 4096 4096 NT_STATUS_OK
ReadX 13099 53248 4096 4096 NT_STATUS_OK
ReadX 13099 57344 4096 4096 NT_STATUS_OK
ReadX 13099 61440 4096 4096 NT_STATUS_OK
ReadX 13099 65536 4096 4096 NT_STATUS_OK
ReadX 13099 69632 4096 4096 NT_STATUS_OK
ReadX 13099 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13099 1004 NT_STATUS_OK
WriteX 13099 0 4096 4096 NT_STATUS_OK
Close 13099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13100 NT_STATUS_OK
SET_FILE_INFORMATION 13100 1004 NT_STATUS_OK
Close 13100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13101 NT_STATUS_OK
ReadX 13101 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13102 NT_STATUS_OK
Close 13102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13094 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13105 NT_STATUS_OK
WriteX 13105 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13105 258 NT_STATUS_OK
WriteX 13105 0 65536 65536 NT_STATUS_OK
WriteX 13105 65536 8866 8866 NT_STATUS_OK
Close 13105 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13106 NT_STATUS_OK
ReadX 13106 0 4096 4096 NT_STATUS_OK
WriteX 13106 0 4096 4096 NT_STATUS_OK
Flush 13106 NT_STATUS_OK
SET_FILE_INFORMATION 13106 1004 NT_STATUS_OK
WriteX 13106 0 4096 4096 NT_STATUS_OK
Flush 13106 NT_STATUS_OK
Close 13106 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13107 NT_STATUS_OK
ReadX 13107 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13107 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13108 NT_STATUS_OK
ReadX 13108 0 4096 4096 NT_STATUS_OK
Close 13108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13109 NT_STATUS_OK
ReadX 13109 0 4096 4096 NT_STATUS_OK
Close 13109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13110 NT_STATUS_OK
ReadX 13110 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13110 1004 NT_STATUS_OK
WriteX 13110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13111 NT_STATUS_OK
Close 13111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13110 NT_STATUS_OK
Close 13101 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13113 NT_STATUS_OK
Close 13113 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13116 NT_STATUS_OK
WriteX 13116 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13116 258 NT_STATUS_OK
WriteX 13116 0 65536 65536 NT_STATUS_OK
WriteX 13116 65536 9298 9298 NT_STATUS_OK
Close 13116 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13117 NT_STATUS_OK
ReadX 13117 0 4096 4096 NT_STATUS_OK
WriteX 13117 0 4096 4096 NT_STATUS_OK
Flush 13117 NT_STATUS_OK
SET_FILE_INFORMATION 13117 1004 NT_STATUS_OK
WriteX 13117 0 4096 4096 NT_STATUS_OK
Flush 13117 NT_STATUS_OK
Close 13117 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13118 NT_STATUS_OK
SET_FILE_INFORMATION 13118 1004 NT_STATUS_OK
Close 13118 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13119 NT_STATUS_OK
ReadX 13119 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13120 NT_STATUS_OK
Close 13120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13123 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13123 0 4096 4096 NT_STATUS_OK
Close 13123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13124 NT_STATUS_OK
ReadX 13124 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13124 4096 4096 4096 NT_STATUS_OK
ReadX 13124 8192 4096 4096 NT_STATUS_OK
ReadX 13124 12288 4096 4096 NT_STATUS_OK
ReadX 13124 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13125 NT_STATUS_OK
ReadX 13125 0 4096 4096 NT_STATUS_OK
Close 13125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13126 NT_STATUS_OK
ReadX 13126 0 4096 4096 NT_STATUS_OK
Close 13126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13127 NT_STATUS_OK
ReadX 13127 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13127 1004 NT_STATUS_OK
WriteX 13127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13128 NT_STATUS_OK
Close 13128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13124 NT_STATUS_OK
Close 13127 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13130 NT_STATUS_OK
Close 13130 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13133 NT_STATUS_OK
WriteX 13133 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13133 258 NT_STATUS_OK
WriteX 13133 0 65536 65536 NT_STATUS_OK
WriteX 13133 65536 11540 11540 NT_STATUS_OK
Close 13133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13134 NT_STATUS_OK
ReadX 13134 0 4096 4096 NT_STATUS_OK
WriteX 13134 0 4096 4096 NT_STATUS_OK
Flush 13134 NT_STATUS_OK
SET_FILE_INFORMATION 13134 1004 NT_STATUS_OK
WriteX 13134 0 4096 4096 NT_STATUS_OK
Flush 13134 NT_STATUS_OK
Close 13134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13135 NT_STATUS_OK
SET_FILE_INFORMATION 13135 1004 NT_STATUS_OK
Close 13135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13136 NT_STATUS_OK
ReadX 13136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13137 NT_STATUS_OK
Close 13137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13139 NT_STATUS_OK
ReadX 13139 61440 4096 4096 NT_STATUS_OK
ReadX 13139 126976 4096 4096 NT_STATUS_OK
WriteX 13139 0 65536 65536 NT_STATUS_OK
WriteX 13139 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13140 NT_STATUS_OK
ReadX 13140 61440 4096 4096 NT_STATUS_OK
ReadX 13140 126976 4096 4096 NT_STATUS_OK
ReadX 13140 192512 4096 4096 NT_STATUS_OK
ReadX 13140 258048 4096 4096 NT_STATUS_OK
WriteX 13140 0 65536 65536 NT_STATUS_OK
WriteX 13140 65536 65536 65536 NT_STATUS_OK
WriteX 13140 131072 65536 65536 NT_STATUS_OK
WriteX 13140 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13141 NT_STATUS_OK
ReadX 13141 61440 4096 4096 NT_STATUS_OK
ReadX 13141 126976 4096 4096 NT_STATUS_OK
ReadX 13141 192512 4096 4096 NT_STATUS_OK
ReadX 13141 258048 4096 4096 NT_STATUS_OK
ReadX 13141 323584 4096 4096 NT_STATUS_OK
ReadX 13141 389120 4096 4096 NT_STATUS_OK
ReadX 13141 454656 4096 4096 NT_STATUS_OK
ReadX 13141 520192 4096 4096 NT_STATUS_OK
WriteX 13141 0 65536 65536 NT_STATUS_OK
WriteX 13141 65536 65536 65536 NT_STATUS_OK
WriteX 13141 131072 65536 65536 NT_STATUS_OK
WriteX 13141 196608 65536 65536 NT_STATUS_OK
WriteX 13141 262144 65536 65536 NT_STATUS_OK
WriteX 13141 327680 65536 65536 NT_STATUS_OK
WriteX 13141 393216 65536 65536 NT_STATUS_OK
WriteX 13141 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13142 NT_STATUS_OK
ReadX 13142 0 4096 4096 NT_STATUS_OK
ReadX 13142 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13143 NT_STATUS_OK
WriteX 13143 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13143 258 NT_STATUS_OK
WriteX 13143 0 53 53 NT_STATUS_OK
Close 13143 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13144 NT_STATUS_OK
Close 13144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13136 NT_STATUS_OK
Close 13082 NT_STATUS_OK
Close 13139 NT_STATUS_OK
Close 13140 NT_STATUS_OK
Close 13141 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13142 8192 4096 4096 NT_STATUS_OK
ReadX 13142 12288 4096 4096 NT_STATUS_OK
WriteX 13146 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13146 258 NT_STATUS_OK
ReadX 13142 16384 4096 4096 NT_STATUS_OK
ReadX 13142 20480 4096 4096 NT_STATUS_OK
WriteX 13146 0 15360 15360 NT_STATUS_OK
Close 13146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13147 NT_STATUS_OK
ReadX 13147 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13147 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13147 1004 NT_STATUS_OK
WriteX 13147 0 4096 4096 NT_STATUS_OK
Close 13147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13148 NT_STATUS_OK
Close 13148 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13150 NT_STATUS_OK
ReadX 13150 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13151 NT_STATUS_OK
Close 13151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13150 4096 4096 4096 NT_STATUS_OK
ReadX 13150 8192 4096 4096 NT_STATUS_OK
ReadX 13150 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13153 NT_STATUS_OK
ReadX 13153 0 4096 4096 NT_STATUS_OK
ReadX 13153 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13154 NT_STATUS_OK
ReadX 13154 0 4096 4096 NT_STATUS_OK
ReadX 13154 4096 4096 4096 NT_STATUS_OK
ReadX 13154 8192 4096 4096 NT_STATUS_OK
Close 13153 NT_STATUS_OK
Close 13154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13155 NT_STATUS_OK
WriteX 13155 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13155 258 NT_STATUS_OK
WriteX 13155 0 15360 15360 NT_STATUS_OK
Close 13155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13156 NT_STATUS_OK
ReadX 13156 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13156 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13156 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13157 NT_STATUS_OK
Close 13157 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13159 NT_STATUS_OK
ReadX 13159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13160 NT_STATUS_OK
SET_FILE_INFORMATION 13160 1004 NT_STATUS_OK
Close 13160 NT_STATUS_OK
WriteX 13156 0 4096 4096 NT_STATUS_OK
Close 13156 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13161 NT_STATUS_OK
Close 13161 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13163 NT_STATUS_OK
ReadX 13163 0 4096 4096 NT_STATUS_OK
ReadX 13163 4096 4096 4096 NT_STATUS_OK
ReadX 13163 8192 4096 4096 NT_STATUS_OK
ReadX 13163 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13163 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13163 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13164 NT_STATUS_OK
ReadX 13164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13165 NT_STATUS_OK
WriteX 13165 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13165 258 NT_STATUS_OK
WriteX 13165 0 53 53 NT_STATUS_OK
Close 13165 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13166 NT_STATUS_OK
Close 13166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13164 4096 4096 4096 NT_STATUS_OK
ReadX 13164 8192 4096 4096 NT_STATUS_OK
ReadX 13164 12288 4096 4096 NT_STATUS_OK
WriteX 13168 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13168 258 NT_STATUS_OK
WriteX 13168 0 12006 12006 NT_STATUS_OK
Close 13168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13169 NT_STATUS_OK
ReadX 13169 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13169 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13169 1004 NT_STATUS_OK
WriteX 13169 0 4096 4096 NT_STATUS_OK
Close 13169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13170 NT_STATUS_OK
Close 13170 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13172 NT_STATUS_OK
ReadX 13172 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13173 NT_STATUS_OK
Close 13173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13172 4096 4096 4096 NT_STATUS_OK
ReadX 13172 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13175 NT_STATUS_OK
WriteX 13175 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13175 258 NT_STATUS_OK
WriteX 13175 0 11991 11991 NT_STATUS_OK
Close 13175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13176 NT_STATUS_OK
ReadX 13176 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13176 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13176 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13164 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13177 NT_STATUS_OK
Close 13177 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13179 NT_STATUS_OK
ReadX 13179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13180 NT_STATUS_OK
WriteX 13163 0 19054 19054 NT_STATUS_OK
SET_FILE_INFORMATION 13180 1004 NT_STATUS_OK
Close 13180 NT_STATUS_OK
WriteX 13176 0 4096 4096 NT_STATUS_OK
Close 13176 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13181 NT_STATUS_OK
Close 13181 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13183 NT_STATUS_OK
ReadX 13183 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13184 NT_STATUS_OK
Close 13184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13183 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13183 1004 NT_STATUS_OK
ReadX 13183 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13183 1004 NT_STATUS_OK
WriteX 13183 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13183 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13183 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13183 1004 NT_STATUS_OK
Close 13159 NT_STATUS_OK
WriteX 13183 0 12288 12288 NT_STATUS_OK
Close 13179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13186 NT_STATUS_OK
Close 13186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13163 NT_STATUS_OK
Close 13183 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13188 NT_STATUS_OK
Close 13188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13190 NT_STATUS_OK
ReadX 13190 0 61440 61440 NT_STATUS_OK
ReadX 13190 61440 4096 4096 NT_STATUS_OK
ReadX 13190 65536 61440 61440 NT_STATUS_OK
ReadX 13190 126976 4096 4096 NT_STATUS_OK
ReadX 13190 131072 61440 61440 NT_STATUS_OK
ReadX 13190 192512 4096 4096 NT_STATUS_OK
ReadX 13190 196608 61440 61440 NT_STATUS_OK
ReadX 13190 258048 4096 4096 NT_STATUS_OK
ReadX 13190 262144 61440 61440 NT_STATUS_OK
ReadX 13190 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13191 NT_STATUS_OK
ReadX 13191 0 61440 61440 NT_STATUS_OK
ReadX 13191 61440 4096 4096 NT_STATUS_OK
ReadX 13191 65536 61440 61440 NT_STATUS_OK
ReadX 13191 126976 4096 4096 NT_STATUS_OK
ReadX 13191 131072 61440 61440 NT_STATUS_OK
ReadX 13191 192512 4096 4096 NT_STATUS_OK
ReadX 13191 196608 61440 61440 NT_STATUS_OK
ReadX 13191 258048 4096 4096 NT_STATUS_OK
ReadX 13191 262144 61440 61440 NT_STATUS_OK
ReadX 13191 323584 4096 4096 NT_STATUS_OK
ReadX 13191 327680 61440 61440 NT_STATUS_OK
ReadX 13191 389120 4096 4096 NT_STATUS_OK
ReadX 13191 393216 61440 61440 NT_STATUS_OK
ReadX 13191 454656 4096 4096 NT_STATUS_OK
ReadX 13191 458752 61440 61440 NT_STATUS_OK
ReadX 13191 520192 4096 4096 NT_STATUS_OK
ReadX 13191 524288 61440 61440 NT_STATUS_OK
ReadX 13191 585728 4096 4096 NT_STATUS_OK
ReadX 13191 589824 61440 61440 NT_STATUS_OK
ReadX 13191 651264 4096 4096 NT_STATUS_OK
ReadX 13191 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13192 NT_STATUS_OK
ReadX 13192 0 61440 61440 NT_STATUS_OK
ReadX 13192 61440 4096 4096 NT_STATUS_OK
ReadX 13192 65536 61440 61440 NT_STATUS_OK
ReadX 13192 126976 4096 4096 NT_STATUS_OK
ReadX 13192 131072 61440 61440 NT_STATUS_OK
ReadX 13192 192512 4096 4096 NT_STATUS_OK
ReadX 13192 196608 61440 61440 NT_STATUS_OK
ReadX 13192 258048 4096 4096 NT_STATUS_OK
ReadX 13192 262144 61440 61440 NT_STATUS_OK
ReadX 13192 323584 4096 4096 NT_STATUS_OK
ReadX 13192 327680 61440 61440 NT_STATUS_OK
ReadX 13192 389120 4096 4096 NT_STATUS_OK
ReadX 13192 393216 61440 61440 NT_STATUS_OK
ReadX 13192 454656 4096 4096 NT_STATUS_OK
ReadX 13192 458752 61440 61440 NT_STATUS_OK
ReadX 13192 520192 4096 4096 NT_STATUS_OK
ReadX 13192 524288 61440 61440 NT_STATUS_OK
ReadX 13192 585728 4096 4096 NT_STATUS_OK
ReadX 13192 589824 61440 61440 NT_STATUS_OK
ReadX 13192 651264 4096 4096 NT_STATUS_OK
ReadX 13192 655360 61440 61440 NT_STATUS_OK
ReadX 13192 716800 4096 4096 NT_STATUS_OK
ReadX 13192 720896 61440 61440 NT_STATUS_OK
ReadX 13192 782336 4096 4096 NT_STATUS_OK
ReadX 13192 786432 61440 61440 NT_STATUS_OK
ReadX 13192 847872 4096 4096 NT_STATUS_OK
ReadX 13192 851968 61440 61440 NT_STATUS_OK
ReadX 13192 913408 4096 4096 NT_STATUS_OK
ReadX 13192 917504 61440 61440 NT_STATUS_OK
ReadX 13192 978944 4096 4096 NT_STATUS_OK
ReadX 13192 983040 61440 61440 NT_STATUS_OK
ReadX 13192 1044480 4096 4096 NT_STATUS_OK
ReadX 13192 1048576 61440 61440 NT_STATUS_OK
ReadX 13192 1110016 4096 4096 NT_STATUS_OK
ReadX 13192 1114112 61440 61440 NT_STATUS_OK
ReadX 13192 1175552 4096 4096 NT_STATUS_OK
ReadX 13192 1179648 61440 61440 NT_STATUS_OK
ReadX 13192 1241088 4096 4096 NT_STATUS_OK
ReadX 13192 1245184 61440 61440 NT_STATUS_OK
ReadX 13192 1306624 4096 4096 NT_STATUS_OK
ReadX 13192 1310720 61440 61440 NT_STATUS_OK
ReadX 13192 1372160 4096 4096 NT_STATUS_OK
ReadX 13192 1376256 61440 61440 NT_STATUS_OK
ReadX 13192 1437696 4096 4096 NT_STATUS_OK
ReadX 13192 1441792 61440 61440 NT_STATUS_OK
ReadX 13192 1503232 4096 4096 NT_STATUS_OK
ReadX 13192 1507328 61440 61440 NT_STATUS_OK
ReadX 13192 1568768 4096 4096 NT_STATUS_OK
ReadX 13192 1572864 61440 61440 NT_STATUS_OK
ReadX 13192 1634304 4096 4096 NT_STATUS_OK
ReadX 13192 1638400 61440 61440 NT_STATUS_OK
ReadX 13192 1699840 4096 4096 NT_STATUS_OK
ReadX 13192 1703936 61440 61440 NT_STATUS_OK
ReadX 13192 1765376 4096 4096 NT_STATUS_OK
ReadX 13192 1769472 61440 61440 NT_STATUS_OK
ReadX 13192 1830912 4096 4096 NT_STATUS_OK
ReadX 13192 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13193 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13194 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13194 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13195 NT_STATUS_OK
ReadX 13195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13196 NT_STATUS_OK
ReadX 13196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13197 NT_STATUS_OK
ReadX 13197 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13198 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13199 NT_STATUS_OK
QUERY_FILE_INFORMATION 13199 1004 NT_STATUS_OK
WriteX 13199 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13199 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13200 NT_STATUS_OK
Close 13200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13201 NT_STATUS_OK
WriteX 13201 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13201 258 NT_STATUS_OK
WriteX 13201 0 491 491 NT_STATUS_OK
Close 13201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13202 NT_STATUS_OK
ReadX 13202 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13199 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13204 NT_STATUS_OK
Close 13204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13205 NT_STATUS_OK
WriteX 13205 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13205 258 NT_STATUS_OK
WriteX 13205 0 543 543 NT_STATUS_OK
Close 13205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13206 NT_STATUS_OK
ReadX 13206 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13190 NT_STATUS_OK
Close 13191 NT_STATUS_OK
Close 13192 NT_STATUS_OK
Close 13206 NT_STATUS_OK
Close 13194 NT_STATUS_OK
Close 13195 NT_STATUS_OK
Close 13196 NT_STATUS_OK
Close 13197 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13209 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13210 NT_STATUS_OK
ReadX 13210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13211 NT_STATUS_OK
ReadX 13211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13212 NT_STATUS_OK
ReadX 13212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13213 NT_STATUS_OK
ReadX 13213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13214 NT_STATUS_OK
ReadX 13214 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13218 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13219 NT_STATUS_OK
QUERY_FILE_INFORMATION 13219 1004 NT_STATUS_OK
WriteX 13219 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13219 258 NT_STATUS_OK
WriteX 13219 0 2048 2048 NT_STATUS_OK
Close 13219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13220 0 4096 4096 NT_STATUS_OK
Flush 13220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13220 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13225 NT_STATUS_OK
WriteX 13225 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13225 258 NT_STATUS_OK
WriteX 13225 0 2048 2048 NT_STATUS_OK
Close 13225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13226 NT_STATUS_OK
ReadX 13226 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13230 NT_STATUS_OK
Close 13230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13231 NT_STATUS_OK
WriteX 13231 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13231 258 NT_STATUS_OK
WriteX 13231 0 2048 2048 NT_STATUS_OK
Close 13231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13232 NT_STATUS_OK
ReadX 13232 0 2048 2048 NT_STATUS_OK
ReadX 13210 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13214 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13226 0 4096 4096 NT_STATUS_OK
WriteX 13210 0 8192 8192 NT_STATUS_OK
WriteX 13211 0 4096 4096 NT_STATUS_OK
WriteX 13212 0 4096 4096 NT_STATUS_OK
ReadX 13226 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13235 NT_STATUS_OK
ReadX 13235 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13236 NT_STATUS_OK
QUERY_FILE_INFORMATION 13236 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13235 NT_STATUS_OK
Close 13211 NT_STATUS_OK
Close 13212 NT_STATUS_OK
Close 13213 NT_STATUS_OK
Close 13226 NT_STATUS_OK
Close 13210 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13238 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13239 NT_STATUS_OK
ReadX 13239 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13240 NT_STATUS_OK
ReadX 13240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13241 NT_STATUS_OK
ReadX 13241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13242 NT_STATUS_OK
ReadX 13242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13243 NT_STATUS_OK
ReadX 13243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13244 NT_STATUS_OK
ReadX 13244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13245 NT_STATUS_OK
ReadX 13245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13246 NT_STATUS_OK
ReadX 13246 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13247 NT_STATUS_OK
ReadX 13247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13248 NT_STATUS_OK
ReadX 13248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13249 NT_STATUS_OK
ReadX 13249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13250 NT_STATUS_OK
ReadX 13250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13251 NT_STATUS_OK
ReadX 13251 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13255 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13256 NT_STATUS_OK
QUERY_FILE_INFORMATION 13256 1004 NT_STATUS_OK
WriteX 13256 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13256 258 NT_STATUS_OK
WriteX 13256 0 2048 2048 NT_STATUS_OK
Close 13256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13257 NT_STATUS_OK
ReadX 13257 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13259 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13263 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13264 NT_STATUS_OK
QUERY_FILE_INFORMATION 13264 1004 NT_STATUS_OK
WriteX 13264 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13264 258 NT_STATUS_OK
WriteX 13264 0 2048 2048 NT_STATUS_OK
Close 13264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13265 NT_STATUS_OK
ReadX 13265 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13257 0 4096 4096 NT_STATUS_OK
Flush 13257 NT_STATUS_OK
WriteX 13265 0 4096 4096 NT_STATUS_OK
Flush 13265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13257 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13265 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13259 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13266 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13267 NT_STATUS_OK
WriteX 13267 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13267 258 NT_STATUS_OK
WriteX 13267 0 4096 4096 NT_STATUS_OK
Close 13267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13268 NT_STATUS_OK
ReadX 13268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13269 NT_STATUS_OK
Close 13269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13270 NT_STATUS_OK
WriteX 13270 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13270 258 NT_STATUS_OK
WriteX 13270 0 4096 4096 NT_STATUS_OK
Close 13270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13271 NT_STATUS_OK
ReadX 13271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13271 0 4096 4096 NT_STATUS_OK
Close 13268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13251 NT_STATUS_OK
Close 13245 NT_STATUS_OK
Close 13259 NT_STATUS_OK
Close 13248 NT_STATUS_OK
Close 13249 NT_STATUS_OK
Close 13250 NT_STATUS_OK
Close 13246 NT_STATUS_OK
Close 13239 NT_STATUS_OK
Close 13240 NT_STATUS_OK
Close 13243 NT_STATUS_OK
Close 13244 NT_STATUS_OK
Close 13241 NT_STATUS_OK
Close 13242 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13274 NT_STATUS_OK
Close 13274 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13276 NT_STATUS_OK
ReadX 13276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13277 NT_STATUS_OK
Close 13277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13278 NT_STATUS_OK
WriteX 13278 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13278 258 NT_STATUS_OK
WriteX 13278 0 2048 2048 NT_STATUS_OK
Close 13278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13280 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13281 NT_STATUS_OK
ReadX 13281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13282 NT_STATUS_OK
ReadX 13282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13283 NT_STATUS_OK
ReadX 13283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13284 NT_STATUS_OK
ReadX 13284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13285 NT_STATUS_OK
ReadX 13285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13286 NT_STATUS_OK
ReadX 13286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13287 NT_STATUS_OK
ReadX 13287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13288 NT_STATUS_OK
ReadX 13288 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13289 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13290 NT_STATUS_OK
ReadX 13290 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13291 NT_STATUS_OK
ReadX 13291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13292 NT_STATUS_OK
ReadX 13292 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13293 NT_STATUS_OK
QUERY_FILE_INFORMATION 13293 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13276 NT_STATUS_OK
Close 13279 NT_STATUS_OK
Close 13291 NT_STATUS_OK
Close 13286 NT_STATUS_OK
Close 13287 NT_STATUS_OK
Close 13288 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Close 13290 NT_STATUS_OK
Close 13292 NT_STATUS_OK
Close 13280 NT_STATUS_OK
Close 13281 NT_STATUS_OK
Close 13284 NT_STATUS_OK
Close 13285 NT_STATUS_OK
Close 13282 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13295 NT_STATUS_OK
QUERY_FILE_INFORMATION 13295 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13297 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13297 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13298 NT_STATUS_OK
ReadX 13298 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13299 NT_STATUS_OK
ReadX 13299 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13300 NT_STATUS_OK
ReadX 13300 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13301 NT_STATUS_OK
ReadX 13301 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13302 NT_STATUS_OK
ReadX 13302 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13303 NT_STATUS_OK
ReadX 13303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13305 NT_STATUS_OK
ReadX 13305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13306 NT_STATUS_OK
ReadX 13306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13307 NT_STATUS_OK
ReadX 13307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13308 NT_STATUS_OK
ReadX 13308 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13309 NT_STATUS_OK
ReadX 13309 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13310 NT_STATUS_OK
ReadX 13310 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13314 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13315 NT_STATUS_OK
QUERY_FILE_INFORMATION 13315 1004 NT_STATUS_OK
WriteX 13315 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13315 258 NT_STATUS_OK
WriteX 13315 0 2048 2048 NT_STATUS_OK
Close 13315 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13316 NT_STATUS_OK
ReadX 13316 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13317 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13317 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13318 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13319 NT_STATUS_OK
ReadX 13319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13320 NT_STATUS_OK
ReadX 13320 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13321 NT_STATUS_OK
ReadX 13321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13322 NT_STATUS_OK
ReadX 13322 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13326 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13327 NT_STATUS_OK
QUERY_FILE_INFORMATION 13327 1004 NT_STATUS_OK
WriteX 13327 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13327 258 NT_STATUS_OK
WriteX 13327 0 2048 2048 NT_STATUS_OK
Close 13327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13328 NT_STATUS_OK
ReadX 13328 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13329 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13330 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13330 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13334 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13335 NT_STATUS_OK
QUERY_FILE_INFORMATION 13335 1004 NT_STATUS_OK
WriteX 13335 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13335 258 NT_STATUS_OK
WriteX 13335 0 2048 2048 NT_STATUS_OK
Close 13335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13336 NT_STATUS_OK
ReadX 13336 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13316 0 4096 4096 NT_STATUS_OK
Flush 13316 NT_STATUS_OK
WriteX 13328 0 4096 4096 NT_STATUS_OK
Flush 13328 NT_STATUS_OK
WriteX 13336 0 4096 4096 NT_STATUS_OK
Flush 13336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13316 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13328 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13336 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13318 4096 16384 16384 NT_STATUS_OK
ReadX 13298 4096 16384 16384 NT_STATUS_OK
ReadX 13330 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13337 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13338 NT_STATUS_OK
ReadX 13338 0 2048 2048 NT_STATUS_OK
WriteX 13338 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13316 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13339 NT_STATUS_OK
QUERY_FILE_INFORMATION 13339 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13338 NT_STATUS_OK
Close 13322 NT_STATUS_OK
Close 13310 NT_STATUS_OK
Close 13302 NT_STATUS_OK
Close 13318 NT_STATUS_OK
Close 13319 NT_STATUS_OK
Close 13320 NT_STATUS_OK
Close 13321 NT_STATUS_OK
Close 13309 NT_STATUS_OK
Close 13330 NT_STATUS_OK
Close 13304 NT_STATUS_OK
Close 13307 NT_STATUS_OK
Close 13308 NT_STATUS_OK
Close 13305 NT_STATUS_OK
Close 13306 NT_STATUS_OK
Close 13298 NT_STATUS_OK
Close 13299 NT_STATUS_OK
Close 13300 NT_STATUS_OK
Close 13301 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13341 NT_STATUS_OK
QUERY_FILE_INFORMATION 13341 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13343 NT_STATUS_OK
QUERY_FILE_INFORMATION 13343 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13345 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13346 NT_STATUS_OK
ReadX 13346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13347 NT_STATUS_OK
ReadX 13347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13348 NT_STATUS_OK
ReadX 13348 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13349 NT_STATUS_OK
ReadX 13349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13350 NT_STATUS_OK
ReadX 13350 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13346 4096 16384 16384 NT_STATUS_OK
WriteX 13346 0 4096 4096 NT_STATUS_OK
WriteX 13347 0 4096 4096 NT_STATUS_OK
WriteX 13348 0 4096 4096 NT_STATUS_OK
WriteX 13349 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13351 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13352 NT_STATUS_OK
ReadX 13352 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13353 NT_STATUS_OK
ReadX 13353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13354 NT_STATUS_OK
ReadX 13354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13355 NT_STATUS_OK
ReadX 13355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13356 NT_STATUS_OK
ReadX 13356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13357 NT_STATUS_OK
ReadX 13357 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13358 NT_STATUS_OK
ReadX 13358 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13359 NT_STATUS_OK
ReadX 13359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13360 NT_STATUS_OK
ReadX 13360 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13361 NT_STATUS_OK
ReadX 13361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13362 NT_STATUS_OK
ReadX 13362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13363 NT_STATUS_OK
ReadX 13363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13364 NT_STATUS_OK
ReadX 13364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13365 NT_STATUS_OK
ReadX 13365 0 8192 8192 NT_STATUS_OK
ReadX 13352 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13366 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13366 0 4096 4096 NT_STATUS_OK
ReadX 13366 4096 4096 4096 NT_STATUS_OK
ReadX 13366 8192 4096 4096 NT_STATUS_OK
WriteX 13352 0 4096 4096 NT_STATUS_OK
WriteX 13353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13367 0 4096 4096 NT_STATUS_OK
ReadX 13367 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13346 0 4096 4096 NT_STATUS_OK
WriteX 13347 0 4096 4096 NT_STATUS_OK
WriteX 13348 0 4096 4096 NT_STATUS_OK
WriteX 13349 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13371 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13372 NT_STATUS_OK
QUERY_FILE_INFORMATION 13372 1004 NT_STATUS_OK
WriteX 13372 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13372 258 NT_STATUS_OK
WriteX 13372 0 2048 2048 NT_STATUS_OK
Close 13372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13373 NT_STATUS_OK
ReadX 13373 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13373 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13373 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13374 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13375 NT_STATUS_OK
ReadX 13375 0 4096 4096 NT_STATUS_OK
ReadX 13375 4096 4096 4096 NT_STATUS_OK
WriteX 13375 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13373 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13375 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13376 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13377 NT_STATUS_OK
ReadX 13377 0 4096 4096 NT_STATUS_OK
ReadX 13377 4096 4096 4096 NT_STATUS_OK
WriteX 13377 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13378 NT_STATUS_OK
QUERY_FILE_INFORMATION 13378 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13365 NT_STATUS_OK
Close 13350 NT_STATUS_OK
Close 13346 NT_STATUS_OK
Close 13347 NT_STATUS_OK
Close 13348 NT_STATUS_OK
Close 13349 NT_STATUS_OK
Close 13358 NT_STATUS_OK
Close 13363 NT_STATUS_OK
Close 13359 NT_STATUS_OK
Close 13360 NT_STATUS_OK
Close 13361 NT_STATUS_OK
Close 13362 NT_STATUS_OK
Close 13364 NT_STATUS_OK
Close 13352 NT_STATUS_OK
Close 13353 NT_STATUS_OK
Close 13356 NT_STATUS_OK
Close 13357 NT_STATUS_OK
Close 13354 NT_STATUS_OK
Close 13355 NT_STATUS_OK
Close 13377 NT_STATUS_OK
Close 13366 NT_STATUS_OK
Close 13367 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13380 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13380 0 4096 4096 NT_STATUS_OK
ReadX 13380 4096 4096 4096 NT_STATUS_OK
ReadX 13380 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13381 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13382 NT_STATUS_OK
ReadX 13382 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13383 NT_STATUS_OK
ReadX 13383 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13384 NT_STATUS_OK
ReadX 13384 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13385 NT_STATUS_OK
ReadX 13385 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13386 NT_STATUS_OK
ReadX 13386 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13387 NT_STATUS_OK
ReadX 13387 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13388 NT_STATUS_OK
ReadX 13388 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13389 NT_STATUS_OK
ReadX 13389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13390 NT_STATUS_OK
ReadX 13390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13392 NT_STATUS_OK
ReadX 13392 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13393 NT_STATUS_OK
ReadX 13393 0 4096 4096 NT_STATUS_OK
ReadX 13381 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13397 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13398 NT_STATUS_OK
QUERY_FILE_INFORMATION 13398 1004 NT_STATUS_OK
WriteX 13398 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13398 258 NT_STATUS_OK
WriteX 13398 0 2048 2048 NT_STATUS_OK
Close 13398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13399 NT_STATUS_OK
ReadX 13399 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13399 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13403 NT_STATUS_OK
Close 13403 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13404 NT_STATUS_OK
QUERY_FILE_INFORMATION 13404 1004 NT_STATUS_OK
WriteX 13404 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13404 258 NT_STATUS_OK
WriteX 13404 0 2048 2048 NT_STATUS_OK
Close 13404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13405 NT_STATUS_OK
ReadX 13405 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13405 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13388 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13406 NT_STATUS_OK
QUERY_FILE_INFORMATION 13406 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13392 NT_STATUS_OK
Close 13387 NT_STATUS_OK
Close 13393 NT_STATUS_OK
Close 13381 NT_STATUS_OK
Close 13382 NT_STATUS_OK
Close 13385 NT_STATUS_OK
Close 13386 NT_STATUS_OK
Close 13383 NT_STATUS_OK
Close 13384 NT_STATUS_OK
Close 13388 NT_STATUS_OK
Close 13389 NT_STATUS_OK
Close 13390 NT_STATUS_OK
Close 13391 NT_STATUS_OK
Close 13380 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13408 NT_STATUS_OK
QUERY_FILE_INFORMATION 13408 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13410 NT_STATUS_OK
ReadX 13410 61440 4096 4096 NT_STATUS_OK
ReadX 13410 126976 4096 4096 NT_STATUS_OK
WriteX 13410 0 65536 65536 NT_STATUS_OK
WriteX 13410 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13411 NT_STATUS_OK
ReadX 13411 61440 4096 4096 NT_STATUS_OK
ReadX 13411 126976 4096 4096 NT_STATUS_OK
ReadX 13411 192512 4096 4096 NT_STATUS_OK
ReadX 13411 258048 4096 4096 NT_STATUS_OK
WriteX 13411 0 65536 65536 NT_STATUS_OK
WriteX 13411 65536 65536 65536 NT_STATUS_OK
WriteX 13411 131072 65536 65536 NT_STATUS_OK
WriteX 13411 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13412 NT_STATUS_OK
ReadX 13412 61440 4096 4096 NT_STATUS_OK
ReadX 13412 126976 4096 4096 NT_STATUS_OK
ReadX 13412 192512 4096 4096 NT_STATUS_OK
ReadX 13412 258048 4096 4096 NT_STATUS_OK
ReadX 13412 323584 4096 4096 NT_STATUS_OK
ReadX 13412 389120 4096 4096 NT_STATUS_OK
ReadX 13412 454656 4096 4096 NT_STATUS_OK
ReadX 13412 520192 4096 4096 NT_STATUS_OK
WriteX 13412 0 65536 65536 NT_STATUS_OK
WriteX 13412 65536 65536 65536 NT_STATUS_OK
WriteX 13412 131072 65536 65536 NT_STATUS_OK
WriteX 13412 196608 65536 65536 NT_STATUS_OK
WriteX 13412 262144 65536 65536 NT_STATUS_OK
WriteX 13412 327680 65536 65536 NT_STATUS_OK
WriteX 13412 393216 65536 65536 NT_STATUS_OK
WriteX 13412 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13413 NT_STATUS_OK
ReadX 13413 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13413 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13413 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13413 8192 4096 4096 NT_STATUS_OK
ReadX 13413 12288 4096 4096 NT_STATUS_OK
ReadX 13413 16384 4096 4096 NT_STATUS_OK
ReadX 13413 20480 4096 4096 NT_STATUS_OK
ReadX 13413 24576 4096 4096 NT_STATUS_OK
ReadX 13413 28672 4096 4096 NT_STATUS_OK
ReadX 13413 32768 4096 4096 NT_STATUS_OK
ReadX 13413 36864 4096 4096 NT_STATUS_OK
ReadX 13413 40960 4096 4096 NT_STATUS_OK
ReadX 13413 45056 4096 4096 NT_STATUS_OK
ReadX 13413 49152 4096 4096 NT_STATUS_OK
ReadX 13413 53248 4096 4096 NT_STATUS_OK
ReadX 13413 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13413 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13414 NT_STATUS_OK
Close 13414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13410 NT_STATUS_OK
Close 13411 NT_STATUS_OK
Close 13412 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13416 NT_STATUS_OK
WriteX 13416 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13416 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13416 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13416 1004 NT_STATUS_OK
WriteX 13416 0 57088 57088 NT_STATUS_OK
WriteX 13416 0 4096 4096 NT_STATUS_OK
Flush 13416 NT_STATUS_OK
Close 13413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13417 NT_STATUS_OK
SET_FILE_INFORMATION 13417 1004 NT_STATUS_OK
Close 13417 NT_STATUS_OK
SET_FILE_INFORMATION 13416 1004 NT_STATUS_OK
WriteX 13416 0 4096 4096 NT_STATUS_OK
Close 13416 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13418 NT_STATUS_OK
Close 13418 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13420 NT_STATUS_OK
ReadX 13420 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13420 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13421 NT_STATUS_OK
WriteX 13421 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13421 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13421 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13421 1004 NT_STATUS_OK
WriteX 13421 0 51456 51456 NT_STATUS_OK
WriteX 13421 0 4096 4096 NT_STATUS_OK
Flush 13421 NT_STATUS_OK
SET_FILE_INFORMATION 13421 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13421 1004 NT_STATUS_OK
WriteX 13421 0 4096 4096 NT_STATUS_OK
Close 13421 NT_STATUS_OK
Close 13420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13423 NT_STATUS_OK
Close 13423 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13425 NT_STATUS_OK
ReadX 13425 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13425 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13427 NT_STATUS_OK
Close 13427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13430 NT_STATUS_OK
WriteX 13430 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13430 258 NT_STATUS_OK
WriteX 13430 0 53077 53077 NT_STATUS_OK
Close 13430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13431 NT_STATUS_OK
WriteX 13431 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13431 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13431 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13431 1004 NT_STATUS_OK
WriteX 13431 0 65536 65536 NT_STATUS_OK
WriteX 13431 65536 1856 1856 NT_STATUS_OK
WriteX 13431 0 4096 4096 NT_STATUS_OK
Flush 13431 NT_STATUS_OK
SET_FILE_INFORMATION 13431 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13431 1004 NT_STATUS_OK
WriteX 13431 0 4096 4096 NT_STATUS_OK
Close 13431 NT_STATUS_OK
Close 13425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13433 NT_STATUS_OK
Close 13433 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13435 NT_STATUS_OK
ReadX 13435 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13437 NT_STATUS_OK
Close 13437 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13440 NT_STATUS_OK
WriteX 13440 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13440 258 NT_STATUS_OK
WriteX 13440 0 7983 7983 NT_STATUS_OK
Close 13440 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13442 NT_STATUS_OK
Close 13442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13445 NT_STATUS_OK
WriteX 13445 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13445 258 NT_STATUS_OK
WriteX 13445 0 65536 65536 NT_STATUS_OK
WriteX 13445 65536 65536 65536 NT_STATUS_OK
WriteX 13445 131072 65536 65536 NT_STATUS_OK
WriteX 13445 196608 65536 65536 NT_STATUS_OK
WriteX 13445 262144 65536 65536 NT_STATUS_OK
WriteX 13445 327680 65536 65536 NT_STATUS_OK
WriteX 13445 393216 65536 65536 NT_STATUS_OK
WriteX 13445 458752 46731 46731 NT_STATUS_OK
Close 13445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13446 NT_STATUS_OK
WriteX 13446 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13446 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13435 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13446 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13446 1004 NT_STATUS_OK
WriteX 13446 0 65536 65536 NT_STATUS_OK
WriteX 13446 65536 22848 22848 NT_STATUS_OK
WriteX 13446 0 4096 4096 NT_STATUS_OK
Flush 13446 NT_STATUS_OK
SET_FILE_INFORMATION 13446 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13446 1004 NT_STATUS_OK
WriteX 13446 0 4096 4096 NT_STATUS_OK
Close 13446 NT_STATUS_OK
Close 13435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13448 NT_STATUS_OK
Close 13448 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13450 NT_STATUS_OK
ReadX 13450 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13450 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13451 NT_STATUS_OK
ReadX 13451 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13451 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13451 1004 NT_STATUS_OK
ReadX 13451 8192 4096 4096 NT_STATUS_OK
ReadX 13451 12288 4096 4096 NT_STATUS_OK
ReadX 13451 16384 4096 4096 NT_STATUS_OK
ReadX 13451 20480 4096 4096 NT_STATUS_OK
ReadX 13451 24576 4096 4096 NT_STATUS_OK
ReadX 13451 28672 4096 4096 NT_STATUS_OK
ReadX 13451 32768 4096 4096 NT_STATUS_OK
ReadX 13451 36864 4096 4096 NT_STATUS_OK
ReadX 13451 40960 4096 4096 NT_STATUS_OK
ReadX 13451 45056 4096 4096 NT_STATUS_OK
ReadX 13451 49152 4096 4096 NT_STATUS_OK
ReadX 13451 53248 4096 4096 NT_STATUS_OK
ReadX 13451 57344 4096 4096 NT_STATUS_OK
ReadX 13451 61440 4096 4096 NT_STATUS_OK
ReadX 13451 65536 4096 4096 NT_STATUS_OK
ReadX 13451 69632 4096 4096 NT_STATUS_OK
ReadX 13451 73728 4096 4096 NT_STATUS_OK
ReadX 13451 77824 4096 4096 NT_STATUS_OK
ReadX 13451 81920 4096 4096 NT_STATUS_OK
ReadX 13451 86016 4096 4096 NT_STATUS_OK
ReadX 13451 90112 4096 4096 NT_STATUS_OK
ReadX 13451 94208 4096 4096 NT_STATUS_OK
ReadX 13451 98304 4096 4096 NT_STATUS_OK
ReadX 13451 102400 4096 4096 NT_STATUS_OK
ReadX 13451 106496 4096 4096 NT_STATUS_OK
ReadX 13451 110592 4096 4096 NT_STATUS_OK
ReadX 13451 114688 4096 4096 NT_STATUS_OK
ReadX 13451 118784 4096 4096 NT_STATUS_OK
ReadX 13451 122880 4096 4096 NT_STATUS_OK
ReadX 13451 126976 4096 4096 NT_STATUS_OK
ReadX 13451 131072 4096 4096 NT_STATUS_OK
ReadX 13451 135168 4096 4096 NT_STATUS_OK
ReadX 13451 139264 4096 4096 NT_STATUS_OK
ReadX 13451 143360 4096 4096 NT_STATUS_OK
ReadX 13451 147456 4096 4096 NT_STATUS_OK
ReadX 13451 151552 4096 4096 NT_STATUS_OK
ReadX 13451 155648 4096 4096 NT_STATUS_OK
ReadX 13451 159744 4096 4096 NT_STATUS_OK
ReadX 13451 163840 4096 4096 NT_STATUS_OK
ReadX 13451 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13451 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13452 NT_STATUS_OK
Close 13452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13450 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13454 NT_STATUS_OK
WriteX 13454 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13454 258 NT_STATUS_OK
Close 13451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13455 NT_STATUS_OK
SET_FILE_INFORMATION 13455 1004 NT_STATUS_OK
Close 13455 NT_STATUS_OK
WriteX 13454 0 42388 42388 NT_STATUS_OK
Close 13454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13456 NT_STATUS_OK
Close 13456 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13458 NT_STATUS_OK
ReadX 13458 0 4096 4096 NT_STATUS_OK
ReadX 13458 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13459 NT_STATUS_OK
WriteX 13459 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13459 258 NT_STATUS_OK
SET_FILE_INFORMATION 13459 1004 NT_STATUS_OK
WriteX 13459 0 42652 42652 NT_STATUS_OK
Close 13459 NT_STATUS_OK
Close 13458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13461 NT_STATUS_OK
Close 13461 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13463 NT_STATUS_OK
ReadX 13463 0 4096 4096 NT_STATUS_OK
ReadX 13463 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13465 NT_STATUS_OK
Close 13465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13468 NT_STATUS_OK
WriteX 13468 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13468 258 NT_STATUS_OK
WriteX 13468 0 65536 65536 NT_STATUS_OK
WriteX 13468 65536 49 49 NT_STATUS_OK
Close 13468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13469 NT_STATUS_OK
ReadX 13469 0 61440 61440 NT_STATUS_OK
ReadX 13469 61440 4096 4096 NT_STATUS_OK
ReadX 13469 65536 61440 61440 NT_STATUS_OK
ReadX 13469 126976 4096 4096 NT_STATUS_OK
ReadX 13469 131072 61440 61440 NT_STATUS_OK
ReadX 13469 192512 4096 4096 NT_STATUS_OK
ReadX 13469 196608 61440 61440 NT_STATUS_OK
ReadX 13469 258048 4096 4096 NT_STATUS_OK
ReadX 13469 262144 61440 61440 NT_STATUS_OK
ReadX 13469 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13470 NT_STATUS_OK
ReadX 13470 0 61440 61440 NT_STATUS_OK
ReadX 13470 61440 4096 4096 NT_STATUS_OK
ReadX 13470 65536 61440 61440 NT_STATUS_OK
ReadX 13470 126976 4096 4096 NT_STATUS_OK
ReadX 13470 131072 61440 61440 NT_STATUS_OK
ReadX 13470 192512 4096 4096 NT_STATUS_OK
ReadX 13470 196608 61440 61440 NT_STATUS_OK
ReadX 13470 258048 4096 4096 NT_STATUS_OK
ReadX 13470 262144 61440 61440 NT_STATUS_OK
ReadX 13470 323584 4096 4096 NT_STATUS_OK
ReadX 13470 327680 61440 61440 NT_STATUS_OK
ReadX 13470 389120 4096 4096 NT_STATUS_OK
ReadX 13470 393216 61440 61440 NT_STATUS_OK
ReadX 13470 454656 4096 4096 NT_STATUS_OK
ReadX 13470 458752 61440 61440 NT_STATUS_OK
ReadX 13470 520192 4096 4096 NT_STATUS_OK
ReadX 13470 524288 61440 61440 NT_STATUS_OK
ReadX 13470 585728 4096 4096 NT_STATUS_OK
ReadX 13470 589824 61440 61440 NT_STATUS_OK
ReadX 13470 651264 4096 4096 NT_STATUS_OK
ReadX 13470 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13471 NT_STATUS_OK
ReadX 13471 0 61440 61440 NT_STATUS_OK
ReadX 13471 61440 4096 4096 NT_STATUS_OK
ReadX 13471 65536 61440 61440 NT_STATUS_OK
ReadX 13471 126976 4096 4096 NT_STATUS_OK
ReadX 13471 131072 61440 61440 NT_STATUS_OK
ReadX 13471 192512 4096 4096 NT_STATUS_OK
ReadX 13471 196608 61440 61440 NT_STATUS_OK
ReadX 13471 258048 4096 4096 NT_STATUS_OK
ReadX 13471 262144 61440 61440 NT_STATUS_OK
ReadX 13471 323584 4096 4096 NT_STATUS_OK
ReadX 13471 327680 61440 61440 NT_STATUS_OK
ReadX 13471 389120 4096 4096 NT_STATUS_OK
ReadX 13471 393216 61440 61440 NT_STATUS_OK
ReadX 13471 454656 4096 4096 NT_STATUS_OK
ReadX 13471 458752 61440 61440 NT_STATUS_OK
ReadX 13471 520192 4096 4096 NT_STATUS_OK
ReadX 13471 524288 61440 61440 NT_STATUS_OK
ReadX 13471 585728 4096 4096 NT_STATUS_OK
ReadX 13471 589824 61440 61440 NT_STATUS_OK
ReadX 13471 651264 4096 4096 NT_STATUS_OK
ReadX 13471 655360 61440 61440 NT_STATUS_OK
ReadX 13471 716800 4096 4096 NT_STATUS_OK
ReadX 13471 720896 61440 61440 NT_STATUS_OK
ReadX 13471 782336 4096 4096 NT_STATUS_OK
ReadX 13471 786432 61440 61440 NT_STATUS_OK
ReadX 13471 847872 4096 4096 NT_STATUS_OK
ReadX 13471 851968 61440 61440 NT_STATUS_OK
ReadX 13471 913408 4096 4096 NT_STATUS_OK
ReadX 13471 917504 61440 61440 NT_STATUS_OK
ReadX 13471 978944 4096 4096 NT_STATUS_OK
ReadX 13471 983040 61440 61440 NT_STATUS_OK
ReadX 13471 1044480 4096 4096 NT_STATUS_OK
ReadX 13471 1048576 61440 61440 NT_STATUS_OK
ReadX 13471 1110016 4096 4096 NT_STATUS_OK
ReadX 13471 1114112 61440 61440 NT_STATUS_OK
ReadX 13471 1175552 4096 4096 NT_STATUS_OK
ReadX 13471 1179648 61440 61440 NT_STATUS_OK
ReadX 13471 1241088 4096 4096 NT_STATUS_OK
ReadX 13471 1245184 61440 61440 NT_STATUS_OK
ReadX 13471 1306624 4096 4096 NT_STATUS_OK
ReadX 13471 1310720 61440 61440 NT_STATUS_OK
ReadX 13471 1372160 4096 4096 NT_STATUS_OK
ReadX 13471 1376256 61440 61440 NT_STATUS_OK
ReadX 13471 1437696 4096 4096 NT_STATUS_OK
ReadX 13471 1441792 61440 61440 NT_STATUS_OK
ReadX 13471 1503232 4096 4096 NT_STATUS_OK
ReadX 13471 1507328 61440 61440 NT_STATUS_OK
ReadX 13471 1568768 4096 4096 NT_STATUS_OK
ReadX 13471 1572864 61440 61440 NT_STATUS_OK
ReadX 13471 1634304 4096 4096 NT_STATUS_OK
ReadX 13471 1638400 61440 61440 NT_STATUS_OK
ReadX 13471 1699840 4096 4096 NT_STATUS_OK
ReadX 13471 1703936 61440 61440 NT_STATUS_OK
ReadX 13471 1765376 4096 4096 NT_STATUS_OK
ReadX 13471 1769472 61440 61440 NT_STATUS_OK
ReadX 13471 1830912 4096 4096 NT_STATUS_OK
ReadX 13471 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13472 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13473 NT_STATUS_OK
QUERY_FILE_INFORMATION 13473 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13473 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13473 1005 NT_STATUS_OK
ReadX 13473 2156 24 24 NT_STATUS_OK
ReadX 13473 2139 276 276 NT_STATUS_OK
ReadX 13473 2136 14 14 NT_STATUS_OK
ReadX 13473 2136 7 7 NT_STATUS_OK
ReadX 13473 2138 12 12 NT_STATUS_OK
ReadX 13473 2137 8 8 NT_STATUS_OK
ReadX 13473 2135 15 15 NT_STATUS_OK
ReadX 13473 0 16 16 NT_STATUS_OK
ReadX 13473 16 2048 2048 NT_STATUS_OK
ReadX 13473 2064 2048 2048 NT_STATUS_OK
ReadX 13473 257 2048 2048 NT_STATUS_OK
ReadX 13473 385 2048 2048 NT_STATUS_OK
ReadX 13473 513 2048 2048 NT_STATUS_OK
ReadX 13473 641 2048 2048 NT_STATUS_OK
ReadX 13473 769 2048 2048 NT_STATUS_OK
ReadX 13473 897 2048 2048 NT_STATUS_OK
ReadX 13473 1025 2048 2048 NT_STATUS_OK
ReadX 13473 1153 2048 2048 NT_STATUS_OK
ReadX 13473 1281 2048 2048 NT_STATUS_OK
ReadX 13473 1409 2048 2048 NT_STATUS_OK
ReadX 13473 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13475 NT_STATUS_OK
Close 13475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13469 NT_STATUS_OK
Close 13470 NT_STATUS_OK
Close 13471 NT_STATUS_OK
Close 13463 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13478 NT_STATUS_OK
WriteX 13478 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13478 258 NT_STATUS_OK
WriteX 13478 0 10575 10575 NT_STATUS_OK
Flush 13478 NT_STATUS_OK
Close 13478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13479 NT_STATUS_OK
Close 13479 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13481 NT_STATUS_OK
ReadX 13481 0 4096 4096 NT_STATUS_OK
Close 13473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13483 NT_STATUS_OK
LockX 13483 2147483538 1 NT_STATUS_OK
UnlockX 13483 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13483 1005 NT_STATUS_OK
ReadX 13483 0 512 512 NT_STATUS_OK
ReadX 13483 512 512 512 NT_STATUS_OK
ReadX 13483 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13483 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13483 1004 NT_STATUS_OK
Close 13483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13484 NT_STATUS_OK
QUERY_FILE_INFORMATION 13484 1005 NT_STATUS_OK
ReadX 13484 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13485 NT_STATUS_OK
LockX 13485 2147483538 1 NT_STATUS_OK
UnlockX 13485 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13485 1005 NT_STATUS_OK
ReadX 13485 0 512 512 NT_STATUS_OK
ReadX 13485 512 512 512 NT_STATUS_OK
ReadX 13485 1024 512 512 NT_STATUS_OK
ReadX 13485 288 20 20 NT_STATUS_OK
ReadX 13485 308 2084 2084 NT_STATUS_OK
ReadX 13485 388 2084 2084 NT_STATUS_OK
ReadX 13485 388 2084 2084 NT_STATUS_OK
ReadX 13472 2157 1386 1386 NT_STATUS_OK
ReadX 13485 2472 399 399 NT_STATUS_OK
ReadX 13485 3072 1536 1536 NT_STATUS_OK
ReadX 13485 544 149 149 NT_STATUS_OK
ReadX 13485 693 485 485 NT_STATUS_OK
Close 13485 NT_STATUS_OK
ReadX 13472 2157 4096 4096 NT_STATUS_OK
ReadX 13472 6253 4096 4096 NT_STATUS_OK
ReadX 13472 10349 4096 4096 NT_STATUS_OK
ReadX 13472 14445 4096 4096 NT_STATUS_OK
ReadX 13472 18541 4096 4096 NT_STATUS_OK
ReadX 13472 22637 256 256 NT_STATUS_OK
ReadX 13472 22893 4096 4096 NT_STATUS_OK
ReadX 13472 26989 4096 4096 NT_STATUS_OK
ReadX 13472 31085 4096 4096 NT_STATUS_OK
ReadX 13472 35181 4096 4096 NT_STATUS_OK
ReadX 13472 39277 4096 4096 NT_STATUS_OK
ReadX 13472 43373 4096 4096 NT_STATUS_OK
ReadX 13472 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13472 2157 1024 1024 NT_STATUS_OK
ReadX 13472 1667 4688 4688 NT_STATUS_OK
ReadX 13472 6355 3516 3516 NT_STATUS_OK
ReadX 13472 9871 16384 16384 NT_STATUS_OK
ReadX 13472 26255 3771 3771 NT_STATUS_OK
ReadX 13472 30026 2048 2048 NT_STATUS_OK
ReadX 13472 32074 1024 1024 NT_STATUS_OK
ReadX 13472 33098 6652 6652 NT_STATUS_OK
ReadX 13472 39750 16384 16384 NT_STATUS_OK
ReadX 13472 56134 10496 10496 NT_STATUS_OK
ReadX 13472 66630 1784 1784 NT_STATUS_OK
ReadX 13472 68414 90 90 NT_STATUS_OK
ReadX 13472 68504 273 273 NT_STATUS_OK
ReadX 13472 68777 1600 1600 NT_STATUS_OK
ReadX 13472 70377 640 640 NT_STATUS_OK
ReadX 13472 71017 1280 1280 NT_STATUS_OK
ReadX 13472 72297 8464 8464 NT_STATUS_OK
ReadX 13472 80761 158 158 NT_STATUS_OK
ReadX 13472 80919 912 912 NT_STATUS_OK
ReadX 13472 81831 1980 1980 NT_STATUS_OK
ReadX 13472 83811 2256 2256 NT_STATUS_OK
ReadX 13472 86067 400 400 NT_STATUS_OK
ReadX 13472 86467 252 252 NT_STATUS_OK
ReadX 13472 86719 42 42 NT_STATUS_OK
ReadX 13472 86761 725 725 NT_STATUS_OK
ReadX 13472 2009 512 512 NT_STATUS_OK
ReadX 13472 3895 9 9 NT_STATUS_OK
ReadX 13472 3781 46 46 NT_STATUS_OK
ReadX 13472 4059 92 92 NT_STATUS_OK
ReadX 13472 3781 92 92 NT_STATUS_OK
ReadX 13472 3986 184 184 NT_STATUS_OK
ReadX 13472 3987 16384 16384 NT_STATUS_OK
ReadX 13472 3902 16384 16384 NT_STATUS_OK
ReadX 13472 3781 10240 10240 NT_STATUS_OK
ReadX 13472 3821 16384 16384 NT_STATUS_OK
ReadX 13472 3891 935 935 NT_STATUS_OK
ReadX 13472 4060 10240 10240 NT_STATUS_OK
ReadX 13472 4059 184 184 NT_STATUS_OK
ReadX 13472 256 184 184 NT_STATUS_OK
ReadX 13472 256 1026 1026 NT_STATUS_OK
ReadX 13472 3901 326 326 NT_STATUS_OK
ReadX 13472 3899 652 652 NT_STATUS_OK
ReadX 13472 256 2 2 NT_STATUS_OK
ReadX 13472 258 4948 4948 NT_STATUS_OK
Close 13472 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13487 NT_STATUS_OK
Close 13487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13490 NT_STATUS_OK
WriteX 13490 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13490 258 NT_STATUS_OK
WriteX 13490 0 65536 65536 NT_STATUS_OK
WriteX 13490 65536 65536 65536 NT_STATUS_OK
WriteX 13490 131072 65536 65536 NT_STATUS_OK
WriteX 13490 196608 65536 65536 NT_STATUS_OK
WriteX 13490 262144 65536 65536 NT_STATUS_OK
WriteX 13490 327680 65536 65536 NT_STATUS_OK
WriteX 13490 393216 65536 65536 NT_STATUS_OK
WriteX 13490 458752 65536 65536 NT_STATUS_OK
WriteX 13490 524288 65536 65536 NT_STATUS_OK
WriteX 13490 589824 35257 35257 NT_STATUS_OK
Close 13490 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13492 NT_STATUS_OK
Close 13492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13495 NT_STATUS_OK
WriteX 13495 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13495 258 NT_STATUS_OK
WriteX 13495 0 65536 65536 NT_STATUS_OK
WriteX 13495 65536 65536 65536 NT_STATUS_OK
WriteX 13495 131072 65536 65536 NT_STATUS_OK
WriteX 13495 196608 65536 65536 NT_STATUS_OK
WriteX 13495 262144 65536 65536 NT_STATUS_OK
WriteX 13495 327680 65536 65536 NT_STATUS_OK
WriteX 13495 393216 65536 65536 NT_STATUS_OK
WriteX 13495 458752 65536 65536 NT_STATUS_OK
WriteX 13495 524288 65536 65536 NT_STATUS_OK
WriteX 13495 589824 57598 57598 NT_STATUS_OK
Close 13495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13497 NT_STATUS_OK
WriteX 13497 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13497 258 NT_STATUS_OK
WriteX 13497 0 12543 12543 NT_STATUS_OK
Flush 13497 NT_STATUS_OK
Close 13497 NT_STATUS_OK
Close 13481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13499 NT_STATUS_OK
Close 13499 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13501 NT_STATUS_OK
ReadX 13501 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13503 NT_STATUS_OK
QUERY_FILE_INFORMATION 13503 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13503 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13503 1005 NT_STATUS_OK
ReadX 13503 1938 24 24 NT_STATUS_OK
ReadX 13503 1920 276 276 NT_STATUS_OK
ReadX 13503 1918 14 14 NT_STATUS_OK
ReadX 13503 1918 7 7 NT_STATUS_OK
ReadX 13503 1919 12 12 NT_STATUS_OK
ReadX 13503 1919 8 8 NT_STATUS_OK
ReadX 13503 1917 15 15 NT_STATUS_OK
ReadX 13503 0 16 16 NT_STATUS_OK
ReadX 13503 16 2048 2048 NT_STATUS_OK
ReadX 13503 2064 2048 2048 NT_STATUS_OK
ReadX 13503 257 2048 2048 NT_STATUS_OK
ReadX 13503 385 2048 2048 NT_STATUS_OK
ReadX 13503 513 2048 2048 NT_STATUS_OK
ReadX 13503 641 2048 2048 NT_STATUS_OK
ReadX 13503 769 2048 2048 NT_STATUS_OK
ReadX 13503 897 2048 2048 NT_STATUS_OK
ReadX 13503 1025 2048 2048 NT_STATUS_OK
ReadX 13503 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13505 NT_STATUS_OK
Close 13505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13508 NT_STATUS_OK
WriteX 13508 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13508 258 NT_STATUS_OK
WriteX 13508 0 11588 11588 NT_STATUS_OK
Flush 13508 NT_STATUS_OK
Close 13508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13509 NT_STATUS_OK
Close 13509 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13511 NT_STATUS_OK
ReadX 13511 0 4096 4096 NT_STATUS_OK
Close 13503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13513 NT_STATUS_OK
WriteX 13513 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13513 258 NT_STATUS_OK
WriteX 13513 0 11615 11615 NT_STATUS_OK
Flush 13513 NT_STATUS_OK
Close 13513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13515 NT_STATUS_OK
Close 13515 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13517 NT_STATUS_OK
ReadX 13517 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13519 NT_STATUS_OK
Close 13519 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13522 NT_STATUS_OK
WriteX 13522 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13522 258 NT_STATUS_OK
WriteX 13522 0 65536 65536 NT_STATUS_OK
WriteX 13522 65536 16050 16050 NT_STATUS_OK
Close 13522 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13502 1939 64 64 NT_STATUS_OK
ReadX 13502 128 248 248 NT_STATUS_OK
ReadX 13502 128 568 568 NT_STATUS_OK
ReadX 13502 3872 1536 1536 NT_STATUS_OK
ReadX 13502 3456 2560 2560 NT_STATUS_OK
ReadX 13502 3136 512 512 NT_STATUS_OK
ReadX 13502 2880 4096 4096 NT_STATUS_OK
ReadX 13502 3264 3072 3072 NT_STATUS_OK
ReadX 13502 320 4096 4096 NT_STATUS_OK
ReadX 13502 1024 4096 4096 NT_STATUS_OK
ReadX 13502 3616 4096 4096 NT_STATUS_OK
ReadX 13502 1939 64 64 NT_STATUS_OK
ReadX 13502 128 248 248 NT_STATUS_OK
ReadX 13502 128 608 608 NT_STATUS_OK
ReadX 13502 2858 1024 1024 NT_STATUS_OK
ReadX 13502 2810 4096 4096 NT_STATUS_OK
ReadX 13502 2826 4096 4096 NT_STATUS_OK
ReadX 13502 2580 2048 2048 NT_STATUS_OK
ReadX 13502 2800 2560 2560 NT_STATUS_OK
ReadX 13502 2100 4096 4096 NT_STATUS_OK
ReadX 13502 2084 4096 4096 NT_STATUS_OK
ReadX 13502 868 4096 4096 NT_STATUS_OK
ReadX 13502 2324 4096 4096 NT_STATUS_OK
ReadX 13502 884 4096 4096 NT_STATUS_OK
ReadX 13502 2604 1024 1024 NT_STATUS_OK
ReadX 13502 580 4096 4096 NT_STATUS_OK
ReadX 13502 596 4096 4096 NT_STATUS_OK
ReadX 13502 2752 4096 4096 NT_STATUS_OK
ReadX 13502 2842 1024 1024 NT_STATUS_OK
ReadX 13502 660 4096 4096 NT_STATUS_OK
ReadX 13502 2720 4096 4096 NT_STATUS_OK
ReadX 13502 2736 4096 4096 NT_STATUS_OK
ReadX 13502 628 4096 4096 NT_STATUS_OK
ReadX 13502 2704 4096 4096 NT_STATUS_OK
ReadX 13502 1556 4096 4096 NT_STATUS_OK
ReadX 13502 576 4096 4096 NT_STATUS_OK
ReadX 13502 3168 1536 1536 NT_STATUS_OK
ReadX 13502 832 4096 4096 NT_STATUS_OK
ReadX 13502 1088 4096 4096 NT_STATUS_OK
ReadX 13502 1344 4096 4096 NT_STATUS_OK
ReadX 13502 1600 4096 4096 NT_STATUS_OK
ReadX 13502 1856 4096 4096 NT_STATUS_OK
ReadX 13502 2112 4096 4096 NT_STATUS_OK
ReadX 13502 1892 4096 4096 NT_STATUS_OK
ReadX 13502 820 4096 4096 NT_STATUS_OK
ReadX 13502 788 4096 4096 NT_STATUS_OK
ReadX 13502 1604 4096 4096 NT_STATUS_OK
ReadX 13502 3648 4096 4096 NT_STATUS_OK
ReadX 13502 2608 4096 4096 NT_STATUS_OK
ReadX 13502 548 4096 4096 NT_STATUS_OK
ReadX 13502 740 4096 4096 NT_STATUS_OK
ReadX 13502 1344 4096 4096 NT_STATUS_OK
ReadX 13502 3392 4096 4096 NT_STATUS_OK
ReadX 13502 3904 4096 4096 NT_STATUS_OK
ReadX 13502 644 4096 4096 NT_STATUS_OK
ReadX 13502 676 4096 4096 NT_STATUS_OK
ReadX 13502 2688 4096 4096 NT_STATUS_OK
ReadX 13502 320 4096 4096 NT_STATUS_OK
ReadX 13502 900 4096 4096 NT_STATUS_OK
ReadX 13502 1908 4096 4096 NT_STATUS_OK
ReadX 13502 852 4096 4096 NT_STATUS_OK
ReadX 13502 724 4096 4096 NT_STATUS_OK
ReadX 13502 2292 4096 4096 NT_STATUS_OK
ReadX 13502 612 4096 4096 NT_STATUS_OK
ReadX 13502 388 4096 4096 NT_STATUS_OK
ReadX 13502 2368 4096 4096 NT_STATUS_OK
ReadX 13502 2624 4096 4096 NT_STATUS_OK
ReadX 13502 500 4096 4096 NT_STATUS_OK
ReadX 13502 356 4096 4096 NT_STATUS_OK
ReadX 13502 1024 4096 4096 NT_STATUS_OK
ReadX 13502 576 4096 4096 NT_STATUS_OK
ReadX 13502 340 4096 4096 NT_STATUS_OK
ReadX 13502 420 4096 4096 NT_STATUS_OK
ReadX 13502 1600 4096 4096 NT_STATUS_OK
ReadX 13502 404 4096 4096 NT_STATUS_OK
ReadX 13502 1428 4096 4096 NT_STATUS_OK
ReadX 13502 2656 4096 4096 NT_STATUS_OK
ReadX 13502 2624 4096 4096 NT_STATUS_OK
ReadX 13502 452 4096 4096 NT_STATUS_OK
ReadX 13502 692 4096 4096 NT_STATUS_OK
ReadX 13502 564 4096 4096 NT_STATUS_OK
ReadX 13502 372 4096 4096 NT_STATUS_OK
ReadX 13502 468 4096 4096 NT_STATUS_OK
ReadX 13502 484 4096 4096 NT_STATUS_OK
ReadX 13502 1088 4096 4096 NT_STATUS_OK
ReadX 13502 1924 4096 4096 NT_STATUS_OK
ReadX 13502 2768 4096 4096 NT_STATUS_OK
ReadX 13502 832 4096 4096 NT_STATUS_OK
ReadX 13502 836 4096 4096 NT_STATUS_OK
ReadX 13502 1856 4096 4096 NT_STATUS_OK
ReadX 13502 2640 4096 4096 NT_STATUS_OK
ReadX 13502 436 4096 4096 NT_STATUS_OK
ReadX 13502 1828 4096 4096 NT_STATUS_OK
ReadX 13502 804 4096 4096 NT_STATUS_OK
ReadX 13502 1860 4096 4096 NT_STATUS_OK
ReadX 13502 1812 4096 4096 NT_STATUS_OK
ReadX 13502 756 4096 4096 NT_STATUS_OK
ReadX 13502 1636 4096 4096 NT_STATUS_OK
ReadX 13502 772 4096 4096 NT_STATUS_OK
ReadX 13502 2036 4096 4096 NT_STATUS_OK
ReadX 13502 1220 4096 4096 NT_STATUS_OK
ReadX 13502 1652 4096 4096 NT_STATUS_OK
ReadX 13502 2588 4096 4096 NT_STATUS_OK
ReadX 13502 916 4096 4096 NT_STATUS_OK
ReadX 13502 260 4096 4096 NT_STATUS_OK
ReadX 13502 932 4096 4096 NT_STATUS_OK
ReadX 13502 2624 4096 4096 NT_STATUS_OK
ReadX 13502 308 4096 4096 NT_STATUS_OK
ReadX 13502 292 4096 4096 NT_STATUS_OK
ReadX 13502 1140 4096 4096 NT_STATUS_OK
ReadX 13502 276 4096 4096 NT_STATUS_OK
ReadX 13502 2020 4096 4096 NT_STATUS_OK
ReadX 13502 2880 4096 4096 NT_STATUS_OK
ReadX 13502 516 4096 4096 NT_STATUS_OK
ReadX 13502 1844 4096 4096 NT_STATUS_OK
ReadX 13502 1124 4096 4096 NT_STATUS_OK
ReadX 13502 3136 4096 4096 NT_STATUS_OK
ReadX 13502 324 4096 4096 NT_STATUS_OK
ReadX 13502 1156 4096 4096 NT_STATUS_OK
ReadX 13502 1172 4096 4096 NT_STATUS_OK
ReadX 13502 2112 4096 4096 NT_STATUS_OK
ReadX 13502 2368 4096 4096 NT_STATUS_OK
ReadX 13502 964 4096 4096 NT_STATUS_OK
ReadX 13502 980 4096 4096 NT_STATUS_OK
ReadX 13502 1012 4096 4096 NT_STATUS_OK
ReadX 13502 532 4096 4096 NT_STATUS_OK
ReadX 13502 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13502 1620 4096 4096 NT_STATUS_OK
ReadX 13502 1604 4096 4096 NT_STATUS_OK
ReadX 13502 2116 4096 4096 NT_STATUS_OK
ReadX 13502 2132 4096 4096 NT_STATUS_OK
ReadX 13502 2148 4096 4096 NT_STATUS_OK
ReadX 13502 2276 4096 4096 NT_STATUS_OK
ReadX 13502 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13524 NT_STATUS_OK
Close 13524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13527 NT_STATUS_OK
QUERY_FILE_INFORMATION 13482 1004 NT_STATUS_OK
Close 13482 NT_STATUS_OK
WriteX 13527 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13527 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13484 1004 NT_STATUS_OK
Close 13484 NT_STATUS_OK
WriteX 13527 0 65536 65536 NT_STATUS_OK
WriteX 13527 65536 64850 64850 NT_STATUS_OK
Close 13527 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13529 NT_STATUS_OK
WriteX 13529 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13529 258 NT_STATUS_OK
ReadX 13502 2068 4096 4096 NT_STATUS_OK
ReadX 13502 1588 4096 4096 NT_STATUS_OK
ReadX 13502 1572 4096 4096 NT_STATUS_OK
WriteX 13529 0 18630 18630 NT_STATUS_OK
Flush 13529 NT_STATUS_OK
Close 13529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13531 NT_STATUS_OK
Close 13531 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13533 NT_STATUS_OK
ReadX 13533 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13502 612 4096 4096 NT_STATUS_OK
ReadX 13502 564 4096 4096 NT_STATUS_OK
ReadX 13502 1876 4096 4096 NT_STATUS_OK
ReadX 13502 628 4096 4096 NT_STATUS_OK
ReadX 13502 740 4096 4096 NT_STATUS_OK
ReadX 13502 724 4096 4096 NT_STATUS_OK
ReadX 13502 644 4096 4096 NT_STATUS_OK
ReadX 13502 2324 4096 4096 NT_STATUS_OK
ReadX 13502 660 4096 4096 NT_STATUS_OK
ReadX 13502 852 4096 4096 NT_STATUS_OK
ReadX 13502 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13502 2368 4096 4096 NT_STATUS_OK
ReadX 13502 1024 4096 4096 NT_STATUS_OK
ReadX 13502 320 4096 4096 NT_STATUS_OK
ReadX 13502 580 4096 4096 NT_STATUS_OK
ReadX 13502 3136 512 512 NT_STATUS_OK
ReadX 13502 2880 4096 4096 NT_STATUS_OK
Close 13502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13534 NT_STATUS_OK
ReadX 13534 61440 4096 4096 NT_STATUS_OK
ReadX 13534 126976 4096 4096 NT_STATUS_OK
WriteX 13534 0 65536 65536 NT_STATUS_OK
WriteX 13534 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13535 NT_STATUS_OK
ReadX 13535 61440 4096 4096 NT_STATUS_OK
ReadX 13535 126976 4096 4096 NT_STATUS_OK
ReadX 13535 192512 4096 4096 NT_STATUS_OK
ReadX 13535 258048 4096 4096 NT_STATUS_OK
WriteX 13535 0 65536 65536 NT_STATUS_OK
WriteX 13535 65536 65536 65536 NT_STATUS_OK
WriteX 13535 131072 65536 65536 NT_STATUS_OK
WriteX 13535 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13536 NT_STATUS_OK
ReadX 13536 61440 4096 4096 NT_STATUS_OK
ReadX 13536 126976 4096 4096 NT_STATUS_OK
ReadX 13536 192512 4096 4096 NT_STATUS_OK
ReadX 13536 258048 4096 4096 NT_STATUS_OK
ReadX 13536 323584 4096 4096 NT_STATUS_OK
ReadX 13536 389120 4096 4096 NT_STATUS_OK
ReadX 13536 454656 4096 4096 NT_STATUS_OK
ReadX 13536 520192 4096 4096 NT_STATUS_OK
WriteX 13536 0 65536 65536 NT_STATUS_OK
WriteX 13536 65536 65536 65536 NT_STATUS_OK
WriteX 13536 131072 65536 65536 NT_STATUS_OK
WriteX 13536 196608 65536 65536 NT_STATUS_OK
WriteX 13536 262144 65536 65536 NT_STATUS_OK
WriteX 13536 327680 65536 65536 NT_STATUS_OK
WriteX 13536 393216 65536 65536 NT_STATUS_OK
WriteX 13536 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13537 NT_STATUS_OK
ReadX 13537 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13538 NT_STATUS_OK
Close 13538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13539 NT_STATUS_OK
WriteX 13539 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13539 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13537 0 8192 8192 NT_STATUS_OK
Flush 13537 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13537 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13537 0 8192 8192 NT_STATUS_OK
Flush 13537 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13537 0 8192 8192 NT_STATUS_OK
Flush 13537 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13537 0 8192 8192 NT_STATUS_OK
Flush 13537 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13541 NT_STATUS_OK
Close 13541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13533 NT_STATUS_OK
Close 13501 NT_STATUS_OK
Close 13534 NT_STATUS_OK
Close 13535 NT_STATUS_OK
Close 13536 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13544 NT_STATUS_OK
WriteX 13544 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13544 258 NT_STATUS_OK
WriteX 13544 0 62591 62591 NT_STATUS_OK
Close 13544 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13546 NT_STATUS_OK
Close 13546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13549 NT_STATUS_OK
WriteX 13549 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13549 258 NT_STATUS_OK
WriteX 13549 0 10845 10845 NT_STATUS_OK
Close 13549 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13551 NT_STATUS_OK
Close 13551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13554 NT_STATUS_OK
WriteX 13554 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13554 258 NT_STATUS_OK
WriteX 13554 0 30118 30118 NT_STATUS_OK
Close 13554 NT_STATUS_OK
WriteX 13537 0 4096 4096 NT_STATUS_OK
WriteX 13539 0 64 64 NT_STATUS_OK
Close 13539 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13537 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13556 NT_STATUS_OK
ReadX 13556 0 61440 61440 NT_STATUS_OK
ReadX 13556 61440 4096 4096 NT_STATUS_OK
ReadX 13556 65536 61440 61440 NT_STATUS_OK
ReadX 13556 126976 4096 4096 NT_STATUS_OK
ReadX 13556 131072 61440 61440 NT_STATUS_OK
ReadX 13556 192512 4096 4096 NT_STATUS_OK
ReadX 13556 196608 61440 61440 NT_STATUS_OK
ReadX 13556 258048 4096 4096 NT_STATUS_OK
ReadX 13556 262144 61440 61440 NT_STATUS_OK
ReadX 13556 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13557 NT_STATUS_OK
ReadX 13557 0 61440 61440 NT_STATUS_OK
ReadX 13557 61440 4096 4096 NT_STATUS_OK
ReadX 13557 65536 61440 61440 NT_STATUS_OK
ReadX 13557 126976 4096 4096 NT_STATUS_OK
ReadX 13557 131072 61440 61440 NT_STATUS_OK
ReadX 13557 192512 4096 4096 NT_STATUS_OK
ReadX 13557 196608 61440 61440 NT_STATUS_OK
ReadX 13557 258048 4096 4096 NT_STATUS_OK
ReadX 13557 262144 61440 61440 NT_STATUS_OK
ReadX 13557 323584 4096 4096 NT_STATUS_OK
ReadX 13557 327680 61440 61440 NT_STATUS_OK
ReadX 13557 389120 4096 4096 NT_STATUS_OK
ReadX 13557 393216 61440 61440 NT_STATUS_OK
ReadX 13557 454656 4096 4096 NT_STATUS_OK
ReadX 13557 458752 61440 61440 NT_STATUS_OK
ReadX 13557 520192 4096 4096 NT_STATUS_OK
ReadX 13557 524288 61440 61440 NT_STATUS_OK
ReadX 13557 585728 4096 4096 NT_STATUS_OK
ReadX 13557 589824 61440 61440 NT_STATUS_OK
ReadX 13557 651264 4096 4096 NT_STATUS_OK
ReadX 13557 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13558 NT_STATUS_OK
ReadX 13558 0 61440 61440 NT_STATUS_OK
ReadX 13558 61440 4096 4096 NT_STATUS_OK
ReadX 13558 65536 61440 61440 NT_STATUS_OK
ReadX 13558 126976 4096 4096 NT_STATUS_OK
ReadX 13558 131072 61440 61440 NT_STATUS_OK
ReadX 13558 192512 4096 4096 NT_STATUS_OK
ReadX 13558 196608 61440 61440 NT_STATUS_OK
ReadX 13558 258048 4096 4096 NT_STATUS_OK
ReadX 13558 262144 61440 61440 NT_STATUS_OK
ReadX 13558 323584 4096 4096 NT_STATUS_OK
ReadX 13558 327680 61440 61440 NT_STATUS_OK
ReadX 13558 389120 4096 4096 NT_STATUS_OK
ReadX 13558 393216 61440 61440 NT_STATUS_OK
ReadX 13558 454656 4096 4096 NT_STATUS_OK
ReadX 13558 458752 61440 61440 NT_STATUS_OK
ReadX 13558 520192 4096 4096 NT_STATUS_OK
ReadX 13558 524288 61440 61440 NT_STATUS_OK
ReadX 13558 585728 4096 4096 NT_STATUS_OK
ReadX 13558 589824 61440 61440 NT_STATUS_OK
ReadX 13558 651264 4096 4096 NT_STATUS_OK
ReadX 13558 655360 61440 61440 NT_STATUS_OK
ReadX 13558 716800 4096 4096 NT_STATUS_OK
ReadX 13558 720896 61440 61440 NT_STATUS_OK
ReadX 13558 782336 4096 4096 NT_STATUS_OK
ReadX 13558 786432 61440 61440 NT_STATUS_OK
ReadX 13558 847872 4096 4096 NT_STATUS_OK
ReadX 13558 851968 61440 61440 NT_STATUS_OK
ReadX 13558 913408 4096 4096 NT_STATUS_OK
ReadX 13558 917504 61440 61440 NT_STATUS_OK
ReadX 13558 978944 4096 4096 NT_STATUS_OK
ReadX 13558 983040 61440 61440 NT_STATUS_OK
ReadX 13558 1044480 4096 4096 NT_STATUS_OK
ReadX 13558 1048576 61440 61440 NT_STATUS_OK
ReadX 13558 1110016 4096 4096 NT_STATUS_OK
ReadX 13558 1114112 61440 61440 NT_STATUS_OK
ReadX 13558 1175552 4096 4096 NT_STATUS_OK
ReadX 13558 1179648 61440 61440 NT_STATUS_OK
ReadX 13558 1241088 4096 4096 NT_STATUS_OK
ReadX 13558 1245184 61440 61440 NT_STATUS_OK
ReadX 13558 1306624 4096 4096 NT_STATUS_OK
ReadX 13558 1310720 61440 61440 NT_STATUS_OK
ReadX 13558 1372160 4096 4096 NT_STATUS_OK
ReadX 13558 1376256 61440 61440 NT_STATUS_OK
ReadX 13558 1437696 4096 4096 NT_STATUS_OK
ReadX 13558 1441792 61440 61440 NT_STATUS_OK
ReadX 13558 1503232 4096 4096 NT_STATUS_OK
ReadX 13558 1507328 61440 61440 NT_STATUS_OK
ReadX 13558 1568768 4096 4096 NT_STATUS_OK
ReadX 13558 1572864 61440 61440 NT_STATUS_OK
ReadX 13558 1634304 4096 4096 NT_STATUS_OK
ReadX 13558 1638400 61440 61440 NT_STATUS_OK
ReadX 13558 1699840 4096 4096 NT_STATUS_OK
ReadX 13558 1703936 61440 61440 NT_STATUS_OK
ReadX 13558 1765376 4096 4096 NT_STATUS_OK
ReadX 13558 1769472 61440 61440 NT_STATUS_OK
ReadX 13558 1830912 4096 4096 NT_STATUS_OK
ReadX 13558 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13559 NT_STATUS_OK
Close 13559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13556 NT_STATUS_OK
Close 13557 NT_STATUS_OK
Close 13558 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13561 NT_STATUS_OK
ReadX 13561 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13562 NT_STATUS_OK
ReadX 13562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13563 NT_STATUS_OK
ReadX 13563 0 4096 4096 NT_STATUS_OK
ReadX 13563 4096 4096 4096 NT_STATUS_OK
ReadX 13563 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13564 NT_STATUS_OK
Close 13564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13561 NT_STATUS_OK
Close 13562 NT_STATUS_OK
Close 13563 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13566 NT_STATUS_OK
ReadX 13566 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13567 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13567 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13568 NT_STATUS_OK
Close 13568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13566 NT_STATUS_OK
Close 13567 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13570 NT_STATUS_OK
ReadX 13570 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13571 NT_STATUS_OK
ReadX 13571 0 8192 8192 NT_STATUS_OK
ReadX 13571 8192 8192 8192 NT_STATUS_OK
ReadX 13571 16384 8192 8192 NT_STATUS_OK
ReadX 13571 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13573 NT_STATUS_OK
Close 13573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13571 NT_STATUS_OK
Close 13570 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13576 NT_STATUS_OK
WriteX 13576 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13576 258 NT_STATUS_OK
WriteX 13576 0 10438 10438 NT_STATUS_OK
Close 13576 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13577 NT_STATUS_OK
Close 13577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13578 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13579 NT_STATUS_OK
Close 13579 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13580 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13581 NT_STATUS_OK
Close 13581 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13582 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13583 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13584 NT_STATUS_OK
Close 13584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13585 NT_STATUS_OK
ReadX 13585 0 4096 4096 NT_STATUS_OK
ReadX 13585 4096 4096 4096 NT_STATUS_OK
ReadX 13585 8192 4096 4096 NT_STATUS_OK
ReadX 13585 12288 8192 8192 NT_STATUS_OK
ReadX 13585 20480 8192 8192 NT_STATUS_OK
ReadX 13585 28672 8192 8192 NT_STATUS_OK
ReadX 13585 36864 8192 8192 NT_STATUS_OK
ReadX 13585 45056 8192 8192 NT_STATUS_OK
ReadX 13585 53248 8192 8192 NT_STATUS_OK
ReadX 13585 61440 8192 8192 NT_STATUS_OK
ReadX 13585 69632 8192 8192 NT_STATUS_OK
ReadX 13585 77824 8192 8192 NT_STATUS_OK
ReadX 13585 86016 8192 8192 NT_STATUS_OK
ReadX 13585 94208 8192 8192 NT_STATUS_OK
ReadX 13585 102400 8192 8192 NT_STATUS_OK
ReadX 13585 110592 8192 8192 NT_STATUS_OK
ReadX 13585 118784 8192 8192 NT_STATUS_OK
ReadX 13585 126976 8192 8192 NT_STATUS_OK
ReadX 13585 135168 8192 8192 NT_STATUS_OK
ReadX 13585 143360 8192 8192 NT_STATUS_OK
ReadX 13585 151552 8192 8192 NT_STATUS_OK
ReadX 13585 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13585 NT_STATUS_OK
Close 13578 NT_STATUS_OK
Close 13580 NT_STATUS_OK
Close 13582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13587 NT_STATUS_OK
Close 13587 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13590 NT_STATUS_OK
WriteX 13590 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13590 258 NT_STATUS_OK
WriteX 13590 0 28489 28489 NT_STATUS_OK
Close 13590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13591 NT_STATUS_OK
Close 13591 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13593 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13593 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13594 NT_STATUS_OK
Close 13594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13593 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13596 NT_STATUS_OK
ReadX 13596 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13597 NT_STATUS_OK
ReadX 13597 0 8192 8192 NT_STATUS_OK
ReadX 13597 8192 8192 8192 NT_STATUS_OK
ReadX 13597 16384 8192 8192 NT_STATUS_OK
ReadX 13597 24576 8192 8192 NT_STATUS_OK
ReadX 13597 32768 16384 16384 NT_STATUS_OK
ReadX 13597 49152 8192 8192 NT_STATUS_OK
ReadX 13597 57344 8192 8192 NT_STATUS_OK
ReadX 13597 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13599 NT_STATUS_OK
Close 13599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13597 NT_STATUS_OK
Close 13596 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13602 NT_STATUS_OK
WriteX 13602 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13602 258 NT_STATUS_OK
WriteX 13602 0 29253 29253 NT_STATUS_OK
Close 13602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13603 NT_STATUS_OK
Close 13603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13606 NT_STATUS_OK
Close 13606 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13609 NT_STATUS_OK
WriteX 13609 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13609 258 NT_STATUS_OK
WriteX 13609 0 30183 30183 NT_STATUS_OK
Close 13609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13610 NT_STATUS_OK
Close 13610 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13612 NT_STATUS_OK
WriteX 13612 0 510 510 NT_STATUS_OK
WriteX 13612 510 512 512 NT_STATUS_OK
WriteX 13612 1022 510 510 NT_STATUS_OK
WriteX 13612 1532 510 510 NT_STATUS_OK
WriteX 13612 2042 168 168 NT_STATUS_OK
Close 13612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13613 NT_STATUS_OK
Close 13613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13615 NT_STATUS_OK
ReadX 13615 0 4096 4096 NT_STATUS_OK
WriteX 13615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13616 NT_STATUS_OK
ReadX 13616 61440 4096 4096 NT_STATUS_OK
ReadX 13616 126976 4096 4096 NT_STATUS_OK
WriteX 13616 0 65536 65536 NT_STATUS_OK
WriteX 13616 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13617 NT_STATUS_OK
ReadX 13617 61440 4096 4096 NT_STATUS_OK
ReadX 13617 126976 4096 4096 NT_STATUS_OK
ReadX 13617 192512 4096 4096 NT_STATUS_OK
ReadX 13617 258048 4096 4096 NT_STATUS_OK
WriteX 13617 0 65536 65536 NT_STATUS_OK
WriteX 13617 65536 65536 65536 NT_STATUS_OK
WriteX 13617 131072 65536 65536 NT_STATUS_OK
WriteX 13617 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13618 NT_STATUS_OK
ReadX 13618 61440 4096 4096 NT_STATUS_OK
ReadX 13618 126976 4096 4096 NT_STATUS_OK
ReadX 13618 192512 4096 4096 NT_STATUS_OK
ReadX 13618 258048 4096 4096 NT_STATUS_OK
ReadX 13618 323584 4096 4096 NT_STATUS_OK
ReadX 13618 389120 4096 4096 NT_STATUS_OK
ReadX 13618 454656 4096 4096 NT_STATUS_OK
ReadX 13618 520192 4096 4096 NT_STATUS_OK
WriteX 13618 0 65536 65536 NT_STATUS_OK
WriteX 13618 65536 65536 65536 NT_STATUS_OK
WriteX 13618 131072 65536 65536 NT_STATUS_OK
WriteX 13618 196608 65536 65536 NT_STATUS_OK
WriteX 13618 262144 65536 65536 NT_STATUS_OK
WriteX 13618 327680 65536 65536 NT_STATUS_OK
WriteX 13618 393216 65536 65536 NT_STATUS_OK
WriteX 13618 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13619 NT_STATUS_OK
Close 13619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13615 NT_STATUS_OK
Close 13616 NT_STATUS_OK
Close 13617 NT_STATUS_OK
Close 13618 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13621 NT_STATUS_OK
Close 13621 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13625 NT_STATUS_OK
Close 13625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13628 NT_STATUS_OK
Close 13628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13630 NT_STATUS_OK
Close 13630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13634 NT_STATUS_OK
Close 13634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13637 NT_STATUS_OK
Close 13637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13639 NT_STATUS_OK
Close 13639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13643 NT_STATUS_OK
Close 13643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13648 NT_STATUS_OK
Close 13648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13653 NT_STATUS_OK
Close 13653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13658 NT_STATUS_OK
Close 13658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13663 NT_STATUS_OK
Close 13663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13668 NT_STATUS_OK
Close 13668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13673 NT_STATUS_OK
Close 13673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13678 NT_STATUS_OK
Close 13678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13681 NT_STATUS_OK
Close 13681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13684 NT_STATUS_OK
Close 13684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13687 NT_STATUS_OK
WriteX 13687 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13687 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13687 0 65536 65536 NT_STATUS_OK
WriteX 13687 65536 65536 65536 NT_STATUS_OK
WriteX 13687 131072 65536 65536 NT_STATUS_OK
WriteX 13687 196608 65536 65536 NT_STATUS_OK
WriteX 13687 262144 26634 26634 NT_STATUS_OK
Close 13687 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13692 NT_STATUS_OK
Close 13692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13693 NT_STATUS_OK
Close 13693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13694 NT_STATUS_OK
ReadX 13694 0 4096 4096 NT_STATUS_OK
Close 13694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13695 NT_STATUS_OK
ReadX 13695 0 4096 4096 NT_STATUS_OK
ReadX 13695 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13696 NT_STATUS_OK
Close 13696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13695 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13700 NT_STATUS_OK
Close 13700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13703 NT_STATUS_OK
Close 13703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13705 NT_STATUS_OK
Close 13705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13709 NT_STATUS_OK
Close 13709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13712 NT_STATUS_OK
Close 13712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13714 NT_STATUS_OK
Close 13714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13718 NT_STATUS_OK
Close 13718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13723 NT_STATUS_OK
Close 13723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13728 NT_STATUS_OK
Close 13728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13733 NT_STATUS_OK
Close 13733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13738 NT_STATUS_OK
Close 13738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13743 NT_STATUS_OK
Close 13743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13747 NT_STATUS_OK
Close 13747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13752 NT_STATUS_OK
Close 13752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13757 NT_STATUS_OK
Close 13757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13760 NT_STATUS_OK
Close 13760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13762 NT_STATUS_OK
Close 13762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13772 NT_STATUS_OK
Close 13772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13773 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13774 NT_STATUS_OK
ReadX 13774 0 4096 4096 NT_STATUS_OK
Close 13774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13775 NT_STATUS_OK
ReadX 13775 0 4096 4096 NT_STATUS_OK
Close 13775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13776 NT_STATUS_OK
ReadX 13776 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13786 NT_STATUS_OK
Close 13786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13787 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13788 NT_STATUS_OK
ReadX 13788 0 4096 4096 NT_STATUS_OK
Close 13788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13789 NT_STATUS_OK
ReadX 13789 0 4096 4096 NT_STATUS_OK
Close 13789 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13790 NT_STATUS_OK
ReadX 13790 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13776 NT_STATUS_OK
Close 13790 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13819 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13819 0 4096 4096 NT_STATUS_OK
Close 13819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13820 NT_STATUS_OK
ReadX 13820 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13821 NT_STATUS_OK
ReadX 13821 0 4096 4096 NT_STATUS_OK
ReadX 13821 4096 4096 4096 NT_STATUS_OK
ReadX 13821 8192 4096 4096 NT_STATUS_OK
ReadX 13821 12288 4096 4096 NT_STATUS_OK
ReadX 13821 16384 4096 4096 NT_STATUS_OK
ReadX 13821 20480 4096 4096 NT_STATUS_OK
ReadX 13821 24576 4096 4096 NT_STATUS_OK
ReadX 13821 28672 4096 4096 NT_STATUS_OK
ReadX 13821 32768 4096 4096 NT_STATUS_OK
ReadX 13821 36864 4096 4096 NT_STATUS_OK
ReadX 13821 40960 4096 4096 NT_STATUS_OK
ReadX 13821 45056 4096 4096 NT_STATUS_OK
ReadX 13821 49152 4096 4096 NT_STATUS_OK
ReadX 13821 53248 4096 4096 NT_STATUS_OK
ReadX 13821 57344 4096 4096 NT_STATUS_OK
ReadX 13821 61440 4096 4096 NT_STATUS_OK
ReadX 13821 65536 4096 4096 NT_STATUS_OK
ReadX 13821 69632 4096 4096 NT_STATUS_OK
ReadX 13821 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13821 1004 NT_STATUS_OK
WriteX 13821 0 4096 4096 NT_STATUS_OK
Close 13821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13822 NT_STATUS_OK
SET_FILE_INFORMATION 13822 1004 NT_STATUS_OK
Close 13822 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13823 NT_STATUS_OK
ReadX 13823 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13824 NT_STATUS_OK
Close 13824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13827 NT_STATUS_OK
WriteX 13827 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13827 258 NT_STATUS_OK
WriteX 13827 0 65536 65536 NT_STATUS_OK
WriteX 13827 65536 19979 19979 NT_STATUS_OK
Close 13827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13828 NT_STATUS_OK
ReadX 13828 0 4096 4096 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
QUERY_FILE_INFORMATION 13828 1004 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
SET_FILE_INFORMATION 13828 1004 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
Close 13828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13829 NT_STATUS_OK
ReadX 13829 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13830 NT_STATUS_OK
ReadX 13830 0 4096 4096 NT_STATUS_OK
Close 13829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13831 NT_STATUS_OK
ReadX 13831 0 4096 4096 NT_STATUS_OK
Close 13831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13832 NT_STATUS_OK
ReadX 13832 0 4096 4096 NT_STATUS_OK
Close 13832 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13833 NT_STATUS_OK
ReadX 13833 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13833 1004 NT_STATUS_OK
WriteX 13833 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13834 NT_STATUS_OK
Close 13834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13830 NT_STATUS_OK
Close 13833 NT_STATUS_OK
Close 13823 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13836 NT_STATUS_OK
Close 13836 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13839 NT_STATUS_OK
WriteX 13839 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13839 258 NT_STATUS_OK
WriteX 13839 0 65536 65536 NT_STATUS_OK
WriteX 13839 65536 17654 17654 NT_STATUS_OK
Close 13839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13840 NT_STATUS_OK
ReadX 13840 0 4096 4096 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
QUERY_FILE_INFORMATION 13840 1004 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
SET_FILE_INFORMATION 13840 1004 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
Close 13840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13841 NT_STATUS_OK
SET_FILE_INFORMATION 13841 1004 NT_STATUS_OK
Close 13841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13842 NT_STATUS_OK
ReadX 13842 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13843 NT_STATUS_OK
Close 13843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13845 NT_STATUS_OK
ReadX 13845 0 4096 4096 NT_STATUS_OK
ReadX 13845 4096 4096 4096 NT_STATUS_OK
ReadX 13845 8192 4096 4096 NT_STATUS_OK
ReadX 13845 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13845 16384 4096 4096 NT_STATUS_OK
ReadX 13845 20480 4096 4096 NT_STATUS_OK
ReadX 13845 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13846 NT_STATUS_OK
ReadX 13846 0 4096 4096 NT_STATUS_OK
Close 13846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13847 NT_STATUS_OK
ReadX 13847 0 4096 4096 NT_STATUS_OK
Close 13847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13848 NT_STATUS_OK
ReadX 13848 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13848 1004 NT_STATUS_OK
WriteX 13848 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13849 NT_STATUS_OK
Close 13849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13848 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13851 NT_STATUS_OK
Close 13851 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13854 NT_STATUS_OK
WriteX 13854 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13854 258 NT_STATUS_OK
WriteX 13854 0 65536 65536 NT_STATUS_OK
WriteX 13854 65536 19490 19490 NT_STATUS_OK
Close 13854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13855 NT_STATUS_OK
ReadX 13855 0 4096 4096 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
QUERY_FILE_INFORMATION 13855 1004 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
SET_FILE_INFORMATION 13855 1004 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
Close 13855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13856 NT_STATUS_OK
SET_FILE_INFORMATION 13856 1004 NT_STATUS_OK
Close 13856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13857 NT_STATUS_OK
ReadX 13857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13858 NT_STATUS_OK
Close 13858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13860 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13860 0 4096 4096 NT_STATUS_OK
Close 13860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13861 NT_STATUS_OK
ReadX 13861 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13862 NT_STATUS_OK
ReadX 13862 0 4096 4096 NT_STATUS_OK
ReadX 13862 4096 4096 4096 NT_STATUS_OK
ReadX 13862 8192 4096 4096 NT_STATUS_OK
ReadX 13862 12288 4096 4096 NT_STATUS_OK
ReadX 13862 16384 4096 4096 NT_STATUS_OK
ReadX 13862 20480 4096 4096 NT_STATUS_OK
ReadX 13862 24576 4096 4096 NT_STATUS_OK
ReadX 13862 28672 4096 4096 NT_STATUS_OK
ReadX 13862 32768 4096 4096 NT_STATUS_OK
ReadX 13862 36864 4096 4096 NT_STATUS_OK
ReadX 13862 40960 4096 4096 NT_STATUS_OK
ReadX 13862 45056 4096 4096 NT_STATUS_OK
ReadX 13862 49152 4096 4096 NT_STATUS_OK
ReadX 13862 53248 4096 4096 NT_STATUS_OK
ReadX 13862 57344 4096 4096 NT_STATUS_OK
ReadX 13862 61440 4096 4096 NT_STATUS_OK
ReadX 13862 65536 4096 4096 NT_STATUS_OK
ReadX 13862 69632 4096 4096 NT_STATUS_OK
ReadX 13862 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13862 1004 NT_STATUS_OK
WriteX 13862 0 4096 4096 NT_STATUS_OK
Close 13862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13863 NT_STATUS_OK
SET_FILE_INFORMATION 13863 1004 NT_STATUS_OK
Close 13863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13864 NT_STATUS_OK
ReadX 13864 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13865 NT_STATUS_OK
Close 13865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13857 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13868 NT_STATUS_OK
WriteX 13868 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13868 258 NT_STATUS_OK
WriteX 13868 0 65536 65536 NT_STATUS_OK
WriteX 13868 65536 8866 8866 NT_STATUS_OK
Close 13868 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13869 NT_STATUS_OK
ReadX 13869 0 4096 4096 NT_STATUS_OK
WriteX 13869 0 4096 4096 NT_STATUS_OK
Flush 13869 NT_STATUS_OK
SET_FILE_INFORMATION 13869 1004 NT_STATUS_OK
WriteX 13869 0 4096 4096 NT_STATUS_OK
Flush 13869 NT_STATUS_OK
Close 13869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13870 NT_STATUS_OK
ReadX 13870 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13870 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13871 NT_STATUS_OK
ReadX 13871 0 4096 4096 NT_STATUS_OK
Close 13871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13872 NT_STATUS_OK
ReadX 13872 0 4096 4096 NT_STATUS_OK
Close 13872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13873 NT_STATUS_OK
ReadX 13873 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13873 1004 NT_STATUS_OK
WriteX 13873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13874 NT_STATUS_OK
Close 13874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13873 NT_STATUS_OK
Close 13864 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13876 NT_STATUS_OK
Close 13876 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13879 NT_STATUS_OK
WriteX 13879 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13879 258 NT_STATUS_OK
WriteX 13879 0 65536 65536 NT_STATUS_OK
WriteX 13879 65536 9298 9298 NT_STATUS_OK
Close 13879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13880 NT_STATUS_OK
ReadX 13880 0 4096 4096 NT_STATUS_OK
WriteX 13880 0 4096 4096 NT_STATUS_OK
Flush 13880 NT_STATUS_OK
SET_FILE_INFORMATION 13880 1004 NT_STATUS_OK
WriteX 13880 0 4096 4096 NT_STATUS_OK
Flush 13880 NT_STATUS_OK
Close 13880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13881 NT_STATUS_OK
SET_FILE_INFORMATION 13881 1004 NT_STATUS_OK
Close 13881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13882 NT_STATUS_OK
ReadX 13882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13883 NT_STATUS_OK
Close 13883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13886 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13886 0 4096 4096 NT_STATUS_OK
Close 13886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13887 NT_STATUS_OK
ReadX 13887 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13887 4096 4096 4096 NT_STATUS_OK
ReadX 13887 8192 4096 4096 NT_STATUS_OK
ReadX 13887 12288 4096 4096 NT_STATUS_OK
ReadX 13887 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13888 NT_STATUS_OK
ReadX 13888 0 4096 4096 NT_STATUS_OK
Close 13888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13889 NT_STATUS_OK
ReadX 13889 0 4096 4096 NT_STATUS_OK
Close 13889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13890 NT_STATUS_OK
ReadX 13890 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13890 1004 NT_STATUS_OK
WriteX 13890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13891 NT_STATUS_OK
Close 13891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13887 NT_STATUS_OK
Close 13890 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13893 NT_STATUS_OK
Close 13893 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13896 NT_STATUS_OK
WriteX 13896 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13896 258 NT_STATUS_OK
WriteX 13896 0 65536 65536 NT_STATUS_OK
WriteX 13896 65536 11540 11540 NT_STATUS_OK
Close 13896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13897 NT_STATUS_OK
ReadX 13897 0 4096 4096 NT_STATUS_OK
WriteX 13897 0 4096 4096 NT_STATUS_OK
Flush 13897 NT_STATUS_OK
SET_FILE_INFORMATION 13897 1004 NT_STATUS_OK
WriteX 13897 0 4096 4096 NT_STATUS_OK
Flush 13897 NT_STATUS_OK
Close 13897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13898 NT_STATUS_OK
SET_FILE_INFORMATION 13898 1004 NT_STATUS_OK
Close 13898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13899 NT_STATUS_OK
ReadX 13899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13900 NT_STATUS_OK
Close 13900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13902 NT_STATUS_OK
ReadX 13902 61440 4096 4096 NT_STATUS_OK
ReadX 13902 126976 4096 4096 NT_STATUS_OK
WriteX 13902 0 65536 65536 NT_STATUS_OK
WriteX 13902 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13903 NT_STATUS_OK
ReadX 13903 61440 4096 4096 NT_STATUS_OK
ReadX 13903 126976 4096 4096 NT_STATUS_OK
ReadX 13903 192512 4096 4096 NT_STATUS_OK
ReadX 13903 258048 4096 4096 NT_STATUS_OK
WriteX 13903 0 65536 65536 NT_STATUS_OK
WriteX 13903 65536 65536 65536 NT_STATUS_OK
WriteX 13903 131072 65536 65536 NT_STATUS_OK
WriteX 13903 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13904 NT_STATUS_OK
ReadX 13904 61440 4096 4096 NT_STATUS_OK
ReadX 13904 126976 4096 4096 NT_STATUS_OK
ReadX 13904 192512 4096 4096 NT_STATUS_OK
ReadX 13904 258048 4096 4096 NT_STATUS_OK
ReadX 13904 323584 4096 4096 NT_STATUS_OK
ReadX 13904 389120 4096 4096 NT_STATUS_OK
ReadX 13904 454656 4096 4096 NT_STATUS_OK
ReadX 13904 520192 4096 4096 NT_STATUS_OK
WriteX 13904 0 65536 65536 NT_STATUS_OK
WriteX 13904 65536 65536 65536 NT_STATUS_OK
WriteX 13904 131072 65536 65536 NT_STATUS_OK
WriteX 13904 196608 65536 65536 NT_STATUS_OK
WriteX 13904 262144 65536 65536 NT_STATUS_OK
WriteX 13904 327680 65536 65536 NT_STATUS_OK
WriteX 13904 393216 65536 65536 NT_STATUS_OK
WriteX 13904 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13905 NT_STATUS_OK
ReadX 13905 0 4096 4096 NT_STATUS_OK
ReadX 13905 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13906 NT_STATUS_OK
WriteX 13906 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13906 258 NT_STATUS_OK
WriteX 13906 0 53 53 NT_STATUS_OK
Close 13906 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13907 NT_STATUS_OK
Close 13907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13899 NT_STATUS_OK
Close 13845 NT_STATUS_OK
Close 13902 NT_STATUS_OK
Close 13903 NT_STATUS_OK
Close 13904 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13905 8192 4096 4096 NT_STATUS_OK
ReadX 13905 12288 4096 4096 NT_STATUS_OK
WriteX 13909 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13909 258 NT_STATUS_OK
ReadX 13905 16384 4096 4096 NT_STATUS_OK
ReadX 13905 20480 4096 4096 NT_STATUS_OK
WriteX 13909 0 15360 15360 NT_STATUS_OK
Close 13909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13910 NT_STATUS_OK
ReadX 13910 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13910 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13910 1004 NT_STATUS_OK
WriteX 13910 0 4096 4096 NT_STATUS_OK
Close 13910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13911 NT_STATUS_OK
Close 13911 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13913 NT_STATUS_OK
ReadX 13913 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13914 NT_STATUS_OK
Close 13914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13913 4096 4096 4096 NT_STATUS_OK
ReadX 13913 8192 4096 4096 NT_STATUS_OK
ReadX 13913 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13916 NT_STATUS_OK
ReadX 13916 0 4096 4096 NT_STATUS_OK
ReadX 13916 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13917 NT_STATUS_OK
ReadX 13917 0 4096 4096 NT_STATUS_OK
ReadX 13917 4096 4096 4096 NT_STATUS_OK
ReadX 13917 8192 4096 4096 NT_STATUS_OK
Close 13916 NT_STATUS_OK
Close 13917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13918 NT_STATUS_OK
WriteX 13918 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13918 258 NT_STATUS_OK
WriteX 13918 0 15360 15360 NT_STATUS_OK
Close 13918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13919 NT_STATUS_OK
ReadX 13919 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13919 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13919 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13920 NT_STATUS_OK
Close 13920 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13922 NT_STATUS_OK
ReadX 13922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13923 NT_STATUS_OK
SET_FILE_INFORMATION 13923 1004 NT_STATUS_OK
Close 13923 NT_STATUS_OK
WriteX 13919 0 4096 4096 NT_STATUS_OK
Close 13919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13924 NT_STATUS_OK
Close 13924 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13926 NT_STATUS_OK
ReadX 13926 0 4096 4096 NT_STATUS_OK
ReadX 13926 4096 4096 4096 NT_STATUS_OK
ReadX 13926 8192 4096 4096 NT_STATUS_OK
ReadX 13926 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13926 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13926 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13927 NT_STATUS_OK
ReadX 13927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13928 NT_STATUS_OK
WriteX 13928 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13928 258 NT_STATUS_OK
WriteX 13928 0 53 53 NT_STATUS_OK
Close 13928 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13929 NT_STATUS_OK
Close 13929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13927 4096 4096 4096 NT_STATUS_OK
ReadX 13927 8192 4096 4096 NT_STATUS_OK
ReadX 13927 12288 4096 4096 NT_STATUS_OK
WriteX 13931 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13931 258 NT_STATUS_OK
WriteX 13931 0 12006 12006 NT_STATUS_OK
Close 13931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13932 NT_STATUS_OK
ReadX 13932 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13932 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13932 1004 NT_STATUS_OK
WriteX 13932 0 4096 4096 NT_STATUS_OK
Close 13932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13933 NT_STATUS_OK
Close 13933 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13935 NT_STATUS_OK
ReadX 13935 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13936 NT_STATUS_OK
Close 13936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13935 4096 4096 4096 NT_STATUS_OK
ReadX 13935 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13938 NT_STATUS_OK
WriteX 13938 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13938 258 NT_STATUS_OK
WriteX 13938 0 11991 11991 NT_STATUS_OK
Close 13938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13939 NT_STATUS_OK
ReadX 13939 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13939 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13939 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13940 NT_STATUS_OK
Close 13940 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13942 NT_STATUS_OK
ReadX 13942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13943 NT_STATUS_OK
SET_FILE_INFORMATION 13943 1004 NT_STATUS_OK
Close 13943 NT_STATUS_OK
WriteX 13939 0 4096 4096 NT_STATUS_OK
Close 13939 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13944 NT_STATUS_OK
Close 13944 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13946 NT_STATUS_OK
ReadX 13946 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13947 NT_STATUS_OK
Close 13947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13946 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13946 1004 NT_STATUS_OK
ReadX 13946 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13946 1004 NT_STATUS_OK
WriteX 13946 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13946 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13946 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13946 1004 NT_STATUS_OK
Close 13922 NT_STATUS_OK
WriteX 13926 0 19054 19054 NT_STATUS_OK
WriteX 13946 0 12288 12288 NT_STATUS_OK
Close 13942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13949 NT_STATUS_OK
Close 13949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13926 NT_STATUS_OK
Close 13946 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13951 NT_STATUS_OK
Close 13951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13953 NT_STATUS_OK
ReadX 13953 0 61440 61440 NT_STATUS_OK
ReadX 13953 61440 4096 4096 NT_STATUS_OK
ReadX 13953 65536 61440 61440 NT_STATUS_OK
ReadX 13953 126976 4096 4096 NT_STATUS_OK
ReadX 13953 131072 61440 61440 NT_STATUS_OK
ReadX 13953 192512 4096 4096 NT_STATUS_OK
ReadX 13953 196608 61440 61440 NT_STATUS_OK
ReadX 13953 258048 4096 4096 NT_STATUS_OK
ReadX 13953 262144 61440 61440 NT_STATUS_OK
ReadX 13953 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13954 NT_STATUS_OK
ReadX 13954 0 61440 61440 NT_STATUS_OK
ReadX 13954 61440 4096 4096 NT_STATUS_OK
ReadX 13954 65536 61440 61440 NT_STATUS_OK
ReadX 13954 126976 4096 4096 NT_STATUS_OK
ReadX 13954 131072 61440 61440 NT_STATUS_OK
ReadX 13954 192512 4096 4096 NT_STATUS_OK
ReadX 13954 196608 61440 61440 NT_STATUS_OK
ReadX 13954 258048 4096 4096 NT_STATUS_OK
ReadX 13954 262144 61440 61440 NT_STATUS_OK
ReadX 13954 323584 4096 4096 NT_STATUS_OK
ReadX 13954 327680 61440 61440 NT_STATUS_OK
ReadX 13954 389120 4096 4096 NT_STATUS_OK
ReadX 13954 393216 61440 61440 NT_STATUS_OK
ReadX 13954 454656 4096 4096 NT_STATUS_OK
ReadX 13954 458752 61440 61440 NT_STATUS_OK
ReadX 13954 520192 4096 4096 NT_STATUS_OK
ReadX 13954 524288 61440 61440 NT_STATUS_OK
ReadX 13954 585728 4096 4096 NT_STATUS_OK
ReadX 13954 589824 61440 61440 NT_STATUS_OK
ReadX 13954 651264 4096 4096 NT_STATUS_OK
ReadX 13954 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13955 NT_STATUS_OK
ReadX 13955 0 61440 61440 NT_STATUS_OK
ReadX 13955 61440 4096 4096 NT_STATUS_OK
ReadX 13955 65536 61440 61440 NT_STATUS_OK
ReadX 13955 126976 4096 4096 NT_STATUS_OK
ReadX 13955 131072 61440 61440 NT_STATUS_OK
ReadX 13955 192512 4096 4096 NT_STATUS_OK
ReadX 13955 196608 61440 61440 NT_STATUS_OK
ReadX 13955 258048 4096 4096 NT_STATUS_OK
ReadX 13955 262144 61440 61440 NT_STATUS_OK
ReadX 13955 323584 4096 4096 NT_STATUS_OK
ReadX 13955 327680 61440 61440 NT_STATUS_OK
ReadX 13955 389120 4096 4096 NT_STATUS_OK
ReadX 13955 393216 61440 61440 NT_STATUS_OK
ReadX 13955 454656 4096 4096 NT_STATUS_OK
ReadX 13955 458752 61440 61440 NT_STATUS_OK
ReadX 13955 520192 4096 4096 NT_STATUS_OK
ReadX 13955 524288 61440 61440 NT_STATUS_OK
ReadX 13955 585728 4096 4096 NT_STATUS_OK
ReadX 13955 589824 61440 61440 NT_STATUS_OK
ReadX 13955 651264 4096 4096 NT_STATUS_OK
ReadX 13955 655360 61440 61440 NT_STATUS_OK
ReadX 13955 716800 4096 4096 NT_STATUS_OK
ReadX 13955 720896 61440 61440 NT_STATUS_OK
ReadX 13955 782336 4096 4096 NT_STATUS_OK
ReadX 13955 786432 61440 61440 NT_STATUS_OK
ReadX 13955 847872 4096 4096 NT_STATUS_OK
ReadX 13955 851968 61440 61440 NT_STATUS_OK
ReadX 13955 913408 4096 4096 NT_STATUS_OK
ReadX 13955 917504 61440 61440 NT_STATUS_OK
ReadX 13955 978944 4096 4096 NT_STATUS_OK
ReadX 13955 983040 61440 61440 NT_STATUS_OK
ReadX 13955 1044480 4096 4096 NT_STATUS_OK
ReadX 13955 1048576 61440 61440 NT_STATUS_OK
ReadX 13955 1110016 4096 4096 NT_STATUS_OK
ReadX 13955 1114112 61440 61440 NT_STATUS_OK
ReadX 13955 1175552 4096 4096 NT_STATUS_OK
ReadX 13955 1179648 61440 61440 NT_STATUS_OK
ReadX 13955 1241088 4096 4096 NT_STATUS_OK
ReadX 13955 1245184 61440 61440 NT_STATUS_OK
ReadX 13955 1306624 4096 4096 NT_STATUS_OK
ReadX 13955 1310720 61440 61440 NT_STATUS_OK
ReadX 13955 1372160 4096 4096 NT_STATUS_OK
ReadX 13955 1376256 61440 61440 NT_STATUS_OK
ReadX 13955 1437696 4096 4096 NT_STATUS_OK
ReadX 13955 1441792 61440 61440 NT_STATUS_OK
ReadX 13955 1503232 4096 4096 NT_STATUS_OK
ReadX 13955 1507328 61440 61440 NT_STATUS_OK
ReadX 13955 1568768 4096 4096 NT_STATUS_OK
ReadX 13955 1572864 61440 61440 NT_STATUS_OK
ReadX 13955 1634304 4096 4096 NT_STATUS_OK
ReadX 13955 1638400 61440 61440 NT_STATUS_OK
ReadX 13955 1699840 4096 4096 NT_STATUS_OK
ReadX 13955 1703936 61440 61440 NT_STATUS_OK
ReadX 13955 1765376 4096 4096 NT_STATUS_OK
ReadX 13955 1769472 61440 61440 NT_STATUS_OK
ReadX 13955 1830912 4096 4096 NT_STATUS_OK
ReadX 13955 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13956 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13957 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13958 NT_STATUS_OK
ReadX 13958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13959 NT_STATUS_OK
ReadX 13959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13960 NT_STATUS_OK
ReadX 13960 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13961 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13962 NT_STATUS_OK
QUERY_FILE_INFORMATION 13962 1004 NT_STATUS_OK
WriteX 13962 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13962 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13963 NT_STATUS_OK
Close 13963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13964 NT_STATUS_OK
WriteX 13964 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13964 258 NT_STATUS_OK
WriteX 13964 0 491 491 NT_STATUS_OK
Close 13964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13965 NT_STATUS_OK
ReadX 13965 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13962 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13967 NT_STATUS_OK
Close 13967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13968 NT_STATUS_OK
WriteX 13968 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13968 258 NT_STATUS_OK
WriteX 13968 0 543 543 NT_STATUS_OK
Close 13968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13969 NT_STATUS_OK
ReadX 13969 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13953 NT_STATUS_OK
Close 13954 NT_STATUS_OK
Close 13955 NT_STATUS_OK
Close 13969 NT_STATUS_OK
Close 13957 NT_STATUS_OK
Close 13958 NT_STATUS_OK
Close 13959 NT_STATUS_OK
Close 13960 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13972 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13973 NT_STATUS_OK
ReadX 13973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13974 NT_STATUS_OK
ReadX 13974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13975 NT_STATUS_OK
ReadX 13975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13976 NT_STATUS_OK
ReadX 13976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13977 NT_STATUS_OK
ReadX 13977 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13981 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13982 NT_STATUS_OK
QUERY_FILE_INFORMATION 13982 1004 NT_STATUS_OK
WriteX 13982 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13982 258 NT_STATUS_OK
WriteX 13982 0 2048 2048 NT_STATUS_OK
Close 13982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13983 NT_STATUS_OK
ReadX 13983 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13983 0 4096 4096 NT_STATUS_OK
Flush 13983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13983 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13988 NT_STATUS_OK
WriteX 13988 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13988 258 NT_STATUS_OK
WriteX 13988 0 2048 2048 NT_STATUS_OK
Close 13988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13989 NT_STATUS_OK
ReadX 13989 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13993 NT_STATUS_OK
Close 13993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13994 NT_STATUS_OK
WriteX 13994 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13994 258 NT_STATUS_OK
WriteX 13994 0 2048 2048 NT_STATUS_OK
Close 13994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13995 NT_STATUS_OK
ReadX 13995 0 2048 2048 NT_STATUS_OK
ReadX 13973 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13977 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13989 0 4096 4096 NT_STATUS_OK
WriteX 13973 0 8192 8192 NT_STATUS_OK
WriteX 13974 0 4096 4096 NT_STATUS_OK
WriteX 13975 0 4096 4096 NT_STATUS_OK
ReadX 13989 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13998 NT_STATUS_OK
ReadX 13998 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13999 NT_STATUS_OK
QUERY_FILE_INFORMATION 13999 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13998 NT_STATUS_OK
Close 13974 NT_STATUS_OK
Close 13975 NT_STATUS_OK
Close 13976 NT_STATUS_OK
Close 13989 NT_STATUS_OK
Close 13973 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14001 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14002 NT_STATUS_OK
ReadX 14002 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14003 NT_STATUS_OK
ReadX 14003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14004 NT_STATUS_OK
ReadX 14004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14005 NT_STATUS_OK
ReadX 14005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14006 NT_STATUS_OK
ReadX 14006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14007 NT_STATUS_OK
ReadX 14007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14008 NT_STATUS_OK
ReadX 14008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14009 NT_STATUS_OK
ReadX 14009 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14010 NT_STATUS_OK
ReadX 14010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14011 NT_STATUS_OK
ReadX 14011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14012 NT_STATUS_OK
ReadX 14012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14013 NT_STATUS_OK
ReadX 14013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14014 NT_STATUS_OK
ReadX 14014 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 14018 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14019 NT_STATUS_OK
QUERY_FILE_INFORMATION 14019 1004 NT_STATUS_OK
WriteX 14019 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14019 258 NT_STATUS_OK
WriteX 14019 0 2048 2048 NT_STATUS_OK
Close 14019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14020 NT_STATUS_OK
ReadX 14020 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14021 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14022 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14022 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 14026 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14027 NT_STATUS_OK
QUERY_FILE_INFORMATION 14027 1004 NT_STATUS_OK
WriteX 14027 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14027 258 NT_STATUS_OK
WriteX 14027 0 2048 2048 NT_STATUS_OK
Close 14027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14028 NT_STATUS_OK
ReadX 14028 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 14020 0 4096 4096 NT_STATUS_OK
Flush 14020 NT_STATUS_OK
WriteX 14028 0 4096 4096 NT_STATUS_OK
Flush 14028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 14020 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 14028 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14022 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 14029 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 14030 NT_STATUS_OK
WriteX 14030 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14030 258 NT_STATUS_OK
WriteX 14030 0 4096 4096 NT_STATUS_OK
Close 14030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 14031 NT_STATUS_OK
ReadX 14031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 14032 NT_STATUS_OK
Close 14032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 14033 NT_STATUS_OK
WriteX 14033 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14033 258 NT_STATUS_OK
WriteX 14033 0 4096 4096 NT_STATUS_OK
Close 14033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 14034 NT_STATUS_OK
ReadX 14034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 14034 0 4096 4096 NT_STATUS_OK
Close 14031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 14014 NT_STATUS_OK
Close 14008 NT_STATUS_OK
Close 14022 NT_STATUS_OK
Close 14011 NT_STATUS_OK
Close 14012 NT_STATUS_OK
Close 14013 NT_STATUS_OK
Close 14009 NT_STATUS_OK
Close 14002 NT_STATUS_OK
Close 14003 NT_STATUS_OK
Close 14006 NT_STATUS_OK
Close 14007 NT_STATUS_OK
Close 14004 NT_STATUS_OK
Close 14005 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 14034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 14037 NT_STATUS_OK
Close 14037 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 14039 NT_STATUS_OK
ReadX 14039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 14040 NT_STATUS_OK
Close 14040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14041 NT_STATUS_OK
WriteX 14041 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14041 258 NT_STATUS_OK
WriteX 14041 0 2048 2048 NT_STATUS_OK
Close 14041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14042 NT_STATUS_OK
ReadX 14042 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14043 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14044 NT_STATUS_OK
ReadX 14044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14045 NT_STATUS_OK
ReadX 14045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14046 NT_STATUS_OK
ReadX 14046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14047 NT_STATUS_OK
ReadX 14047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14048 NT_STATUS_OK
ReadX 14048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14049 NT_STATUS_OK
ReadX 14049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14050 NT_STATUS_OK
ReadX 14050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14051 NT_STATUS_OK
ReadX 14051 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14052 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14053 NT_STATUS_OK
ReadX 14053 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14054 NT_STATUS_OK
ReadX 14054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14055 NT_STATUS_OK
ReadX 14055 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 14020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14056 NT_STATUS_OK
QUERY_FILE_INFORMATION 14056 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 14056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 14039 NT_STATUS_OK
Close 14042 NT_STATUS_OK
Close 14054 NT_STATUS_OK
Close 14049 NT_STATUS_OK
Close 14050 NT_STATUS_OK
Close 14051 NT_STATUS_OK
Close 14052 NT_STATUS_OK
Close 14053 NT_STATUS_OK
Close 14055 NT_STATUS_OK
Close 14043 NT_STATUS_OK
Close 14044 NT_STATUS_OK
Close 14047 NT_STATUS_OK
Close 14048 NT_STATUS_OK
Close 14045 NT_STATUS_OK
Close 14046 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 14028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14058 NT_STATUS_OK
QUERY_FILE_INFORMATION 14058 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 14058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14060 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14060 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14061 NT_STATUS_OK
ReadX 14061 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14062 NT_STATUS_OK
ReadX 14062 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14063 NT_STATUS_OK
ReadX 14063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14064 NT_STATUS_OK
ReadX 14064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14065 NT_STATUS_OK
ReadX 14065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14066 NT_STATUS_OK
ReadX 14066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14068 NT_STATUS_OK
ReadX 14068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14069 NT_STATUS_OK
ReadX 14069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14070 NT_STATUS_OK
ReadX 14070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14071 NT_STATUS_OK
ReadX 14071 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14072 NT_STATUS_OK
ReadX 14072 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14073 NT_STATUS_OK
ReadX 14073 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 14077 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14078 NT_STATUS_OK
QUERY_FILE_INFORMATION 14078 1004 NT_STATUS_OK
WriteX 14078 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14078 258 NT_STATUS_OK
WriteX 14078 0 2048 2048 NT_STATUS_OK
Close 14078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14079 NT_STATUS_OK
ReadX 14079 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14080 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14081 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14082 NT_STATUS_OK
ReadX 14082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14083 NT_STATUS_OK
ReadX 14083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14084 NT_STATUS_OK
ReadX 14084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14085 NT_STATUS_OK
ReadX 14085 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 14089 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14090 NT_STATUS_OK
QUERY_FILE_INFORMATION 14090 1004 NT_STATUS_OK
WriteX 14090 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14090 258 NT_STATUS_OK
WriteX 14090 0 2048 2048 NT_STATUS_OK
Close 14090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14091 NT_STATUS_OK
ReadX 14091 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14092 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14093 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14093 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 9837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9838 NT_STATUS_OK
QUERY_FILE_INFORMATION 9838 1004 NT_STATUS_OK
WriteX 9838 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9838 258 NT_STATUS_OK
WriteX 9838 0 2048 2048 NT_STATUS_OK
Close 9838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9839 NT_STATUS_OK
ReadX 9839 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 14079 0 4096 4096 NT_STATUS_OK
Flush 14079 NT_STATUS_OK
WriteX 14091 0 4096 4096 NT_STATUS_OK
Flush 14091 NT_STATUS_OK
WriteX 9839 0 4096 4096 NT_STATUS_OK
Flush 9839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 14079 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 14091 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 9839 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14081 4096 16384 16384 NT_STATUS_OK
ReadX 14061 4096 16384 16384 NT_STATUS_OK
ReadX 14093 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9840 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9841 NT_STATUS_OK
ReadX 9841 0 2048 2048 NT_STATUS_OK
WriteX 9841 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 14079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9842 NT_STATUS_OK
QUERY_FILE_INFORMATION 9842 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 9842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 9841 NT_STATUS_OK
Close 14085 NT_STATUS_OK
Close 14073 NT_STATUS_OK
Close 14065 NT_STATUS_OK
Close 14081 NT_STATUS_OK
Close 14082 NT_STATUS_OK
Close 14083 NT_STATUS_OK
Close 14084 NT_STATUS_OK
Close 14072 NT_STATUS_OK
Close 14093 NT_STATUS_OK
Close 14067 NT_STATUS_OK
Close 14070 NT_STATUS_OK
Close 14071 NT_STATUS_OK
Close 14068 NT_STATUS_OK
Close 14069 NT_STATUS_OK
Close 14061 NT_STATUS_OK
Close 14062 NT_STATUS_OK
Close 14063 NT_STATUS_OK
Close 14064 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 14091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9844 NT_STATUS_OK
QUERY_FILE_INFORMATION 9844 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 9844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 9839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9846 NT_STATUS_OK
QUERY_FILE_INFORMATION 9846 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 9846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9848 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9848 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9849 NT_STATUS_OK
ReadX 9849 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9850 NT_STATUS_OK
ReadX 9850 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9851 NT_STATUS_OK
ReadX 9851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9852 NT_STATUS_OK
ReadX 9852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9853 NT_STATUS_OK
ReadX 9853 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9849 4096 16384 16384 NT_STATUS_OK
WriteX 9849 0 4096 4096 NT_STATUS_OK
WriteX 9850 0 4096 4096 NT_STATUS_OK
WriteX 9851 0 4096 4096 NT_STATUS_OK
WriteX 9852 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9854 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9855 NT_STATUS_OK
ReadX 9855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9856 NT_STATUS_OK
ReadX 9856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9857 NT_STATUS_OK
ReadX 9857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9858 NT_STATUS_OK
ReadX 9858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9859 NT_STATUS_OK
ReadX 9859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9860 NT_STATUS_OK
ReadX 9860 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9861 NT_STATUS_OK
ReadX 9861 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9862 NT_STATUS_OK
ReadX 9862 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9863 NT_STATUS_OK
ReadX 9863 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9864 NT_STATUS_OK
ReadX 9864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9865 NT_STATUS_OK
ReadX 9865 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9866 NT_STATUS_OK
ReadX 9866 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9867 NT_STATUS_OK
ReadX 9867 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 9868 NT_STATUS_OK
ReadX 9868 0 8192 8192 NT_STATUS_OK
ReadX 9855 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9869 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9869 0 4096 4096 NT_STATUS_OK
ReadX 9869 4096 4096 4096 NT_STATUS_OK
ReadX 9869 8192 4096 4096 NT_STATUS_OK
WriteX 9855 0 4096 4096 NT_STATUS_OK
WriteX 9856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 9870 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9870 0 4096 4096 NT_STATUS_OK
ReadX 9870 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 9849 0 4096 4096 NT_STATUS_OK
WriteX 9850 0 4096 4096 NT_STATUS_OK
WriteX 9851 0 4096 4096 NT_STATUS_OK
WriteX 9852 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 9874 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9875 NT_STATUS_OK
QUERY_FILE_INFORMATION 9875 1004 NT_STATUS_OK
WriteX 9875 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9875 258 NT_STATUS_OK
WriteX 9875 0 2048 2048 NT_STATUS_OK
Close 9875 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9876 NT_STATUS_OK
ReadX 9876 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9876 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9876 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9877 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9878 NT_STATUS_OK
ReadX 9878 0 4096 4096 NT_STATUS_OK
ReadX 9878 4096 4096 4096 NT_STATUS_OK
WriteX 9878 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9876 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9879 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9880 NT_STATUS_OK
ReadX 9880 0 4096 4096 NT_STATUS_OK
ReadX 9880 4096 4096 4096 NT_STATUS_OK
WriteX 9880 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 9876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9881 NT_STATUS_OK
QUERY_FILE_INFORMATION 9881 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 9881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 9868 NT_STATUS_OK
Close 9853 NT_STATUS_OK
Close 9849 NT_STATUS_OK
Close 9850 NT_STATUS_OK
Close 9851 NT_STATUS_OK
Close 9852 NT_STATUS_OK
Close 9861 NT_STATUS_OK
Close 9866 NT_STATUS_OK
Close 9862 NT_STATUS_OK
Close 9863 NT_STATUS_OK
Close 9864 NT_STATUS_OK
Close 9865 NT_STATUS_OK
Close 9867 NT_STATUS_OK
Close 9855 NT_STATUS_OK
Close 9856 NT_STATUS_OK
Close 9859 NT_STATUS_OK
Close 9860 NT_STATUS_OK
Close 9857 NT_STATUS_OK
Close 9858 NT_STATUS_OK
Close 9880 NT_STATUS_OK
Close 9869 NT_STATUS_OK
Close 9870 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9883 0 4096 4096 NT_STATUS_OK
ReadX 9883 4096 4096 4096 NT_STATUS_OK
ReadX 9883 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9884 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9885 NT_STATUS_OK
ReadX 9885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9886 NT_STATUS_OK
ReadX 9886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9887 NT_STATUS_OK
ReadX 9887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9888 NT_STATUS_OK
ReadX 9888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9889 NT_STATUS_OK
ReadX 9889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9890 NT_STATUS_OK
ReadX 9890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9891 NT_STATUS_OK
ReadX 9891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9892 NT_STATUS_OK
ReadX 9892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9893 NT_STATUS_OK
ReadX 9893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9894 NT_STATUS_OK
ReadX 9894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9895 NT_STATUS_OK
ReadX 9895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9896 NT_STATUS_OK
ReadX 9896 0 4096 4096 NT_STATUS_OK
ReadX 9884 4096 16384 16384 NT_STATUS_OK
Close 9883 NT_STATUS_OK
Close 9890 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9895 NT_STATUS_OK
Close 9892 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9891 NT_STATUS_OK
Close 9893 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9894 NT_STATUS_OK
Close 9896 NT_STATUS_OK
Close 9885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9897 NT_STATUS_OK
Close 9888 NT_STATUS_OK
ReadX 9897 0 4096 4096 NT_STATUS_OK
Close 9889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9898 NT_STATUS_OK
Close 9886 NT_STATUS_OK
ReadX 9898 0 4096 4096 NT_STATUS_OK
Close 9887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9899 NT_STATUS_OK
ReadX 9899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9900 NT_STATUS_OK
ReadX 9900 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9901 NT_STATUS_OK
ReadX 9901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9902 NT_STATUS_OK
ReadX 9902 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9903 NT_STATUS_OK
ReadX 9903 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9904 NT_STATUS_OK
ReadX 9904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9905 NT_STATUS_OK
ReadX 9905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9906 NT_STATUS_OK
ReadX 9906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9907 NT_STATUS_OK
ReadX 9907 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9908 NT_STATUS_OK
ReadX 9908 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9909 NT_STATUS_OK
ReadX 9909 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 9913 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9914 NT_STATUS_OK
QUERY_FILE_INFORMATION 9914 1004 NT_STATUS_OK
WriteX 9914 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9914 258 NT_STATUS_OK
WriteX 9914 0 2048 2048 NT_STATUS_OK
Close 9914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9915 NT_STATUS_OK
ReadX 9915 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 9915 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 9919 NT_STATUS_OK
Close 9919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9920 NT_STATUS_OK
QUERY_FILE_INFORMATION 9920 1004 NT_STATUS_OK
WriteX 9920 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9920 258 NT_STATUS_OK
WriteX 9920 0 2048 2048 NT_STATUS_OK
Close 9920 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9921 NT_STATUS_OK
ReadX 9921 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 9921 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9897 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9922 NT_STATUS_OK
QUERY_FILE_INFORMATION 9922 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 9901 NT_STATUS_OK
Close 9909 NT_STATUS_OK
Close 9908 NT_STATUS_OK
Close 9902 NT_STATUS_OK
Close 9903 NT_STATUS_OK
Close 9906 NT_STATUS_OK
Close 9907 NT_STATUS_OK
Close 9904 NT_STATUS_OK
Close 9905 NT_STATUS_OK
Close 9897 NT_STATUS_OK
Close 9898 NT_STATUS_OK
Close 9899 NT_STATUS_OK
Close 9900 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9924 NT_STATUS_OK
QUERY_FILE_INFORMATION 9924 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9926 NT_STATUS_OK
ReadX 9926 61440 4096 4096 NT_STATUS_OK
ReadX 9926 126976 4096 4096 NT_STATUS_OK
WriteX 9926 0 65536 65536 NT_STATUS_OK
WriteX 9926 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9927 NT_STATUS_OK
ReadX 9927 61440 4096 4096 NT_STATUS_OK
ReadX 9927 126976 4096 4096 NT_STATUS_OK
ReadX 9927 192512 4096 4096 NT_STATUS_OK
ReadX 9927 258048 4096 4096 NT_STATUS_OK
WriteX 9927 0 65536 65536 NT_STATUS_OK
WriteX 9927 65536 65536 65536 NT_STATUS_OK
WriteX 9927 131072 65536 65536 NT_STATUS_OK
WriteX 9927 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9928 NT_STATUS_OK
ReadX 9928 61440 4096 4096 NT_STATUS_OK
ReadX 9928 126976 4096 4096 NT_STATUS_OK
ReadX 9928 192512 4096 4096 NT_STATUS_OK
ReadX 9928 258048 4096 4096 NT_STATUS_OK
ReadX 9928 323584 4096 4096 NT_STATUS_OK
ReadX 9928 389120 4096 4096 NT_STATUS_OK
ReadX 9928 454656 4096 4096 NT_STATUS_OK
ReadX 9928 520192 4096 4096 NT_STATUS_OK
WriteX 9928 0 65536 65536 NT_STATUS_OK
WriteX 9928 65536 65536 65536 NT_STATUS_OK
WriteX 9928 131072 65536 65536 NT_STATUS_OK
WriteX 9928 196608 65536 65536 NT_STATUS_OK
WriteX 9928 262144 65536 65536 NT_STATUS_OK
WriteX 9928 327680 65536 65536 NT_STATUS_OK
WriteX 9928 393216 65536 65536 NT_STATUS_OK
WriteX 9928 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9929 NT_STATUS_OK
ReadX 9929 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9929 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9929 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9929 8192 4096 4096 NT_STATUS_OK
ReadX 9929 12288 4096 4096 NT_STATUS_OK
ReadX 9929 16384 4096 4096 NT_STATUS_OK
ReadX 9929 20480 4096 4096 NT_STATUS_OK
ReadX 9929 24576 4096 4096 NT_STATUS_OK
ReadX 9929 28672 4096 4096 NT_STATUS_OK
ReadX 9929 32768 4096 4096 NT_STATUS_OK
ReadX 9929 36864 4096 4096 NT_STATUS_OK
ReadX 9929 40960 4096 4096 NT_STATUS_OK
ReadX 9929 45056 4096 4096 NT_STATUS_OK
ReadX 9929 49152 4096 4096 NT_STATUS_OK
ReadX 9929 53248 4096 4096 NT_STATUS_OK
ReadX 9929 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9929 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 9930 NT_STATUS_OK
Close 9930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 9926 NT_STATUS_OK
Close 9927 NT_STATUS_OK
Close 9928 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 9932 NT_STATUS_OK
WriteX 9932 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9932 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9932 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9932 1004 NT_STATUS_OK
WriteX 9932 0 57088 57088 NT_STATUS_OK
WriteX 9932 0 4096 4096 NT_STATUS_OK
Flush 9932 NT_STATUS_OK
Close 9929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9933 NT_STATUS_OK
SET_FILE_INFORMATION 9933 1004 NT_STATUS_OK
Close 9933 NT_STATUS_OK
SET_FILE_INFORMATION 9932 1004 NT_STATUS_OK
WriteX 9932 0 4096 4096 NT_STATUS_OK
Close 9932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 9934 NT_STATUS_OK
Close 9934 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9936 NT_STATUS_OK
ReadX 9936 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9936 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 9937 NT_STATUS_OK
WriteX 9937 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9937 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9937 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9937 1004 NT_STATUS_OK
WriteX 9937 0 51456 51456 NT_STATUS_OK
WriteX 9937 0 4096 4096 NT_STATUS_OK
Flush 9937 NT_STATUS_OK
SET_FILE_INFORMATION 9937 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9937 1004 NT_STATUS_OK
WriteX 9937 0 4096 4096 NT_STATUS_OK
Close 9937 NT_STATUS_OK
Close 9936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 9939 NT_STATUS_OK
Close 9939 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9941 NT_STATUS_OK
ReadX 9941 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9941 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9943 NT_STATUS_OK
Close 9943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9946 NT_STATUS_OK
WriteX 9946 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9946 258 NT_STATUS_OK
WriteX 9946 0 53077 53077 NT_STATUS_OK
Close 9946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 9947 NT_STATUS_OK
WriteX 9947 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9947 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9947 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9947 1004 NT_STATUS_OK
WriteX 9947 0 65536 65536 NT_STATUS_OK
WriteX 9947 65536 1856 1856 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
SET_FILE_INFORMATION 9947 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9947 1004 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Close 9947 NT_STATUS_OK
Close 9941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 9949 NT_STATUS_OK
Close 9949 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9951 NT_STATUS_OK
ReadX 9951 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9953 NT_STATUS_OK
Close 9953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9956 NT_STATUS_OK
WriteX 9956 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9956 258 NT_STATUS_OK
WriteX 9956 0 7983 7983 NT_STATUS_OK
Close 9956 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9958 NT_STATUS_OK
Close 9958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9961 NT_STATUS_OK
WriteX 9961 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9961 258 NT_STATUS_OK
WriteX 9961 0 65536 65536 NT_STATUS_OK
WriteX 9961 65536 65536 65536 NT_STATUS_OK
WriteX 9961 131072 65536 65536 NT_STATUS_OK
WriteX 9961 196608 65536 65536 NT_STATUS_OK
WriteX 9961 262144 65536 65536 NT_STATUS_OK
WriteX 9961 327680 65536 65536 NT_STATUS_OK
WriteX 9961 393216 65536 65536 NT_STATUS_OK
WriteX 9961 458752 46731 46731 NT_STATUS_OK
Close 9961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 9962 NT_STATUS_OK
WriteX 9962 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9962 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9951 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 9962 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9962 1004 NT_STATUS_OK
WriteX 9962 0 65536 65536 NT_STATUS_OK
WriteX 9962 65536 22848 22848 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
SET_FILE_INFORMATION 9962 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9962 1004 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Close 9962 NT_STATUS_OK
Close 9951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 9964 NT_STATUS_OK
Close 9964 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9966 NT_STATUS_OK
ReadX 9966 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9966 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9967 NT_STATUS_OK
ReadX 9967 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9967 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9967 1004 NT_STATUS_OK
ReadX 9967 8192 4096 4096 NT_STATUS_OK
ReadX 9967 12288 4096 4096 NT_STATUS_OK
ReadX 9967 16384 4096 4096 NT_STATUS_OK
ReadX 9967 20480 4096 4096 NT_STATUS_OK
ReadX 9967 24576 4096 4096 NT_STATUS_OK
ReadX 9967 28672 4096 4096 NT_STATUS_OK
ReadX 9967 32768 4096 4096 NT_STATUS_OK
ReadX 9967 36864 4096 4096 NT_STATUS_OK
ReadX 9967 40960 4096 4096 NT_STATUS_OK
ReadX 9967 45056 4096 4096 NT_STATUS_OK
ReadX 9967 49152 4096 4096 NT_STATUS_OK
ReadX 9967 53248 4096 4096 NT_STATUS_OK
ReadX 9967 57344 4096 4096 NT_STATUS_OK
ReadX 9967 61440 4096 4096 NT_STATUS_OK
ReadX 9967 65536 4096 4096 NT_STATUS_OK
ReadX 9967 69632 4096 4096 NT_STATUS_OK
ReadX 9967 73728 4096 4096 NT_STATUS_OK
ReadX 9967 77824 4096 4096 NT_STATUS_OK
ReadX 9967 81920 4096 4096 NT_STATUS_OK
ReadX 9967 86016 4096 4096 NT_STATUS_OK
ReadX 9967 90112 4096 4096 NT_STATUS_OK
ReadX 9967 94208 4096 4096 NT_STATUS_OK
ReadX 9967 98304 4096 4096 NT_STATUS_OK
ReadX 9967 102400 4096 4096 NT_STATUS_OK
ReadX 9967 106496 4096 4096 NT_STATUS_OK
ReadX 9967 110592 4096 4096 NT_STATUS_OK
ReadX 9967 114688 4096 4096 NT_STATUS_OK
ReadX 9967 118784 4096 4096 NT_STATUS_OK
ReadX 9967 122880 4096 4096 NT_STATUS_OK
ReadX 9967 126976 4096 4096 NT_STATUS_OK
ReadX 9967 131072 4096 4096 NT_STATUS_OK
ReadX 9967 135168 4096 4096 NT_STATUS_OK
ReadX 9967 139264 4096 4096 NT_STATUS_OK
ReadX 9967 143360 4096 4096 NT_STATUS_OK
ReadX 9967 147456 4096 4096 NT_STATUS_OK
ReadX 9967 151552 4096 4096 NT_STATUS_OK
ReadX 9967 155648 4096 4096 NT_STATUS_OK
ReadX 9967 159744 4096 4096 NT_STATUS_OK
ReadX 9967 163840 4096 4096 NT_STATUS_OK
ReadX 9967 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9967 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 9968 NT_STATUS_OK
Close 9968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 9966 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 9970 NT_STATUS_OK
WriteX 9970 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9970 258 NT_STATUS_OK
Close 9967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9971 NT_STATUS_OK
SET_FILE_INFORMATION 9971 1004 NT_STATUS_OK
Close 9971 NT_STATUS_OK
WriteX 9970 0 42388 42388 NT_STATUS_OK
Close 9970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 9972 NT_STATUS_OK
Close 9972 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9974 NT_STATUS_OK
ReadX 9974 0 4096 4096 NT_STATUS_OK
ReadX 9974 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 9975 NT_STATUS_OK
WriteX 9975 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9975 258 NT_STATUS_OK
SET_FILE_INFORMATION 9975 1004 NT_STATUS_OK
WriteX 9975 0 42652 42652 NT_STATUS_OK
Close 9975 NT_STATUS_OK
Close 9974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 9977 NT_STATUS_OK
Close 9977 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9979 NT_STATUS_OK
ReadX 9979 0 4096 4096 NT_STATUS_OK
ReadX 9979 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9981 NT_STATUS_OK
Close 9981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9984 NT_STATUS_OK
WriteX 9984 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9984 258 NT_STATUS_OK
WriteX 9984 0 65536 65536 NT_STATUS_OK
WriteX 9984 65536 49 49 NT_STATUS_OK
Close 9984 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9985 NT_STATUS_OK
ReadX 9985 0 61440 61440 NT_STATUS_OK
ReadX 9985 61440 4096 4096 NT_STATUS_OK
ReadX 9985 65536 61440 61440 NT_STATUS_OK
ReadX 9985 126976 4096 4096 NT_STATUS_OK
ReadX 9985 131072 61440 61440 NT_STATUS_OK
ReadX 9985 192512 4096 4096 NT_STATUS_OK
ReadX 9985 196608 61440 61440 NT_STATUS_OK
ReadX 9985 258048 4096 4096 NT_STATUS_OK
ReadX 9985 262144 61440 61440 NT_STATUS_OK
ReadX 9985 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9986 NT_STATUS_OK
ReadX 9986 0 61440 61440 NT_STATUS_OK
ReadX 9986 61440 4096 4096 NT_STATUS_OK
ReadX 9986 65536 61440 61440 NT_STATUS_OK
ReadX 9986 126976 4096 4096 NT_STATUS_OK
ReadX 9986 131072 61440 61440 NT_STATUS_OK
ReadX 9986 192512 4096 4096 NT_STATUS_OK
ReadX 9986 196608 61440 61440 NT_STATUS_OK
ReadX 9986 258048 4096 4096 NT_STATUS_OK
ReadX 9986 262144 61440 61440 NT_STATUS_OK
ReadX 9986 323584 4096 4096 NT_STATUS_OK
ReadX 9986 327680 61440 61440 NT_STATUS_OK
ReadX 9986 389120 4096 4096 NT_STATUS_OK
ReadX 9986 393216 61440 61440 NT_STATUS_OK
ReadX 9986 454656 4096 4096 NT_STATUS_OK
ReadX 9986 458752 61440 61440 NT_STATUS_OK
ReadX 9986 520192 4096 4096 NT_STATUS_OK
ReadX 9986 524288 61440 61440 NT_STATUS_OK
ReadX 9986 585728 4096 4096 NT_STATUS_OK
ReadX 9986 589824 61440 61440 NT_STATUS_OK
ReadX 9986 651264 4096 4096 NT_STATUS_OK
ReadX 9986 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9987 NT_STATUS_OK
ReadX 9987 0 61440 61440 NT_STATUS_OK
ReadX 9987 61440 4096 4096 NT_STATUS_OK
ReadX 9987 65536 61440 61440 NT_STATUS_OK
ReadX 9987 126976 4096 4096 NT_STATUS_OK
ReadX 9987 131072 61440 61440 NT_STATUS_OK
ReadX 9987 192512 4096 4096 NT_STATUS_OK
ReadX 9987 196608 61440 61440 NT_STATUS_OK
ReadX 9987 258048 4096 4096 NT_STATUS_OK
ReadX 9987 262144 61440 61440 NT_STATUS_OK
ReadX 9987 323584 4096 4096 NT_STATUS_OK
ReadX 9987 327680 61440 61440 NT_STATUS_OK
ReadX 9987 389120 4096 4096 NT_STATUS_OK
ReadX 9987 393216 61440 61440 NT_STATUS_OK
ReadX 9987 454656 4096 4096 NT_STATUS_OK
ReadX 9987 458752 61440 61440 NT_STATUS_OK
ReadX 9987 520192 4096 4096 NT_STATUS_OK
ReadX 9987 524288 61440 61440 NT_STATUS_OK
ReadX 9987 585728 4096 4096 NT_STATUS_OK
ReadX 9987 589824 61440 61440 NT_STATUS_OK
ReadX 9987 651264 4096 4096 NT_STATUS_OK
ReadX 9987 655360 61440 61440 NT_STATUS_OK
ReadX 9987 716800 4096 4096 NT_STATUS_OK
ReadX 9987 720896 61440 61440 NT_STATUS_OK
ReadX 9987 782336 4096 4096 NT_STATUS_OK
ReadX 9987 786432 61440 61440 NT_STATUS_OK
ReadX 9987 847872 4096 4096 NT_STATUS_OK
ReadX 9987 851968 61440 61440 NT_STATUS_OK
ReadX 9987 913408 4096 4096 NT_STATUS_OK
ReadX 9987 917504 61440 61440 NT_STATUS_OK
ReadX 9987 978944 4096 4096 NT_STATUS_OK
ReadX 9987 983040 61440 61440 NT_STATUS_OK
ReadX 9987 1044480 4096 4096 NT_STATUS_OK
ReadX 9987 1048576 61440 61440 NT_STATUS_OK
ReadX 9987 1110016 4096 4096 NT_STATUS_OK
ReadX 9987 1114112 61440 61440 NT_STATUS_OK
ReadX 9987 1175552 4096 4096 NT_STATUS_OK
ReadX 9987 1179648 61440 61440 NT_STATUS_OK
ReadX 9987 1241088 4096 4096 NT_STATUS_OK
ReadX 9987 1245184 61440 61440 NT_STATUS_OK
ReadX 9987 1306624 4096 4096 NT_STATUS_OK
ReadX 9987 1310720 61440 61440 NT_STATUS_OK
ReadX 9987 1372160 4096 4096 NT_STATUS_OK
ReadX 9987 1376256 61440 61440 NT_STATUS_OK
ReadX 9987 1437696 4096 4096 NT_STATUS_OK
ReadX 9987 1441792 61440 61440 NT_STATUS_OK
ReadX 9987 1503232 4096 4096 NT_STATUS_OK
ReadX 9987 1507328 61440 61440 NT_STATUS_OK
ReadX 9987 1568768 4096 4096 NT_STATUS_OK
ReadX 9987 1572864 61440 61440 NT_STATUS_OK
ReadX 9987 1634304 4096 4096 NT_STATUS_OK
ReadX 9987 1638400 61440 61440 NT_STATUS_OK
ReadX 9987 1699840 4096 4096 NT_STATUS_OK
ReadX 9987 1703936 61440 61440 NT_STATUS_OK
ReadX 9987 1765376 4096 4096 NT_STATUS_OK
ReadX 9987 1769472 61440 61440 NT_STATUS_OK
ReadX 9987 1830912 4096 4096 NT_STATUS_OK
ReadX 9987 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9988 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9989 NT_STATUS_OK
QUERY_FILE_INFORMATION 9989 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9989 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9989 1005 NT_STATUS_OK
ReadX 9989 2156 24 24 NT_STATUS_OK
ReadX 9989 2139 276 276 NT_STATUS_OK
ReadX 9989 2136 14 14 NT_STATUS_OK
ReadX 9989 2136 7 7 NT_STATUS_OK
ReadX 9989 2138 12 12 NT_STATUS_OK
ReadX 9989 2137 8 8 NT_STATUS_OK
ReadX 9989 2135 15 15 NT_STATUS_OK
ReadX 9989 0 16 16 NT_STATUS_OK
ReadX 9989 16 2048 2048 NT_STATUS_OK
ReadX 9989 2064 2048 2048 NT_STATUS_OK
ReadX 9989 257 2048 2048 NT_STATUS_OK
ReadX 9989 385 2048 2048 NT_STATUS_OK
ReadX 9989 513 2048 2048 NT_STATUS_OK
ReadX 9989 641 2048 2048 NT_STATUS_OK
ReadX 9989 769 2048 2048 NT_STATUS_OK
ReadX 9989 897 2048 2048 NT_STATUS_OK
ReadX 9989 1025 2048 2048 NT_STATUS_OK
ReadX 9989 1153 2048 2048 NT_STATUS_OK
ReadX 9989 1281 2048 2048 NT_STATUS_OK
ReadX 9989 1409 2048 2048 NT_STATUS_OK
ReadX 9989 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 9991 NT_STATUS_OK
Close 9991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 9985 NT_STATUS_OK
Close 9986 NT_STATUS_OK
Close 9987 NT_STATUS_OK
Close 9979 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9994 NT_STATUS_OK
WriteX 9994 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9994 258 NT_STATUS_OK
WriteX 9994 0 10575 10575 NT_STATUS_OK
Flush 9994 NT_STATUS_OK
Close 9994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9995 NT_STATUS_OK
Close 9995 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9997 NT_STATUS_OK
ReadX 9997 0 4096 4096 NT_STATUS_OK
Close 9989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9999 NT_STATUS_OK
LockX 9999 2147483538 1 NT_STATUS_OK
UnlockX 9999 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9999 1005 NT_STATUS_OK
ReadX 9999 0 512 512 NT_STATUS_OK
ReadX 9999 512 512 512 NT_STATUS_OK
ReadX 9999 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 9999 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9999 1004 NT_STATUS_OK
Close 9999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10000 NT_STATUS_OK
QUERY_FILE_INFORMATION 10000 1005 NT_STATUS_OK
ReadX 10000 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10001 NT_STATUS_OK
LockX 10001 2147483538 1 NT_STATUS_OK
UnlockX 10001 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10001 1005 NT_STATUS_OK
ReadX 10001 0 512 512 NT_STATUS_OK
ReadX 10001 512 512 512 NT_STATUS_OK
ReadX 10001 1024 512 512 NT_STATUS_OK
ReadX 10001 288 20 20 NT_STATUS_OK
ReadX 10001 308 2084 2084 NT_STATUS_OK
ReadX 10001 388 2084 2084 NT_STATUS_OK
ReadX 10001 388 2084 2084 NT_STATUS_OK
ReadX 9988 2157 1386 1386 NT_STATUS_OK
ReadX 10001 2472 399 399 NT_STATUS_OK
ReadX 10001 3072 1536 1536 NT_STATUS_OK
ReadX 10001 544 149 149 NT_STATUS_OK
ReadX 10001 693 485 485 NT_STATUS_OK
Close 10001 NT_STATUS_OK
ReadX 9988 2157 4096 4096 NT_STATUS_OK
ReadX 9988 6253 4096 4096 NT_STATUS_OK
ReadX 9988 10349 4096 4096 NT_STATUS_OK
ReadX 9988 14445 4096 4096 NT_STATUS_OK
ReadX 9988 18541 4096 4096 NT_STATUS_OK
ReadX 9988 22637 256 256 NT_STATUS_OK
ReadX 9988 22893 4096 4096 NT_STATUS_OK
ReadX 9988 26989 4096 4096 NT_STATUS_OK
ReadX 9988 31085 4096 4096 NT_STATUS_OK
ReadX 9988 35181 4096 4096 NT_STATUS_OK
ReadX 9988 39277 4096 4096 NT_STATUS_OK
ReadX 9988 43373 4096 4096 NT_STATUS_OK
ReadX 9988 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9988 2157 1024 1024 NT_STATUS_OK
ReadX 9988 1667 4688 4688 NT_STATUS_OK
ReadX 9988 6355 3516 3516 NT_STATUS_OK
ReadX 9988 9871 16384 16384 NT_STATUS_OK
ReadX 9988 26255 3771 3771 NT_STATUS_OK
ReadX 9988 30026 2048 2048 NT_STATUS_OK
ReadX 9988 32074 1024 1024 NT_STATUS_OK
ReadX 9988 33098 6652 6652 NT_STATUS_OK
ReadX 9988 39750 16384 16384 NT_STATUS_OK
ReadX 9988 56134 10496 10496 NT_STATUS_OK
ReadX 9988 66630 1784 1784 NT_STATUS_OK
ReadX 9988 68414 90 90 NT_STATUS_OK
ReadX 9988 68504 273 273 NT_STATUS_OK
ReadX 9988 68777 1600 1600 NT_STATUS_OK
ReadX 9988 70377 640 640 NT_STATUS_OK
ReadX 9988 71017 1280 1280 NT_STATUS_OK
ReadX 9988 72297 8464 8464 NT_STATUS_OK
ReadX 9988 80761 158 158 NT_STATUS_OK
ReadX 9988 80919 912 912 NT_STATUS_OK
ReadX 9988 81831 1980 1980 NT_STATUS_OK
ReadX 9988 83811 2256 2256 NT_STATUS_OK
ReadX 9988 86067 400 400 NT_STATUS_OK
ReadX 9988 86467 252 252 NT_STATUS_OK
ReadX 9988 86719 42 42 NT_STATUS_OK
ReadX 9988 86761 725 725 NT_STATUS_OK
ReadX 9988 2009 512 512 NT_STATUS_OK
ReadX 9988 3895 9 9 NT_STATUS_OK
ReadX 9988 3781 46 46 NT_STATUS_OK
ReadX 9988 4059 92 92 NT_STATUS_OK
ReadX 9988 3781 92 92 NT_STATUS_OK
ReadX 9988 3986 184 184 NT_STATUS_OK
ReadX 9988 3987 16384 16384 NT_STATUS_OK
ReadX 9988 3902 16384 16384 NT_STATUS_OK
ReadX 9988 3781 10240 10240 NT_STATUS_OK
ReadX 9988 3821 16384 16384 NT_STATUS_OK
ReadX 9988 3891 935 935 NT_STATUS_OK
ReadX 9988 4060 10240 10240 NT_STATUS_OK
ReadX 9988 4059 184 184 NT_STATUS_OK
ReadX 9988 256 184 184 NT_STATUS_OK
ReadX 9988 256 1026 1026 NT_STATUS_OK
ReadX 9988 3901 326 326 NT_STATUS_OK
ReadX 9988 3899 652 652 NT_STATUS_OK
ReadX 9988 256 2 2 NT_STATUS_OK
ReadX 9988 258 4948 4948 NT_STATUS_OK
Close 9988 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10003 NT_STATUS_OK
Close 10003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10006 NT_STATUS_OK
WriteX 10006 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10006 258 NT_STATUS_OK
WriteX 10006 0 65536 65536 NT_STATUS_OK
WriteX 10006 65536 65536 65536 NT_STATUS_OK
WriteX 10006 131072 65536 65536 NT_STATUS_OK
WriteX 10006 196608 65536 65536 NT_STATUS_OK
WriteX 10006 262144 65536 65536 NT_STATUS_OK
WriteX 10006 327680 65536 65536 NT_STATUS_OK
WriteX 10006 393216 65536 65536 NT_STATUS_OK
WriteX 10006 458752 65536 65536 NT_STATUS_OK
WriteX 10006 524288 65536 65536 NT_STATUS_OK
WriteX 10006 589824 35257 35257 NT_STATUS_OK
Close 10006 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10008 NT_STATUS_OK
Close 10008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10011 NT_STATUS_OK
WriteX 10011 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10011 258 NT_STATUS_OK
WriteX 10011 0 65536 65536 NT_STATUS_OK
WriteX 10011 65536 65536 65536 NT_STATUS_OK
WriteX 10011 131072 65536 65536 NT_STATUS_OK
WriteX 10011 196608 65536 65536 NT_STATUS_OK
WriteX 10011 262144 65536 65536 NT_STATUS_OK
WriteX 10011 327680 65536 65536 NT_STATUS_OK
WriteX 10011 393216 65536 65536 NT_STATUS_OK
WriteX 10011 458752 65536 65536 NT_STATUS_OK
WriteX 10011 524288 65536 65536 NT_STATUS_OK
WriteX 10011 589824 57598 57598 NT_STATUS_OK
Close 10011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10013 NT_STATUS_OK
WriteX 10013 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10013 258 NT_STATUS_OK
WriteX 10013 0 12543 12543 NT_STATUS_OK
Flush 10013 NT_STATUS_OK
Close 10013 NT_STATUS_OK
Close 9997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10015 NT_STATUS_OK
Close 10015 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10017 NT_STATUS_OK
ReadX 10017 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10018 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10019 NT_STATUS_OK
QUERY_FILE_INFORMATION 10019 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10019 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10019 1005 NT_STATUS_OK
ReadX 10019 1938 24 24 NT_STATUS_OK
ReadX 10019 1920 276 276 NT_STATUS_OK
ReadX 10019 1918 14 14 NT_STATUS_OK
ReadX 10019 1918 7 7 NT_STATUS_OK
ReadX 10019 1919 12 12 NT_STATUS_OK
ReadX 10019 1919 8 8 NT_STATUS_OK
ReadX 10019 1917 15 15 NT_STATUS_OK
ReadX 10019 0 16 16 NT_STATUS_OK
ReadX 10019 16 2048 2048 NT_STATUS_OK
ReadX 10019 2064 2048 2048 NT_STATUS_OK
ReadX 10019 257 2048 2048 NT_STATUS_OK
ReadX 10019 385 2048 2048 NT_STATUS_OK
ReadX 10019 513 2048 2048 NT_STATUS_OK
ReadX 10019 641 2048 2048 NT_STATUS_OK
ReadX 10019 769 2048 2048 NT_STATUS_OK
ReadX 10019 897 2048 2048 NT_STATUS_OK
ReadX 10019 1025 2048 2048 NT_STATUS_OK
ReadX 10019 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10021 NT_STATUS_OK
Close 10021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10024 NT_STATUS_OK
WriteX 10024 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10024 258 NT_STATUS_OK
WriteX 10024 0 11588 11588 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
Close 10024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10025 NT_STATUS_OK
Close 10025 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10027 NT_STATUS_OK
ReadX 10027 0 4096 4096 NT_STATUS_OK
Close 10019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10029 NT_STATUS_OK
WriteX 10029 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10029 258 NT_STATUS_OK
WriteX 10029 0 11615 11615 NT_STATUS_OK
Flush 10029 NT_STATUS_OK
Close 10029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10031 NT_STATUS_OK
Close 10031 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10033 NT_STATUS_OK
ReadX 10033 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10035 NT_STATUS_OK
Close 10035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10038 NT_STATUS_OK
WriteX 10038 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10038 258 NT_STATUS_OK
WriteX 10038 0 65536 65536 NT_STATUS_OK
WriteX 10038 65536 16050 16050 NT_STATUS_OK
Close 10038 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10018 1939 64 64 NT_STATUS_OK
ReadX 10018 128 248 248 NT_STATUS_OK
ReadX 10018 128 568 568 NT_STATUS_OK
ReadX 10018 3872 1536 1536 NT_STATUS_OK
ReadX 10018 3456 2560 2560 NT_STATUS_OK
ReadX 10018 3136 512 512 NT_STATUS_OK
ReadX 10018 2880 4096 4096 NT_STATUS_OK
ReadX 10018 3264 3072 3072 NT_STATUS_OK
ReadX 10018 320 4096 4096 NT_STATUS_OK
ReadX 10018 1024 4096 4096 NT_STATUS_OK
ReadX 10018 3616 4096 4096 NT_STATUS_OK
ReadX 10018 1939 64 64 NT_STATUS_OK
ReadX 10018 128 248 248 NT_STATUS_OK
ReadX 10018 128 608 608 NT_STATUS_OK
ReadX 10018 2858 1024 1024 NT_STATUS_OK
ReadX 10018 2810 4096 4096 NT_STATUS_OK
ReadX 10018 2826 4096 4096 NT_STATUS_OK
ReadX 10018 2580 2048 2048 NT_STATUS_OK
ReadX 10018 2800 2560 2560 NT_STATUS_OK
ReadX 10018 2100 4096 4096 NT_STATUS_OK
ReadX 10018 2084 4096 4096 NT_STATUS_OK
ReadX 10018 868 4096 4096 NT_STATUS_OK
ReadX 10018 2324 4096 4096 NT_STATUS_OK
ReadX 10018 884 4096 4096 NT_STATUS_OK
ReadX 10018 2604 1024 1024 NT_STATUS_OK
ReadX 10018 580 4096 4096 NT_STATUS_OK
ReadX 10018 596 4096 4096 NT_STATUS_OK
ReadX 10018 2752 4096 4096 NT_STATUS_OK
ReadX 10018 2842 1024 1024 NT_STATUS_OK
ReadX 10018 660 4096 4096 NT_STATUS_OK
ReadX 10018 2720 4096 4096 NT_STATUS_OK
ReadX 10018 2736 4096 4096 NT_STATUS_OK
ReadX 10018 628 4096 4096 NT_STATUS_OK
ReadX 10018 2704 4096 4096 NT_STATUS_OK
ReadX 10018 1556 4096 4096 NT_STATUS_OK
ReadX 10018 576 4096 4096 NT_STATUS_OK
ReadX 10018 3168 1536 1536 NT_STATUS_OK
ReadX 10018 832 4096 4096 NT_STATUS_OK
ReadX 10018 1088 4096 4096 NT_STATUS_OK
ReadX 10018 1344 4096 4096 NT_STATUS_OK
ReadX 10018 1600 4096 4096 NT_STATUS_OK
ReadX 10018 1856 4096 4096 NT_STATUS_OK
ReadX 10018 2112 4096 4096 NT_STATUS_OK
ReadX 10018 1892 4096 4096 NT_STATUS_OK
ReadX 10018 820 4096 4096 NT_STATUS_OK
ReadX 10018 788 4096 4096 NT_STATUS_OK
ReadX 10018 1604 4096 4096 NT_STATUS_OK
ReadX 10018 3648 4096 4096 NT_STATUS_OK
ReadX 10018 2608 4096 4096 NT_STATUS_OK
ReadX 10018 548 4096 4096 NT_STATUS_OK
ReadX 10018 740 4096 4096 NT_STATUS_OK
ReadX 10018 1344 4096 4096 NT_STATUS_OK
ReadX 10018 3392 4096 4096 NT_STATUS_OK
ReadX 10018 3904 4096 4096 NT_STATUS_OK
ReadX 10018 644 4096 4096 NT_STATUS_OK
ReadX 10018 676 4096 4096 NT_STATUS_OK
ReadX 10018 2688 4096 4096 NT_STATUS_OK
ReadX 10018 320 4096 4096 NT_STATUS_OK
ReadX 10018 900 4096 4096 NT_STATUS_OK
ReadX 10018 1908 4096 4096 NT_STATUS_OK
ReadX 10018 852 4096 4096 NT_STATUS_OK
ReadX 10018 724 4096 4096 NT_STATUS_OK
ReadX 10018 2292 4096 4096 NT_STATUS_OK
ReadX 10018 612 4096 4096 NT_STATUS_OK
ReadX 10018 388 4096 4096 NT_STATUS_OK
ReadX 10018 2368 4096 4096 NT_STATUS_OK
ReadX 10018 2624 4096 4096 NT_STATUS_OK
ReadX 10018 500 4096 4096 NT_STATUS_OK
ReadX 10018 356 4096 4096 NT_STATUS_OK
ReadX 10018 1024 4096 4096 NT_STATUS_OK
ReadX 10018 576 4096 4096 NT_STATUS_OK
ReadX 10018 340 4096 4096 NT_STATUS_OK
ReadX 10018 420 4096 4096 NT_STATUS_OK
ReadX 10018 1600 4096 4096 NT_STATUS_OK
ReadX 10018 404 4096 4096 NT_STATUS_OK
ReadX 10018 1428 4096 4096 NT_STATUS_OK
ReadX 10018 2656 4096 4096 NT_STATUS_OK
ReadX 10018 2624 4096 4096 NT_STATUS_OK
ReadX 10018 452 4096 4096 NT_STATUS_OK
ReadX 10018 692 4096 4096 NT_STATUS_OK
ReadX 10018 564 4096 4096 NT_STATUS_OK
ReadX 10018 372 4096 4096 NT_STATUS_OK
ReadX 10018 468 4096 4096 NT_STATUS_OK
ReadX 10018 484 4096 4096 NT_STATUS_OK
ReadX 10018 1088 4096 4096 NT_STATUS_OK
ReadX 10018 1924 4096 4096 NT_STATUS_OK
ReadX 10018 2768 4096 4096 NT_STATUS_OK
ReadX 10018 832 4096 4096 NT_STATUS_OK
ReadX 10018 836 4096 4096 NT_STATUS_OK
ReadX 10018 1856 4096 4096 NT_STATUS_OK
ReadX 10018 2640 4096 4096 NT_STATUS_OK
ReadX 10018 436 4096 4096 NT_STATUS_OK
ReadX 10018 1828 4096 4096 NT_STATUS_OK
ReadX 10018 804 4096 4096 NT_STATUS_OK
ReadX 10018 1860 4096 4096 NT_STATUS_OK
ReadX 10018 1812 4096 4096 NT_STATUS_OK
ReadX 10018 756 4096 4096 NT_STATUS_OK
ReadX 10018 1636 4096 4096 NT_STATUS_OK
ReadX 10018 772 4096 4096 NT_STATUS_OK
ReadX 10018 2036 4096 4096 NT_STATUS_OK
ReadX 10018 1220 4096 4096 NT_STATUS_OK
ReadX 10018 1652 4096 4096 NT_STATUS_OK
ReadX 10018 2588 4096 4096 NT_STATUS_OK
ReadX 10018 916 4096 4096 NT_STATUS_OK
ReadX 10018 260 4096 4096 NT_STATUS_OK
ReadX 10018 932 4096 4096 NT_STATUS_OK
ReadX 10018 2624 4096 4096 NT_STATUS_OK
ReadX 10018 308 4096 4096 NT_STATUS_OK
ReadX 10018 292 4096 4096 NT_STATUS_OK
ReadX 10018 1140 4096 4096 NT_STATUS_OK
ReadX 10018 276 4096 4096 NT_STATUS_OK
ReadX 10018 2020 4096 4096 NT_STATUS_OK
ReadX 10018 2880 4096 4096 NT_STATUS_OK
ReadX 10018 516 4096 4096 NT_STATUS_OK
ReadX 10018 1844 4096 4096 NT_STATUS_OK
ReadX 10018 1124 4096 4096 NT_STATUS_OK
ReadX 10018 3136 4096 4096 NT_STATUS_OK
ReadX 10018 324 4096 4096 NT_STATUS_OK
ReadX 10018 1156 4096 4096 NT_STATUS_OK
ReadX 10018 1172 4096 4096 NT_STATUS_OK
ReadX 10018 2112 4096 4096 NT_STATUS_OK
ReadX 10018 2368 4096 4096 NT_STATUS_OK
ReadX 10018 964 4096 4096 NT_STATUS_OK
ReadX 10018 980 4096 4096 NT_STATUS_OK
ReadX 10018 1012 4096 4096 NT_STATUS_OK
ReadX 10018 532 4096 4096 NT_STATUS_OK
ReadX 10018 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10018 1620 4096 4096 NT_STATUS_OK
ReadX 10018 1604 4096 4096 NT_STATUS_OK
ReadX 10018 2116 4096 4096 NT_STATUS_OK
ReadX 10018 2132 4096 4096 NT_STATUS_OK
ReadX 10018 2148 4096 4096 NT_STATUS_OK
ReadX 10018 2276 4096 4096 NT_STATUS_OK
ReadX 10018 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10040 NT_STATUS_OK
Close 10040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10043 NT_STATUS_OK
QUERY_FILE_INFORMATION 9998 1004 NT_STATUS_OK
Close 9998 NT_STATUS_OK
WriteX 10043 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10043 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10000 1004 NT_STATUS_OK
Close 10000 NT_STATUS_OK
WriteX 10043 0 65536 65536 NT_STATUS_OK
WriteX 10043 65536 64850 64850 NT_STATUS_OK
Close 10043 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10045 NT_STATUS_OK
WriteX 10045 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10045 258 NT_STATUS_OK
ReadX 10018 2068 4096 4096 NT_STATUS_OK
ReadX 10018 1588 4096 4096 NT_STATUS_OK
ReadX 10018 1572 4096 4096 NT_STATUS_OK
WriteX 10045 0 18630 18630 NT_STATUS_OK
Flush 10045 NT_STATUS_OK
Close 10045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10047 NT_STATUS_OK
Close 10047 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10049 NT_STATUS_OK
ReadX 10049 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10018 612 4096 4096 NT_STATUS_OK
ReadX 10018 564 4096 4096 NT_STATUS_OK
ReadX 10018 1876 4096 4096 NT_STATUS_OK
ReadX 10018 628 4096 4096 NT_STATUS_OK
ReadX 10018 740 4096 4096 NT_STATUS_OK
ReadX 10018 724 4096 4096 NT_STATUS_OK
ReadX 10018 644 4096 4096 NT_STATUS_OK
ReadX 10018 2324 4096 4096 NT_STATUS_OK
ReadX 10018 660 4096 4096 NT_STATUS_OK
ReadX 10018 852 4096 4096 NT_STATUS_OK
ReadX 10018 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10018 2368 4096 4096 NT_STATUS_OK
ReadX 10018 1024 4096 4096 NT_STATUS_OK
ReadX 10018 320 4096 4096 NT_STATUS_OK
ReadX 10018 580 4096 4096 NT_STATUS_OK
ReadX 10018 3136 512 512 NT_STATUS_OK
ReadX 10018 2880 4096 4096 NT_STATUS_OK
Close 10018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10050 NT_STATUS_OK
ReadX 10050 61440 4096 4096 NT_STATUS_OK
ReadX 10050 126976 4096 4096 NT_STATUS_OK
WriteX 10050 0 65536 65536 NT_STATUS_OK
WriteX 10050 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10051 NT_STATUS_OK
ReadX 10051 61440 4096 4096 NT_STATUS_OK
ReadX 10051 126976 4096 4096 NT_STATUS_OK
ReadX 10051 192512 4096 4096 NT_STATUS_OK
ReadX 10051 258048 4096 4096 NT_STATUS_OK
WriteX 10051 0 65536 65536 NT_STATUS_OK
WriteX 10051 65536 65536 65536 NT_STATUS_OK
WriteX 10051 131072 65536 65536 NT_STATUS_OK
WriteX 10051 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10052 NT_STATUS_OK
ReadX 10052 61440 4096 4096 NT_STATUS_OK
ReadX 10052 126976 4096 4096 NT_STATUS_OK
ReadX 10052 192512 4096 4096 NT_STATUS_OK
ReadX 10052 258048 4096 4096 NT_STATUS_OK
ReadX 10052 323584 4096 4096 NT_STATUS_OK
ReadX 10052 389120 4096 4096 NT_STATUS_OK
ReadX 10052 454656 4096 4096 NT_STATUS_OK
ReadX 10052 520192 4096 4096 NT_STATUS_OK
WriteX 10052 0 65536 65536 NT_STATUS_OK
WriteX 10052 65536 65536 65536 NT_STATUS_OK
WriteX 10052 131072 65536 65536 NT_STATUS_OK
WriteX 10052 196608 65536 65536 NT_STATUS_OK
WriteX 10052 262144 65536 65536 NT_STATUS_OK
WriteX 10052 327680 65536 65536 NT_STATUS_OK
WriteX 10052 393216 65536 65536 NT_STATUS_OK
WriteX 10052 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10053 NT_STATUS_OK
ReadX 10053 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10054 NT_STATUS_OK
Close 10054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10055 NT_STATUS_OK
WriteX 10055 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10055 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10053 0 8192 8192 NT_STATUS_OK
Flush 10053 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10053 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10053 0 8192 8192 NT_STATUS_OK
Flush 10053 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10053 0 8192 8192 NT_STATUS_OK
Flush 10053 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10053 0 8192 8192 NT_STATUS_OK
Flush 10053 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10057 NT_STATUS_OK
Close 10057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10049 NT_STATUS_OK
Close 10017 NT_STATUS_OK
Close 10050 NT_STATUS_OK
Close 10051 NT_STATUS_OK
Close 10052 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10060 NT_STATUS_OK
WriteX 10060 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10060 258 NT_STATUS_OK
WriteX 10060 0 62591 62591 NT_STATUS_OK
Close 10060 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10062 NT_STATUS_OK
Close 10062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10065 NT_STATUS_OK
WriteX 10065 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10065 258 NT_STATUS_OK
WriteX 10065 0 10845 10845 NT_STATUS_OK
Close 10065 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10067 NT_STATUS_OK
Close 10067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10070 NT_STATUS_OK
WriteX 10070 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10070 258 NT_STATUS_OK
WriteX 10070 0 30118 30118 NT_STATUS_OK
Close 10070 NT_STATUS_OK
WriteX 10053 0 4096 4096 NT_STATUS_OK
WriteX 10055 0 64 64 NT_STATUS_OK
Close 10055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10053 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10072 NT_STATUS_OK
ReadX 10072 0 61440 61440 NT_STATUS_OK
ReadX 10072 61440 4096 4096 NT_STATUS_OK
ReadX 10072 65536 61440 61440 NT_STATUS_OK
ReadX 10072 126976 4096 4096 NT_STATUS_OK
ReadX 10072 131072 61440 61440 NT_STATUS_OK
ReadX 10072 192512 4096 4096 NT_STATUS_OK
ReadX 10072 196608 61440 61440 NT_STATUS_OK
ReadX 10072 258048 4096 4096 NT_STATUS_OK
ReadX 10072 262144 61440 61440 NT_STATUS_OK
ReadX 10072 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10073 NT_STATUS_OK
ReadX 10073 0 61440 61440 NT_STATUS_OK
ReadX 10073 61440 4096 4096 NT_STATUS_OK
ReadX 10073 65536 61440 61440 NT_STATUS_OK
ReadX 10073 126976 4096 4096 NT_STATUS_OK
ReadX 10073 131072 61440 61440 NT_STATUS_OK
ReadX 10073 192512 4096 4096 NT_STATUS_OK
ReadX 10073 196608 61440 61440 NT_STATUS_OK
ReadX 10073 258048 4096 4096 NT_STATUS_OK
ReadX 10073 262144 61440 61440 NT_STATUS_OK
ReadX 10073 323584 4096 4096 NT_STATUS_OK
ReadX 10073 327680 61440 61440 NT_STATUS_OK
ReadX 10073 389120 4096 4096 NT_STATUS_OK
ReadX 10073 393216 61440 61440 NT_STATUS_OK
ReadX 10073 454656 4096 4096 NT_STATUS_OK
ReadX 10073 458752 61440 61440 NT_STATUS_OK
ReadX 10073 520192 4096 4096 NT_STATUS_OK
ReadX 10073 524288 61440 61440 NT_STATUS_OK
ReadX 10073 585728 4096 4096 NT_STATUS_OK
ReadX 10073 589824 61440 61440 NT_STATUS_OK
ReadX 10073 651264 4096 4096 NT_STATUS_OK
ReadX 10073 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10074 NT_STATUS_OK
ReadX 10074 0 61440 61440 NT_STATUS_OK
ReadX 10074 61440 4096 4096 NT_STATUS_OK
ReadX 10074 65536 61440 61440 NT_STATUS_OK
ReadX 10074 126976 4096 4096 NT_STATUS_OK
ReadX 10074 131072 61440 61440 NT_STATUS_OK
ReadX 10074 192512 4096 4096 NT_STATUS_OK
ReadX 10074 196608 61440 61440 NT_STATUS_OK
ReadX 10074 258048 4096 4096 NT_STATUS_OK
ReadX 10074 262144 61440 61440 NT_STATUS_OK
ReadX 10074 323584 4096 4096 NT_STATUS_OK
ReadX 10074 327680 61440 61440 NT_STATUS_OK
ReadX 10074 389120 4096 4096 NT_STATUS_OK
ReadX 10074 393216 61440 61440 NT_STATUS_OK
ReadX 10074 454656 4096 4096 NT_STATUS_OK
ReadX 10074 458752 61440 61440 NT_STATUS_OK
ReadX 10074 520192 4096 4096 NT_STATUS_OK
ReadX 10074 524288 61440 61440 NT_STATUS_OK
ReadX 10074 585728 4096 4096 NT_STATUS_OK
ReadX 10074 589824 61440 61440 NT_STATUS_OK
ReadX 10074 651264 4096 4096 NT_STATUS_OK
ReadX 10074 655360 61440 61440 NT_STATUS_OK
ReadX 10074 716800 4096 4096 NT_STATUS_OK
ReadX 10074 720896 61440 61440 NT_STATUS_OK
ReadX 10074 782336 4096 4096 NT_STATUS_OK
ReadX 10074 786432 61440 61440 NT_STATUS_OK
ReadX 10074 847872 4096 4096 NT_STATUS_OK
ReadX 10074 851968 61440 61440 NT_STATUS_OK
ReadX 10074 913408 4096 4096 NT_STATUS_OK
ReadX 10074 917504 61440 61440 NT_STATUS_OK
ReadX 10074 978944 4096 4096 NT_STATUS_OK
ReadX 10074 983040 61440 61440 NT_STATUS_OK
ReadX 10074 1044480 4096 4096 NT_STATUS_OK
ReadX 10074 1048576 61440 61440 NT_STATUS_OK
ReadX 10074 1110016 4096 4096 NT_STATUS_OK
ReadX 10074 1114112 61440 61440 NT_STATUS_OK
ReadX 10074 1175552 4096 4096 NT_STATUS_OK
ReadX 10074 1179648 61440 61440 NT_STATUS_OK
ReadX 10074 1241088 4096 4096 NT_STATUS_OK
ReadX 10074 1245184 61440 61440 NT_STATUS_OK
ReadX 10074 1306624 4096 4096 NT_STATUS_OK
ReadX 10074 1310720 61440 61440 NT_STATUS_OK
ReadX 10074 1372160 4096 4096 NT_STATUS_OK
ReadX 10074 1376256 61440 61440 NT_STATUS_OK
ReadX 10074 1437696 4096 4096 NT_STATUS_OK
ReadX 10074 1441792 61440 61440 NT_STATUS_OK
ReadX 10074 1503232 4096 4096 NT_STATUS_OK
ReadX 10074 1507328 61440 61440 NT_STATUS_OK
ReadX 10074 1568768 4096 4096 NT_STATUS_OK
ReadX 10074 1572864 61440 61440 NT_STATUS_OK
ReadX 10074 1634304 4096 4096 NT_STATUS_OK
ReadX 10074 1638400 61440 61440 NT_STATUS_OK
ReadX 10074 1699840 4096 4096 NT_STATUS_OK
ReadX 10074 1703936 61440 61440 NT_STATUS_OK
ReadX 10074 1765376 4096 4096 NT_STATUS_OK
ReadX 10074 1769472 61440 61440 NT_STATUS_OK
ReadX 10074 1830912 4096 4096 NT_STATUS_OK
ReadX 10074 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10075 NT_STATUS_OK
Close 10075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10072 NT_STATUS_OK
Close 10073 NT_STATUS_OK
Close 10074 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10077 NT_STATUS_OK
ReadX 10077 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10078 NT_STATUS_OK
ReadX 10078 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10079 NT_STATUS_OK
ReadX 10079 0 4096 4096 NT_STATUS_OK
ReadX 10079 4096 4096 4096 NT_STATUS_OK
ReadX 10079 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10080 NT_STATUS_OK
Close 10080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10077 NT_STATUS_OK
Close 10078 NT_STATUS_OK
Close 10079 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10082 NT_STATUS_OK
ReadX 10082 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10083 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10083 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10084 NT_STATUS_OK
Close 10084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10082 NT_STATUS_OK
Close 10083 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10086 NT_STATUS_OK
ReadX 10086 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10087 NT_STATUS_OK
ReadX 10087 0 8192 8192 NT_STATUS_OK
ReadX 10087 8192 8192 8192 NT_STATUS_OK
ReadX 10087 16384 8192 8192 NT_STATUS_OK
ReadX 10087 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10089 NT_STATUS_OK
Close 10089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10087 NT_STATUS_OK
Close 10086 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10092 NT_STATUS_OK
WriteX 10092 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10092 258 NT_STATUS_OK
WriteX 10092 0 10438 10438 NT_STATUS_OK
Close 10092 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10093 NT_STATUS_OK
Close 10093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10094 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10095 NT_STATUS_OK
Close 10095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10097 NT_STATUS_OK
Close 10097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10098 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10099 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10100 NT_STATUS_OK
Close 10100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10101 NT_STATUS_OK
ReadX 10101 0 4096 4096 NT_STATUS_OK
ReadX 10101 4096 4096 4096 NT_STATUS_OK
ReadX 10101 8192 4096 4096 NT_STATUS_OK
ReadX 10101 12288 8192 8192 NT_STATUS_OK
ReadX 10101 20480 8192 8192 NT_STATUS_OK
ReadX 10101 28672 8192 8192 NT_STATUS_OK
ReadX 10101 36864 8192 8192 NT_STATUS_OK
ReadX 10101 45056 8192 8192 NT_STATUS_OK
ReadX 10101 53248 8192 8192 NT_STATUS_OK
ReadX 10101 61440 8192 8192 NT_STATUS_OK
ReadX 10101 69632 8192 8192 NT_STATUS_OK
ReadX 10101 77824 8192 8192 NT_STATUS_OK
ReadX 10101 86016 8192 8192 NT_STATUS_OK
ReadX 10101 94208 8192 8192 NT_STATUS_OK
ReadX 10101 102400 8192 8192 NT_STATUS_OK
ReadX 10101 110592 8192 8192 NT_STATUS_OK
ReadX 10101 118784 8192 8192 NT_STATUS_OK
ReadX 10101 126976 8192 8192 NT_STATUS_OK
ReadX 10101 135168 8192 8192 NT_STATUS_OK
ReadX 10101 143360 8192 8192 NT_STATUS_OK
ReadX 10101 151552 8192 8192 NT_STATUS_OK
ReadX 10101 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10101 NT_STATUS_OK
Close 10094 NT_STATUS_OK
Close 10096 NT_STATUS_OK
Close 10098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10103 NT_STATUS_OK
Close 10103 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10106 NT_STATUS_OK
WriteX 10106 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10106 258 NT_STATUS_OK
WriteX 10106 0 28489 28489 NT_STATUS_OK
Close 10106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10107 NT_STATUS_OK
Close 10107 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10109 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10110 NT_STATUS_OK
Close 10110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10109 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10112 NT_STATUS_OK
ReadX 10112 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10113 NT_STATUS_OK
ReadX 10113 0 8192 8192 NT_STATUS_OK
ReadX 10113 8192 8192 8192 NT_STATUS_OK
ReadX 10113 16384 8192 8192 NT_STATUS_OK
ReadX 10113 24576 8192 8192 NT_STATUS_OK
ReadX 10113 32768 16384 16384 NT_STATUS_OK
ReadX 10113 49152 8192 8192 NT_STATUS_OK
ReadX 10113 57344 8192 8192 NT_STATUS_OK
ReadX 10113 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10115 NT_STATUS_OK
Close 10115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10113 NT_STATUS_OK
Close 10112 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10118 NT_STATUS_OK
WriteX 10118 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10118 258 NT_STATUS_OK
WriteX 10118 0 29253 29253 NT_STATUS_OK
Close 10118 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10119 NT_STATUS_OK
Close 10119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10120 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10122 NT_STATUS_OK
Close 10122 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10125 NT_STATUS_OK
WriteX 10125 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10125 258 NT_STATUS_OK
WriteX 10125 0 30183 30183 NT_STATUS_OK
Close 10125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10126 NT_STATUS_OK
Close 10126 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10128 NT_STATUS_OK
WriteX 10128 0 510 510 NT_STATUS_OK
WriteX 10128 510 512 512 NT_STATUS_OK
WriteX 10128 1022 510 510 NT_STATUS_OK
WriteX 10128 1532 510 510 NT_STATUS_OK
WriteX 10128 2042 168 168 NT_STATUS_OK
Close 10128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10129 NT_STATUS_OK
Close 10129 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10131 NT_STATUS_OK
ReadX 10131 0 4096 4096 NT_STATUS_OK
WriteX 10131 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10132 NT_STATUS_OK
ReadX 10132 61440 4096 4096 NT_STATUS_OK
ReadX 10132 126976 4096 4096 NT_STATUS_OK
WriteX 10132 0 65536 65536 NT_STATUS_OK
WriteX 10132 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10133 NT_STATUS_OK
ReadX 10133 61440 4096 4096 NT_STATUS_OK
ReadX 10133 126976 4096 4096 NT_STATUS_OK
ReadX 10133 192512 4096 4096 NT_STATUS_OK
ReadX 10133 258048 4096 4096 NT_STATUS_OK
WriteX 10133 0 65536 65536 NT_STATUS_OK
WriteX 10133 65536 65536 65536 NT_STATUS_OK
WriteX 10133 131072 65536 65536 NT_STATUS_OK
WriteX 10133 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10134 NT_STATUS_OK
ReadX 10134 61440 4096 4096 NT_STATUS_OK
ReadX 10134 126976 4096 4096 NT_STATUS_OK
ReadX 10134 192512 4096 4096 NT_STATUS_OK
ReadX 10134 258048 4096 4096 NT_STATUS_OK
ReadX 10134 323584 4096 4096 NT_STATUS_OK
ReadX 10134 389120 4096 4096 NT_STATUS_OK
ReadX 10134 454656 4096 4096 NT_STATUS_OK
ReadX 10134 520192 4096 4096 NT_STATUS_OK
WriteX 10134 0 65536 65536 NT_STATUS_OK
WriteX 10134 65536 65536 65536 NT_STATUS_OK
WriteX 10134 131072 65536 65536 NT_STATUS_OK
WriteX 10134 196608 65536 65536 NT_STATUS_OK
WriteX 10134 262144 65536 65536 NT_STATUS_OK
WriteX 10134 327680 65536 65536 NT_STATUS_OK
WriteX 10134 393216 65536 65536 NT_STATUS_OK
WriteX 10134 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10135 NT_STATUS_OK
Close 10135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10131 NT_STATUS_OK
Close 10132 NT_STATUS_OK
Close 10133 NT_STATUS_OK
Close 10134 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10137 NT_STATUS_OK
Close 10137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10141 NT_STATUS_OK
Close 10141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10144 NT_STATUS_OK
Close 10144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10146 NT_STATUS_OK
Close 10146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10150 NT_STATUS_OK
Close 10150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10153 NT_STATUS_OK
Close 10153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10155 NT_STATUS_OK
Close 10155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10159 NT_STATUS_OK
Close 10159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10164 NT_STATUS_OK
Close 10164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10169 NT_STATUS_OK
Close 10169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10174 NT_STATUS_OK
Close 10174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10179 NT_STATUS_OK
Close 10179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10184 NT_STATUS_OK
Close 10184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10189 NT_STATUS_OK
Close 10189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10194 NT_STATUS_OK
Close 10194 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10197 NT_STATUS_OK
Close 10197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10200 NT_STATUS_OK
Close 10200 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10203 NT_STATUS_OK
WriteX 10203 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10203 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10203 0 65536 65536 NT_STATUS_OK
WriteX 10203 65536 65536 65536 NT_STATUS_OK
WriteX 10203 131072 65536 65536 NT_STATUS_OK
WriteX 10203 196608 65536 65536 NT_STATUS_OK
WriteX 10203 262144 26634 26634 NT_STATUS_OK
Close 10203 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10208 NT_STATUS_OK
Close 10208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10209 NT_STATUS_OK
Close 10209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10210 NT_STATUS_OK
ReadX 10210 0 4096 4096 NT_STATUS_OK
Close 10210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10211 NT_STATUS_OK
ReadX 10211 0 4096 4096 NT_STATUS_OK
ReadX 10211 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10212 NT_STATUS_OK
Close 10212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10211 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10216 NT_STATUS_OK
Close 10216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10219 NT_STATUS_OK
Close 10219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10221 NT_STATUS_OK
Close 10221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10225 NT_STATUS_OK
Close 10225 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10228 NT_STATUS_OK
Close 10228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10230 NT_STATUS_OK
Close 10230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10234 NT_STATUS_OK
Close 10234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10239 NT_STATUS_OK
Close 10239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10244 NT_STATUS_OK
Close 10244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10249 NT_STATUS_OK
Close 10249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10254 NT_STATUS_OK
Close 10254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10259 NT_STATUS_OK
Close 10259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10263 NT_STATUS_OK
Close 10263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10268 NT_STATUS_OK
Close 10268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10273 NT_STATUS_OK
Close 10273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10276 NT_STATUS_OK
Close 10276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10278 NT_STATUS_OK
Close 10278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10288 NT_STATUS_OK
Close 10288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10289 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10290 NT_STATUS_OK
ReadX 10290 0 4096 4096 NT_STATUS_OK
Close 10290 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10291 NT_STATUS_OK
ReadX 10291 0 4096 4096 NT_STATUS_OK
Close 10291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10292 NT_STATUS_OK
ReadX 10292 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10302 NT_STATUS_OK
Close 10302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10304 NT_STATUS_OK
ReadX 10304 0 4096 4096 NT_STATUS_OK
Close 10304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10305 NT_STATUS_OK
ReadX 10305 0 4096 4096 NT_STATUS_OK
Close 10305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10306 NT_STATUS_OK
ReadX 10306 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10292 NT_STATUS_OK
Close 10306 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10335 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10335 0 4096 4096 NT_STATUS_OK
Close 10335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10336 NT_STATUS_OK
ReadX 10336 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10337 NT_STATUS_OK
ReadX 10337 0 4096 4096 NT_STATUS_OK
ReadX 10337 4096 4096 4096 NT_STATUS_OK
ReadX 10337 8192 4096 4096 NT_STATUS_OK
ReadX 10337 12288 4096 4096 NT_STATUS_OK
ReadX 10337 16384 4096 4096 NT_STATUS_OK
ReadX 10337 20480 4096 4096 NT_STATUS_OK
ReadX 10337 24576 4096 4096 NT_STATUS_OK
ReadX 10337 28672 4096 4096 NT_STATUS_OK
ReadX 10337 32768 4096 4096 NT_STATUS_OK
ReadX 10337 36864 4096 4096 NT_STATUS_OK
ReadX 10337 40960 4096 4096 NT_STATUS_OK
ReadX 10337 45056 4096 4096 NT_STATUS_OK
ReadX 10337 49152 4096 4096 NT_STATUS_OK
ReadX 10337 53248 4096 4096 NT_STATUS_OK
ReadX 10337 57344 4096 4096 NT_STATUS_OK
ReadX 10337 61440 4096 4096 NT_STATUS_OK
ReadX 10337 65536 4096 4096 NT_STATUS_OK
ReadX 10337 69632 4096 4096 NT_STATUS_OK
ReadX 10337 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10337 1004 NT_STATUS_OK
WriteX 10337 0 4096 4096 NT_STATUS_OK
Close 10337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10338 NT_STATUS_OK
SET_FILE_INFORMATION 10338 1004 NT_STATUS_OK
Close 10338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10339 NT_STATUS_OK
ReadX 10339 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10340 NT_STATUS_OK
Close 10340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10343 NT_STATUS_OK
WriteX 10343 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10343 258 NT_STATUS_OK
WriteX 10343 0 65536 65536 NT_STATUS_OK
WriteX 10343 65536 19979 19979 NT_STATUS_OK
Close 10343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10344 NT_STATUS_OK
ReadX 10344 0 4096 4096 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
Flush 10344 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
Flush 10344 NT_STATUS_OK
QUERY_FILE_INFORMATION 10344 1004 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
Flush 10344 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
Flush 10344 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
Flush 10344 NT_STATUS_OK
SET_FILE_INFORMATION 10344 1004 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
Flush 10344 NT_STATUS_OK
Close 10344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10345 NT_STATUS_OK
ReadX 10345 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10346 NT_STATUS_OK
ReadX 10346 0 4096 4096 NT_STATUS_OK
Close 10345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10347 NT_STATUS_OK
ReadX 10347 0 4096 4096 NT_STATUS_OK
Close 10347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10348 NT_STATUS_OK
ReadX 10348 0 4096 4096 NT_STATUS_OK
Close 10348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10349 NT_STATUS_OK
ReadX 10349 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10349 1004 NT_STATUS_OK
WriteX 10349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10350 NT_STATUS_OK
Close 10350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10346 NT_STATUS_OK
Close 10349 NT_STATUS_OK
Close 10339 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10352 NT_STATUS_OK
Close 10352 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10355 NT_STATUS_OK
WriteX 10355 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10355 258 NT_STATUS_OK
WriteX 10355 0 65536 65536 NT_STATUS_OK
WriteX 10355 65536 17654 17654 NT_STATUS_OK
Close 10355 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10356 NT_STATUS_OK
ReadX 10356 0 4096 4096 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
QUERY_FILE_INFORMATION 10356 1004 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
SET_FILE_INFORMATION 10356 1004 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
Close 10356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10357 NT_STATUS_OK
SET_FILE_INFORMATION 10357 1004 NT_STATUS_OK
Close 10357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10358 NT_STATUS_OK
ReadX 10358 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10359 NT_STATUS_OK
Close 10359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10361 NT_STATUS_OK
ReadX 10361 0 4096 4096 NT_STATUS_OK
ReadX 10361 4096 4096 4096 NT_STATUS_OK
ReadX 10361 8192 4096 4096 NT_STATUS_OK
ReadX 10361 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10361 16384 4096 4096 NT_STATUS_OK
ReadX 10361 20480 4096 4096 NT_STATUS_OK
ReadX 10361 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10362 NT_STATUS_OK
ReadX 10362 0 4096 4096 NT_STATUS_OK
Close 10362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10363 NT_STATUS_OK
ReadX 10363 0 4096 4096 NT_STATUS_OK
Close 10363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10364 NT_STATUS_OK
ReadX 10364 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10364 1004 NT_STATUS_OK
WriteX 10364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10365 NT_STATUS_OK
Close 10365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10364 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10367 NT_STATUS_OK
Close 10367 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10370 NT_STATUS_OK
WriteX 10370 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10370 258 NT_STATUS_OK
WriteX 10370 0 65536 65536 NT_STATUS_OK
WriteX 10370 65536 19490 19490 NT_STATUS_OK
Close 10370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10371 NT_STATUS_OK
ReadX 10371 0 4096 4096 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
Flush 10371 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
Flush 10371 NT_STATUS_OK
QUERY_FILE_INFORMATION 10371 1004 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
Flush 10371 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
Flush 10371 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
Flush 10371 NT_STATUS_OK
SET_FILE_INFORMATION 10371 1004 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
Flush 10371 NT_STATUS_OK
Close 10371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10372 NT_STATUS_OK
SET_FILE_INFORMATION 10372 1004 NT_STATUS_OK
Close 10372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10373 NT_STATUS_OK
ReadX 10373 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10374 NT_STATUS_OK
Close 10374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10376 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10376 0 4096 4096 NT_STATUS_OK
Close 10376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10377 NT_STATUS_OK
ReadX 10377 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10378 NT_STATUS_OK
ReadX 10378 0 4096 4096 NT_STATUS_OK
ReadX 10378 4096 4096 4096 NT_STATUS_OK
ReadX 10378 8192 4096 4096 NT_STATUS_OK
ReadX 10378 12288 4096 4096 NT_STATUS_OK
ReadX 10378 16384 4096 4096 NT_STATUS_OK
ReadX 10378 20480 4096 4096 NT_STATUS_OK
ReadX 10378 24576 4096 4096 NT_STATUS_OK
ReadX 10378 28672 4096 4096 NT_STATUS_OK
ReadX 10378 32768 4096 4096 NT_STATUS_OK
ReadX 10378 36864 4096 4096 NT_STATUS_OK
ReadX 10378 40960 4096 4096 NT_STATUS_OK
ReadX 10378 45056 4096 4096 NT_STATUS_OK
ReadX 10378 49152 4096 4096 NT_STATUS_OK
ReadX 10378 53248 4096 4096 NT_STATUS_OK
ReadX 10378 57344 4096 4096 NT_STATUS_OK
ReadX 10378 61440 4096 4096 NT_STATUS_OK
ReadX 10378 65536 4096 4096 NT_STATUS_OK
ReadX 10378 69632 4096 4096 NT_STATUS_OK
ReadX 10378 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10378 1004 NT_STATUS_OK
WriteX 10378 0 4096 4096 NT_STATUS_OK
Close 10378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10379 NT_STATUS_OK
SET_FILE_INFORMATION 10379 1004 NT_STATUS_OK
Close 10379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10380 NT_STATUS_OK
ReadX 10380 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10381 NT_STATUS_OK
Close 10381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10373 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10384 NT_STATUS_OK
WriteX 10384 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10384 258 NT_STATUS_OK
WriteX 10384 0 65536 65536 NT_STATUS_OK
WriteX 10384 65536 8866 8866 NT_STATUS_OK
Close 10384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10385 NT_STATUS_OK
ReadX 10385 0 4096 4096 NT_STATUS_OK
WriteX 10385 0 4096 4096 NT_STATUS_OK
Flush 10385 NT_STATUS_OK
SET_FILE_INFORMATION 10385 1004 NT_STATUS_OK
WriteX 10385 0 4096 4096 NT_STATUS_OK
Flush 10385 NT_STATUS_OK
Close 10385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10386 NT_STATUS_OK
ReadX 10386 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10387 NT_STATUS_OK
ReadX 10387 0 4096 4096 NT_STATUS_OK
Close 10387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10388 NT_STATUS_OK
ReadX 10388 0 4096 4096 NT_STATUS_OK
Close 10388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10389 NT_STATUS_OK
ReadX 10389 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10389 1004 NT_STATUS_OK
WriteX 10389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10390 NT_STATUS_OK
Close 10390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10389 NT_STATUS_OK
Close 10380 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10392 NT_STATUS_OK
Close 10392 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10395 NT_STATUS_OK
WriteX 10395 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10395 258 NT_STATUS_OK
WriteX 10395 0 65536 65536 NT_STATUS_OK
WriteX 10395 65536 9298 9298 NT_STATUS_OK
Close 10395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10396 NT_STATUS_OK
ReadX 10396 0 4096 4096 NT_STATUS_OK
WriteX 10396 0 4096 4096 NT_STATUS_OK
Flush 10396 NT_STATUS_OK
SET_FILE_INFORMATION 10396 1004 NT_STATUS_OK
WriteX 10396 0 4096 4096 NT_STATUS_OK
Flush 10396 NT_STATUS_OK
Close 10396 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10397 NT_STATUS_OK
SET_FILE_INFORMATION 10397 1004 NT_STATUS_OK
Close 10397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10398 NT_STATUS_OK
ReadX 10398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10399 NT_STATUS_OK
Close 10399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10402 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10402 0 4096 4096 NT_STATUS_OK
Close 10402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10403 NT_STATUS_OK
ReadX 10403 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10403 4096 4096 4096 NT_STATUS_OK
ReadX 10403 8192 4096 4096 NT_STATUS_OK
ReadX 10403 12288 4096 4096 NT_STATUS_OK
ReadX 10403 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10404 NT_STATUS_OK
ReadX 10404 0 4096 4096 NT_STATUS_OK
Close 10404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10405 NT_STATUS_OK
ReadX 10405 0 4096 4096 NT_STATUS_OK
Close 10405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10406 NT_STATUS_OK
ReadX 10406 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10406 1004 NT_STATUS_OK
WriteX 10406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10407 NT_STATUS_OK
Close 10407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10403 NT_STATUS_OK
Close 10406 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10409 NT_STATUS_OK
Close 10409 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10412 NT_STATUS_OK
WriteX 10412 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10412 258 NT_STATUS_OK
WriteX 10412 0 65536 65536 NT_STATUS_OK
WriteX 10412 65536 11540 11540 NT_STATUS_OK
Close 10412 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10413 NT_STATUS_OK
ReadX 10413 0 4096 4096 NT_STATUS_OK
WriteX 10413 0 4096 4096 NT_STATUS_OK
Flush 10413 NT_STATUS_OK
SET_FILE_INFORMATION 10413 1004 NT_STATUS_OK
WriteX 10413 0 4096 4096 NT_STATUS_OK
Flush 10413 NT_STATUS_OK
Close 10413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10414 NT_STATUS_OK
SET_FILE_INFORMATION 10414 1004 NT_STATUS_OK
Close 10414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10415 NT_STATUS_OK
ReadX 10415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10416 NT_STATUS_OK
Close 10416 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10418 NT_STATUS_OK
ReadX 10418 61440 4096 4096 NT_STATUS_OK
ReadX 10418 126976 4096 4096 NT_STATUS_OK
WriteX 10418 0 65536 65536 NT_STATUS_OK
WriteX 10418 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10419 NT_STATUS_OK
ReadX 10419 61440 4096 4096 NT_STATUS_OK
ReadX 10419 126976 4096 4096 NT_STATUS_OK
ReadX 10419 192512 4096 4096 NT_STATUS_OK
ReadX 10419 258048 4096 4096 NT_STATUS_OK
WriteX 10419 0 65536 65536 NT_STATUS_OK
WriteX 10419 65536 65536 65536 NT_STATUS_OK
WriteX 10419 131072 65536 65536 NT_STATUS_OK
WriteX 10419 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10420 NT_STATUS_OK
ReadX 10420 61440 4096 4096 NT_STATUS_OK
ReadX 10420 126976 4096 4096 NT_STATUS_OK
ReadX 10420 192512 4096 4096 NT_STATUS_OK
ReadX 10420 258048 4096 4096 NT_STATUS_OK
ReadX 10420 323584 4096 4096 NT_STATUS_OK
ReadX 10420 389120 4096 4096 NT_STATUS_OK
ReadX 10420 454656 4096 4096 NT_STATUS_OK
ReadX 10420 520192 4096 4096 NT_STATUS_OK
WriteX 10420 0 65536 65536 NT_STATUS_OK
WriteX 10420 65536 65536 65536 NT_STATUS_OK
WriteX 10420 131072 65536 65536 NT_STATUS_OK
WriteX 10420 196608 65536 65536 NT_STATUS_OK
WriteX 10420 262144 65536 65536 NT_STATUS_OK
WriteX 10420 327680 65536 65536 NT_STATUS_OK
WriteX 10420 393216 65536 65536 NT_STATUS_OK
WriteX 10420 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10421 NT_STATUS_OK
ReadX 10421 0 4096 4096 NT_STATUS_OK
ReadX 10421 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10422 NT_STATUS_OK
WriteX 10422 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10422 258 NT_STATUS_OK
WriteX 10422 0 53 53 NT_STATUS_OK
Close 10422 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10423 NT_STATUS_OK
Close 10423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10415 NT_STATUS_OK
Close 10361 NT_STATUS_OK
Close 10418 NT_STATUS_OK
Close 10419 NT_STATUS_OK
Close 10420 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10421 8192 4096 4096 NT_STATUS_OK
ReadX 10421 12288 4096 4096 NT_STATUS_OK
WriteX 10425 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10425 258 NT_STATUS_OK
ReadX 10421 16384 4096 4096 NT_STATUS_OK
ReadX 10421 20480 4096 4096 NT_STATUS_OK
WriteX 10425 0 15360 15360 NT_STATUS_OK
Close 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10426 NT_STATUS_OK
ReadX 10426 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10426 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10426 1004 NT_STATUS_OK
WriteX 10426 0 4096 4096 NT_STATUS_OK
Close 10426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10427 NT_STATUS_OK
Close 10427 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10429 NT_STATUS_OK
ReadX 10429 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10430 NT_STATUS_OK
Close 10430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10429 4096 4096 4096 NT_STATUS_OK
ReadX 10429 8192 4096 4096 NT_STATUS_OK
ReadX 10429 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10432 NT_STATUS_OK
ReadX 10432 0 4096 4096 NT_STATUS_OK
ReadX 10432 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10433 NT_STATUS_OK
ReadX 10433 0 4096 4096 NT_STATUS_OK
ReadX 10433 4096 4096 4096 NT_STATUS_OK
ReadX 10433 8192 4096 4096 NT_STATUS_OK
Close 10432 NT_STATUS_OK
Close 10433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10434 NT_STATUS_OK
WriteX 10434 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10434 258 NT_STATUS_OK
WriteX 10434 0 15360 15360 NT_STATUS_OK
Close 10434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10435 NT_STATUS_OK
ReadX 10435 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10435 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10435 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10429 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10436 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10438 NT_STATUS_OK
ReadX 10438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10439 NT_STATUS_OK
SET_FILE_INFORMATION 10439 1004 NT_STATUS_OK
Close 10439 NT_STATUS_OK
WriteX 10435 0 4096 4096 NT_STATUS_OK
Close 10435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10440 NT_STATUS_OK
Close 10440 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10442 NT_STATUS_OK
ReadX 10442 0 4096 4096 NT_STATUS_OK
ReadX 10442 4096 4096 4096 NT_STATUS_OK
ReadX 10442 8192 4096 4096 NT_STATUS_OK
ReadX 10442 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10442 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10442 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10443 NT_STATUS_OK
ReadX 10443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10444 NT_STATUS_OK
WriteX 10444 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10444 258 NT_STATUS_OK
WriteX 10444 0 53 53 NT_STATUS_OK
Close 10444 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10445 NT_STATUS_OK
Close 10445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10443 4096 4096 4096 NT_STATUS_OK
ReadX 10443 8192 4096 4096 NT_STATUS_OK
ReadX 10443 12288 4096 4096 NT_STATUS_OK
WriteX 10447 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10447 258 NT_STATUS_OK
WriteX 10447 0 12006 12006 NT_STATUS_OK
Close 10447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10448 NT_STATUS_OK
ReadX 10448 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10448 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10448 1004 NT_STATUS_OK
WriteX 10448 0 4096 4096 NT_STATUS_OK
Close 10448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10449 NT_STATUS_OK
Close 10449 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10451 NT_STATUS_OK
ReadX 10451 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10452 NT_STATUS_OK
Close 10452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10451 4096 4096 4096 NT_STATUS_OK
ReadX 10451 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10454 NT_STATUS_OK
WriteX 10454 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10454 258 NT_STATUS_OK
WriteX 10454 0 11991 11991 NT_STATUS_OK
Close 10454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10455 NT_STATUS_OK
ReadX 10455 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10455 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10455 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10443 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10456 NT_STATUS_OK
Close 10456 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10458 NT_STATUS_OK
ReadX 10458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10459 NT_STATUS_OK
SET_FILE_INFORMATION 10459 1004 NT_STATUS_OK
Close 10459 NT_STATUS_OK
WriteX 10455 0 4096 4096 NT_STATUS_OK
Close 10455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10460 NT_STATUS_OK
Close 10460 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10462 NT_STATUS_OK
ReadX 10462 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10463 NT_STATUS_OK
Close 10463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10462 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10462 1004 NT_STATUS_OK
ReadX 10462 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10462 1004 NT_STATUS_OK
WriteX 10462 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10462 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10462 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10462 1004 NT_STATUS_OK
Close 10438 NT_STATUS_OK
WriteX 10442 0 19054 19054 NT_STATUS_OK
WriteX 10462 0 12288 12288 NT_STATUS_OK
Close 10458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10465 NT_STATUS_OK
Close 10465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10442 NT_STATUS_OK
Close 10462 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10467 NT_STATUS_OK
Close 10467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10469 NT_STATUS_OK
ReadX 10469 0 61440 61440 NT_STATUS_OK
ReadX 10469 61440 4096 4096 NT_STATUS_OK
ReadX 10469 65536 61440 61440 NT_STATUS_OK
ReadX 10469 126976 4096 4096 NT_STATUS_OK
ReadX 10469 131072 61440 61440 NT_STATUS_OK
ReadX 10469 192512 4096 4096 NT_STATUS_OK
ReadX 10469 196608 61440 61440 NT_STATUS_OK
ReadX 10469 258048 4096 4096 NT_STATUS_OK
ReadX 10469 262144 61440 61440 NT_STATUS_OK
ReadX 10469 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10470 NT_STATUS_OK
ReadX 10470 0 61440 61440 NT_STATUS_OK
ReadX 10470 61440 4096 4096 NT_STATUS_OK
ReadX 10470 65536 61440 61440 NT_STATUS_OK
ReadX 10470 126976 4096 4096 NT_STATUS_OK
ReadX 10470 131072 61440 61440 NT_STATUS_OK
ReadX 10470 192512 4096 4096 NT_STATUS_OK
ReadX 10470 196608 61440 61440 NT_STATUS_OK
ReadX 10470 258048 4096 4096 NT_STATUS_OK
ReadX 10470 262144 61440 61440 NT_STATUS_OK
ReadX 10470 323584 4096 4096 NT_STATUS_OK
ReadX 10470 327680 61440 61440 NT_STATUS_OK
ReadX 10470 389120 4096 4096 NT_STATUS_OK
ReadX 10470 393216 61440 61440 NT_STATUS_OK
ReadX 10470 454656 4096 4096 NT_STATUS_OK
ReadX 10470 458752 61440 61440 NT_STATUS_OK
ReadX 10470 520192 4096 4096 NT_STATUS_OK
ReadX 10470 524288 61440 61440 NT_STATUS_OK
ReadX 10470 585728 4096 4096 NT_STATUS_OK
ReadX 10470 589824 61440 61440 NT_STATUS_OK
ReadX 10470 651264 4096 4096 NT_STATUS_OK
ReadX 10470 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10471 NT_STATUS_OK
ReadX 10471 0 61440 61440 NT_STATUS_OK
ReadX 10471 61440 4096 4096 NT_STATUS_OK
ReadX 10471 65536 61440 61440 NT_STATUS_OK
ReadX 10471 126976 4096 4096 NT_STATUS_OK
ReadX 10471 131072 61440 61440 NT_STATUS_OK
ReadX 10471 192512 4096 4096 NT_STATUS_OK
ReadX 10471 196608 61440 61440 NT_STATUS_OK
ReadX 10471 258048 4096 4096 NT_STATUS_OK
ReadX 10471 262144 61440 61440 NT_STATUS_OK
ReadX 10471 323584 4096 4096 NT_STATUS_OK
ReadX 10471 327680 61440 61440 NT_STATUS_OK
ReadX 10471 389120 4096 4096 NT_STATUS_OK
ReadX 10471 393216 61440 61440 NT_STATUS_OK
ReadX 10471 454656 4096 4096 NT_STATUS_OK
ReadX 10471 458752 61440 61440 NT_STATUS_OK
ReadX 10471 520192 4096 4096 NT_STATUS_OK
ReadX 10471 524288 61440 61440 NT_STATUS_OK
ReadX 10471 585728 4096 4096 NT_STATUS_OK
ReadX 10471 589824 61440 61440 NT_STATUS_OK
ReadX 10471 651264 4096 4096 NT_STATUS_OK
ReadX 10471 655360 61440 61440 NT_STATUS_OK
ReadX 10471 716800 4096 4096 NT_STATUS_OK
ReadX 10471 720896 61440 61440 NT_STATUS_OK
ReadX 10471 782336 4096 4096 NT_STATUS_OK
ReadX 10471 786432 61440 61440 NT_STATUS_OK
ReadX 10471 847872 4096 4096 NT_STATUS_OK
ReadX 10471 851968 61440 61440 NT_STATUS_OK
ReadX 10471 913408 4096 4096 NT_STATUS_OK
ReadX 10471 917504 61440 61440 NT_STATUS_OK
ReadX 10471 978944 4096 4096 NT_STATUS_OK
ReadX 10471 983040 61440 61440 NT_STATUS_OK
ReadX 10471 1044480 4096 4096 NT_STATUS_OK
ReadX 10471 1048576 61440 61440 NT_STATUS_OK
ReadX 10471 1110016 4096 4096 NT_STATUS_OK
ReadX 10471 1114112 61440 61440 NT_STATUS_OK
ReadX 10471 1175552 4096 4096 NT_STATUS_OK
ReadX 10471 1179648 61440 61440 NT_STATUS_OK
ReadX 10471 1241088 4096 4096 NT_STATUS_OK
ReadX 10471 1245184 61440 61440 NT_STATUS_OK
ReadX 10471 1306624 4096 4096 NT_STATUS_OK
ReadX 10471 1310720 61440 61440 NT_STATUS_OK
ReadX 10471 1372160 4096 4096 NT_STATUS_OK
ReadX 10471 1376256 61440 61440 NT_STATUS_OK
ReadX 10471 1437696 4096 4096 NT_STATUS_OK
ReadX 10471 1441792 61440 61440 NT_STATUS_OK
ReadX 10471 1503232 4096 4096 NT_STATUS_OK
ReadX 10471 1507328 61440 61440 NT_STATUS_OK
ReadX 10471 1568768 4096 4096 NT_STATUS_OK
ReadX 10471 1572864 61440 61440 NT_STATUS_OK
ReadX 10471 1634304 4096 4096 NT_STATUS_OK
ReadX 10471 1638400 61440 61440 NT_STATUS_OK
ReadX 10471 1699840 4096 4096 NT_STATUS_OK
ReadX 10471 1703936 61440 61440 NT_STATUS_OK
ReadX 10471 1765376 4096 4096 NT_STATUS_OK
ReadX 10471 1769472 61440 61440 NT_STATUS_OK
ReadX 10471 1830912 4096 4096 NT_STATUS_OK
ReadX 10471 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10472 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10473 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10474 NT_STATUS_OK
ReadX 10474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10475 NT_STATUS_OK
ReadX 10475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10476 NT_STATUS_OK
ReadX 10476 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10477 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10478 NT_STATUS_OK
QUERY_FILE_INFORMATION 10478 1004 NT_STATUS_OK
WriteX 10478 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10478 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10479 NT_STATUS_OK
Close 10479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10480 NT_STATUS_OK
WriteX 10480 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10480 258 NT_STATUS_OK
WriteX 10480 0 491 491 NT_STATUS_OK
Close 10480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10478 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10483 NT_STATUS_OK
Close 10483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10484 NT_STATUS_OK
WriteX 10484 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10484 258 NT_STATUS_OK
WriteX 10484 0 543 543 NT_STATUS_OK
Close 10484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10485 NT_STATUS_OK
ReadX 10485 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10469 NT_STATUS_OK
Close 10470 NT_STATUS_OK
Close 10471 NT_STATUS_OK
Close 10485 NT_STATUS_OK
Close 10473 NT_STATUS_OK
Close 10474 NT_STATUS_OK
Close 10475 NT_STATUS_OK
Close 10476 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10488 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10489 NT_STATUS_OK
ReadX 10489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10490 NT_STATUS_OK
ReadX 10490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10491 NT_STATUS_OK
ReadX 10491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10492 NT_STATUS_OK
ReadX 10492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10493 NT_STATUS_OK
ReadX 10493 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10497 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10498 NT_STATUS_OK
QUERY_FILE_INFORMATION 10498 1004 NT_STATUS_OK
WriteX 10498 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10498 258 NT_STATUS_OK
WriteX 10498 0 2048 2048 NT_STATUS_OK
Close 10498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10499 NT_STATUS_OK
ReadX 10499 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10499 0 4096 4096 NT_STATUS_OK
Flush 10499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10499 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10503 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10504 NT_STATUS_OK
WriteX 10504 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10504 258 NT_STATUS_OK
WriteX 10504 0 2048 2048 NT_STATUS_OK
Close 10504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10505 NT_STATUS_OK
ReadX 10505 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10509 NT_STATUS_OK
Close 10509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10510 NT_STATUS_OK
WriteX 10510 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10510 258 NT_STATUS_OK
WriteX 10510 0 2048 2048 NT_STATUS_OK
Close 10510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10511 NT_STATUS_OK
ReadX 10511 0 2048 2048 NT_STATUS_OK
ReadX 10489 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10493 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10505 0 4096 4096 NT_STATUS_OK
WriteX 10489 0 8192 8192 NT_STATUS_OK
WriteX 10490 0 4096 4096 NT_STATUS_OK
WriteX 10491 0 4096 4096 NT_STATUS_OK
ReadX 10505 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10514 NT_STATUS_OK
ReadX 10514 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10515 NT_STATUS_OK
QUERY_FILE_INFORMATION 10515 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10514 NT_STATUS_OK
Close 10490 NT_STATUS_OK
Close 10491 NT_STATUS_OK
Close 10492 NT_STATUS_OK
Close 10505 NT_STATUS_OK
Close 10489 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10517 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10518 NT_STATUS_OK
ReadX 10518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10519 NT_STATUS_OK
ReadX 10519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10520 NT_STATUS_OK
ReadX 10520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10521 NT_STATUS_OK
ReadX 10521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10522 NT_STATUS_OK
ReadX 10522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10523 NT_STATUS_OK
ReadX 10523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10524 NT_STATUS_OK
ReadX 10524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10525 NT_STATUS_OK
ReadX 10525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10526 NT_STATUS_OK
ReadX 10526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10527 NT_STATUS_OK
ReadX 10527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10528 NT_STATUS_OK
ReadX 10528 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10529 NT_STATUS_OK
ReadX 10529 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10530 NT_STATUS_OK
ReadX 10530 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10534 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10534 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10535 NT_STATUS_OK
QUERY_FILE_INFORMATION 10535 1004 NT_STATUS_OK
WriteX 10535 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10535 258 NT_STATUS_OK
WriteX 10535 0 2048 2048 NT_STATUS_OK
Close 10535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10536 NT_STATUS_OK
ReadX 10536 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10537 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10538 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10538 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10542 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10543 NT_STATUS_OK
QUERY_FILE_INFORMATION 10543 1004 NT_STATUS_OK
WriteX 10543 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10543 258 NT_STATUS_OK
WriteX 10543 0 2048 2048 NT_STATUS_OK
Close 10543 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10544 NT_STATUS_OK
ReadX 10544 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10536 0 4096 4096 NT_STATUS_OK
Flush 10536 NT_STATUS_OK
WriteX 10544 0 4096 4096 NT_STATUS_OK
Flush 10544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10536 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10544 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10538 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10545 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10545 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10546 NT_STATUS_OK
WriteX 10546 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10546 258 NT_STATUS_OK
WriteX 10546 0 4096 4096 NT_STATUS_OK
Close 10546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10547 NT_STATUS_OK
ReadX 10547 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10548 NT_STATUS_OK
Close 10548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10549 NT_STATUS_OK
WriteX 10549 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10549 258 NT_STATUS_OK
WriteX 10549 0 4096 4096 NT_STATUS_OK
Close 10549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10550 NT_STATUS_OK
ReadX 10550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10550 0 4096 4096 NT_STATUS_OK
Close 10547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10530 NT_STATUS_OK
Close 10524 NT_STATUS_OK
Close 10538 NT_STATUS_OK
Close 10527 NT_STATUS_OK
Close 10528 NT_STATUS_OK
Close 10529 NT_STATUS_OK
Close 10525 NT_STATUS_OK
Close 10518 NT_STATUS_OK
Close 10519 NT_STATUS_OK
Close 10522 NT_STATUS_OK
Close 10523 NT_STATUS_OK
Close 10520 NT_STATUS_OK
Close 10521 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10553 NT_STATUS_OK
Close 10553 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10555 NT_STATUS_OK
ReadX 10555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10556 NT_STATUS_OK
Close 10556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10557 NT_STATUS_OK
WriteX 10557 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10557 258 NT_STATUS_OK
WriteX 10557 0 2048 2048 NT_STATUS_OK
Close 10557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10558 NT_STATUS_OK
ReadX 10558 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10559 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10560 NT_STATUS_OK
ReadX 10560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10561 NT_STATUS_OK
ReadX 10561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10562 NT_STATUS_OK
ReadX 10562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10563 NT_STATUS_OK
ReadX 10563 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10564 NT_STATUS_OK
ReadX 10564 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10565 NT_STATUS_OK
ReadX 10565 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10566 NT_STATUS_OK
ReadX 10566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10567 NT_STATUS_OK
ReadX 10567 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10568 NT_STATUS_OK
ReadX 10568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10569 NT_STATUS_OK
ReadX 10569 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10570 NT_STATUS_OK
ReadX 10570 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10571 NT_STATUS_OK
ReadX 10571 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10572 NT_STATUS_OK
QUERY_FILE_INFORMATION 10572 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10555 NT_STATUS_OK
Close 10558 NT_STATUS_OK
Close 10570 NT_STATUS_OK
Close 10565 NT_STATUS_OK
Close 10566 NT_STATUS_OK
Close 10567 NT_STATUS_OK
Close 10568 NT_STATUS_OK
Close 10569 NT_STATUS_OK
Close 10571 NT_STATUS_OK
Close 10559 NT_STATUS_OK
Close 10560 NT_STATUS_OK
Close 10563 NT_STATUS_OK
Close 10564 NT_STATUS_OK
Close 10561 NT_STATUS_OK
Close 10562 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10574 NT_STATUS_OK
QUERY_FILE_INFORMATION 10574 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10576 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10576 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10577 NT_STATUS_OK
ReadX 10577 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10578 NT_STATUS_OK
ReadX 10578 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10579 NT_STATUS_OK
ReadX 10579 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10580 NT_STATUS_OK
ReadX 10580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10581 NT_STATUS_OK
ReadX 10581 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10582 NT_STATUS_OK
ReadX 10582 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10583 NT_STATUS_OK
ReadX 10583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10584 NT_STATUS_OK
ReadX 10584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10585 NT_STATUS_OK
ReadX 10585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10586 NT_STATUS_OK
ReadX 10586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10587 NT_STATUS_OK
ReadX 10587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10588 NT_STATUS_OK
ReadX 10588 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10589 NT_STATUS_OK
ReadX 10589 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10593 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10594 NT_STATUS_OK
QUERY_FILE_INFORMATION 10594 1004 NT_STATUS_OK
WriteX 10594 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10594 258 NT_STATUS_OK
WriteX 10594 0 2048 2048 NT_STATUS_OK
Close 10594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10595 NT_STATUS_OK
ReadX 10595 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10596 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10597 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10597 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10598 NT_STATUS_OK
ReadX 10598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10599 NT_STATUS_OK
ReadX 10599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10600 NT_STATUS_OK
ReadX 10600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10601 NT_STATUS_OK
ReadX 10601 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10605 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10606 NT_STATUS_OK
QUERY_FILE_INFORMATION 10606 1004 NT_STATUS_OK
WriteX 10606 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10606 258 NT_STATUS_OK
WriteX 10606 0 2048 2048 NT_STATUS_OK
Close 10606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10607 NT_STATUS_OK
ReadX 10607 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10608 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10609 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10609 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10613 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10614 NT_STATUS_OK
QUERY_FILE_INFORMATION 10614 1004 NT_STATUS_OK
WriteX 10614 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10614 258 NT_STATUS_OK
WriteX 10614 0 2048 2048 NT_STATUS_OK
Close 10614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10615 NT_STATUS_OK
ReadX 10615 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10595 0 4096 4096 NT_STATUS_OK
Flush 10595 NT_STATUS_OK
WriteX 10607 0 4096 4096 NT_STATUS_OK
Flush 10607 NT_STATUS_OK
WriteX 10615 0 4096 4096 NT_STATUS_OK
Flush 10615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10595 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10607 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10615 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10597 4096 16384 16384 NT_STATUS_OK
ReadX 10577 4096 16384 16384 NT_STATUS_OK
ReadX 10609 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10616 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10617 NT_STATUS_OK
ReadX 10617 0 2048 2048 NT_STATUS_OK
WriteX 10617 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10618 NT_STATUS_OK
QUERY_FILE_INFORMATION 10618 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10617 NT_STATUS_OK
Close 10601 NT_STATUS_OK
Close 10589 NT_STATUS_OK
Close 10581 NT_STATUS_OK
Close 10597 NT_STATUS_OK
Close 10598 NT_STATUS_OK
Close 10599 NT_STATUS_OK
Close 10600 NT_STATUS_OK
Close 10588 NT_STATUS_OK
Close 10609 NT_STATUS_OK
Close 10583 NT_STATUS_OK
Close 10586 NT_STATUS_OK
Close 10587 NT_STATUS_OK
Close 10584 NT_STATUS_OK
Close 10585 NT_STATUS_OK
Close 10577 NT_STATUS_OK
Close 10578 NT_STATUS_OK
Close 10579 NT_STATUS_OK
Close 10580 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10620 NT_STATUS_OK
QUERY_FILE_INFORMATION 10620 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10622 NT_STATUS_OK
QUERY_FILE_INFORMATION 10622 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10624 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10625 NT_STATUS_OK
ReadX 10625 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10626 NT_STATUS_OK
ReadX 10626 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10627 NT_STATUS_OK
ReadX 10627 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10628 NT_STATUS_OK
ReadX 10628 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10629 NT_STATUS_OK
ReadX 10629 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10625 4096 16384 16384 NT_STATUS_OK
WriteX 10625 0 4096 4096 NT_STATUS_OK
WriteX 10626 0 4096 4096 NT_STATUS_OK
WriteX 10627 0 4096 4096 NT_STATUS_OK
WriteX 10628 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10630 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10631 NT_STATUS_OK
ReadX 10631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10632 NT_STATUS_OK
ReadX 10632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10633 NT_STATUS_OK
ReadX 10633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10634 NT_STATUS_OK
ReadX 10634 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10635 NT_STATUS_OK
ReadX 10635 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10636 NT_STATUS_OK
ReadX 10636 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10637 NT_STATUS_OK
ReadX 10637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10638 NT_STATUS_OK
ReadX 10638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10639 NT_STATUS_OK
ReadX 10639 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10640 NT_STATUS_OK
ReadX 10640 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10641 NT_STATUS_OK
ReadX 10641 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10642 NT_STATUS_OK
ReadX 10642 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10643 NT_STATUS_OK
ReadX 10643 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10644 NT_STATUS_OK
ReadX 10644 0 8192 8192 NT_STATUS_OK
ReadX 10631 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10645 0 4096 4096 NT_STATUS_OK
ReadX 10645 4096 4096 4096 NT_STATUS_OK
ReadX 10645 8192 4096 4096 NT_STATUS_OK
WriteX 10631 0 4096 4096 NT_STATUS_OK
WriteX 10632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10646 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10646 0 4096 4096 NT_STATUS_OK
ReadX 10646 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10625 0 4096 4096 NT_STATUS_OK
WriteX 10626 0 4096 4096 NT_STATUS_OK
WriteX 10627 0 4096 4096 NT_STATUS_OK
WriteX 10628 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10650 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10651 NT_STATUS_OK
QUERY_FILE_INFORMATION 10651 1004 NT_STATUS_OK
WriteX 10651 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10651 258 NT_STATUS_OK
WriteX 10651 0 2048 2048 NT_STATUS_OK
Close 10651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10652 NT_STATUS_OK
ReadX 10652 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10652 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10652 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10653 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10654 NT_STATUS_OK
ReadX 10654 0 4096 4096 NT_STATUS_OK
ReadX 10654 4096 4096 4096 NT_STATUS_OK
WriteX 10654 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10652 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10655 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10656 NT_STATUS_OK
ReadX 10656 0 4096 4096 NT_STATUS_OK
ReadX 10656 4096 4096 4096 NT_STATUS_OK
WriteX 10656 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10657 NT_STATUS_OK
QUERY_FILE_INFORMATION 10657 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10644 NT_STATUS_OK
Close 10629 NT_STATUS_OK
Close 10625 NT_STATUS_OK
Close 10626 NT_STATUS_OK
Close 10627 NT_STATUS_OK
Close 10628 NT_STATUS_OK
Close 10637 NT_STATUS_OK
Close 10642 NT_STATUS_OK
Close 10638 NT_STATUS_OK
Close 10639 NT_STATUS_OK
Close 10640 NT_STATUS_OK
Close 10641 NT_STATUS_OK
Close 10643 NT_STATUS_OK
Close 10631 NT_STATUS_OK
Close 10632 NT_STATUS_OK
Close 10635 NT_STATUS_OK
Close 10636 NT_STATUS_OK
Close 10633 NT_STATUS_OK
Close 10634 NT_STATUS_OK
Close 10656 NT_STATUS_OK
Close 10645 NT_STATUS_OK
Close 10646 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10659 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10659 0 4096 4096 NT_STATUS_OK
ReadX 10659 4096 4096 4096 NT_STATUS_OK
ReadX 10659 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10660 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10661 NT_STATUS_OK
ReadX 10661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10662 NT_STATUS_OK
ReadX 10662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10663 NT_STATUS_OK
ReadX 10663 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10664 NT_STATUS_OK
ReadX 10664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10665 NT_STATUS_OK
ReadX 10665 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10666 NT_STATUS_OK
ReadX 10666 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10667 NT_STATUS_OK
ReadX 10667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10668 NT_STATUS_OK
ReadX 10668 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10669 NT_STATUS_OK
ReadX 10669 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10670 NT_STATUS_OK
ReadX 10670 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10671 NT_STATUS_OK
ReadX 10671 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10672 NT_STATUS_OK
ReadX 10672 0 4096 4096 NT_STATUS_OK
ReadX 10660 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10676 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10677 NT_STATUS_OK
QUERY_FILE_INFORMATION 10677 1004 NT_STATUS_OK
WriteX 10677 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10677 258 NT_STATUS_OK
WriteX 10677 0 2048 2048 NT_STATUS_OK
Close 10677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10678 NT_STATUS_OK
ReadX 10678 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10678 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10682 NT_STATUS_OK
Close 10682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10683 NT_STATUS_OK
QUERY_FILE_INFORMATION 10683 1004 NT_STATUS_OK
WriteX 10683 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10683 258 NT_STATUS_OK
WriteX 10683 0 2048 2048 NT_STATUS_OK
Close 10683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10684 NT_STATUS_OK
ReadX 10684 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10684 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10667 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10678 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10685 NT_STATUS_OK
QUERY_FILE_INFORMATION 10685 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10671 NT_STATUS_OK
Close 10666 NT_STATUS_OK
Close 10672 NT_STATUS_OK
Close 10660 NT_STATUS_OK
Close 10661 NT_STATUS_OK
Close 10664 NT_STATUS_OK
Close 10665 NT_STATUS_OK
Close 10662 NT_STATUS_OK
Close 10663 NT_STATUS_OK
Close 10667 NT_STATUS_OK
Close 10668 NT_STATUS_OK
Close 10669 NT_STATUS_OK
Close 10670 NT_STATUS_OK
Close 10659 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10687 NT_STATUS_OK
QUERY_FILE_INFORMATION 10687 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10689 NT_STATUS_OK
ReadX 10689 61440 4096 4096 NT_STATUS_OK
ReadX 10689 126976 4096 4096 NT_STATUS_OK
WriteX 10689 0 65536 65536 NT_STATUS_OK
WriteX 10689 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10690 NT_STATUS_OK
ReadX 10690 61440 4096 4096 NT_STATUS_OK
ReadX 10690 126976 4096 4096 NT_STATUS_OK
ReadX 10690 192512 4096 4096 NT_STATUS_OK
ReadX 10690 258048 4096 4096 NT_STATUS_OK
WriteX 10690 0 65536 65536 NT_STATUS_OK
WriteX 10690 65536 65536 65536 NT_STATUS_OK
WriteX 10690 131072 65536 65536 NT_STATUS_OK
WriteX 10690 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10691 NT_STATUS_OK
ReadX 10691 61440 4096 4096 NT_STATUS_OK
ReadX 10691 126976 4096 4096 NT_STATUS_OK
ReadX 10691 192512 4096 4096 NT_STATUS_OK
ReadX 10691 258048 4096 4096 NT_STATUS_OK
ReadX 10691 323584 4096 4096 NT_STATUS_OK
ReadX 10691 389120 4096 4096 NT_STATUS_OK
ReadX 10691 454656 4096 4096 NT_STATUS_OK
ReadX 10691 520192 4096 4096 NT_STATUS_OK
WriteX 10691 0 65536 65536 NT_STATUS_OK
WriteX 10691 65536 65536 65536 NT_STATUS_OK
WriteX 10691 131072 65536 65536 NT_STATUS_OK
WriteX 10691 196608 65536 65536 NT_STATUS_OK
WriteX 10691 262144 65536 65536 NT_STATUS_OK
WriteX 10691 327680 65536 65536 NT_STATUS_OK
WriteX 10691 393216 65536 65536 NT_STATUS_OK
WriteX 10691 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10692 NT_STATUS_OK
ReadX 10692 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10692 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10692 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10692 8192 4096 4096 NT_STATUS_OK
ReadX 10692 12288 4096 4096 NT_STATUS_OK
ReadX 10692 16384 4096 4096 NT_STATUS_OK
ReadX 10692 20480 4096 4096 NT_STATUS_OK
ReadX 10692 24576 4096 4096 NT_STATUS_OK
ReadX 10692 28672 4096 4096 NT_STATUS_OK
ReadX 10692 32768 4096 4096 NT_STATUS_OK
ReadX 10692 36864 4096 4096 NT_STATUS_OK
ReadX 10692 40960 4096 4096 NT_STATUS_OK
ReadX 10692 45056 4096 4096 NT_STATUS_OK
ReadX 10692 49152 4096 4096 NT_STATUS_OK
ReadX 10692 53248 4096 4096 NT_STATUS_OK
ReadX 10692 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10692 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10693 NT_STATUS_OK
Close 10693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10689 NT_STATUS_OK
Close 10690 NT_STATUS_OK
Close 10691 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10695 NT_STATUS_OK
WriteX 10695 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10695 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10695 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10695 1004 NT_STATUS_OK
WriteX 10695 0 57088 57088 NT_STATUS_OK
WriteX 10695 0 4096 4096 NT_STATUS_OK
Flush 10695 NT_STATUS_OK
Close 10692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10696 NT_STATUS_OK
SET_FILE_INFORMATION 10696 1004 NT_STATUS_OK
Close 10696 NT_STATUS_OK
SET_FILE_INFORMATION 10695 1004 NT_STATUS_OK
WriteX 10695 0 4096 4096 NT_STATUS_OK
Close 10695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10697 NT_STATUS_OK
Close 10697 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10699 NT_STATUS_OK
ReadX 10699 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10699 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10700 NT_STATUS_OK
WriteX 10700 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10700 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10700 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10700 1004 NT_STATUS_OK
WriteX 10700 0 51456 51456 NT_STATUS_OK
WriteX 10700 0 4096 4096 NT_STATUS_OK
Flush 10700 NT_STATUS_OK
SET_FILE_INFORMATION 10700 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10700 1004 NT_STATUS_OK
WriteX 10700 0 4096 4096 NT_STATUS_OK
Close 10700 NT_STATUS_OK
Close 10699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10702 NT_STATUS_OK
Close 10702 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10704 NT_STATUS_OK
ReadX 10704 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10704 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10706 NT_STATUS_OK
Close 10706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10709 NT_STATUS_OK
WriteX 10709 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10709 258 NT_STATUS_OK
WriteX 10709 0 53077 53077 NT_STATUS_OK
Close 10709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10710 NT_STATUS_OK
WriteX 10710 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10710 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10710 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10710 1004 NT_STATUS_OK
WriteX 10710 0 65536 65536 NT_STATUS_OK
WriteX 10710 65536 1856 1856 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
SET_FILE_INFORMATION 10710 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10710 1004 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Close 10710 NT_STATUS_OK
Close 10704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10712 NT_STATUS_OK
Close 10712 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10714 NT_STATUS_OK
ReadX 10714 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10716 NT_STATUS_OK
Close 10716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10719 NT_STATUS_OK
WriteX 10719 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10719 258 NT_STATUS_OK
WriteX 10719 0 7983 7983 NT_STATUS_OK
Close 10719 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10721 NT_STATUS_OK
Close 10721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10724 NT_STATUS_OK
WriteX 10724 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10724 258 NT_STATUS_OK
WriteX 10724 0 65536 65536 NT_STATUS_OK
WriteX 10724 65536 65536 65536 NT_STATUS_OK
WriteX 10724 131072 65536 65536 NT_STATUS_OK
WriteX 10724 196608 65536 65536 NT_STATUS_OK
WriteX 10724 262144 65536 65536 NT_STATUS_OK
WriteX 10724 327680 65536 65536 NT_STATUS_OK
WriteX 10724 393216 65536 65536 NT_STATUS_OK
WriteX 10724 458752 46731 46731 NT_STATUS_OK
Close 10724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10725 NT_STATUS_OK
WriteX 10725 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10725 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10714 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10725 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10725 1004 NT_STATUS_OK
WriteX 10725 0 65536 65536 NT_STATUS_OK
WriteX 10725 65536 22848 22848 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
SET_FILE_INFORMATION 10725 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10725 1004 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Close 10725 NT_STATUS_OK
Close 10714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10727 NT_STATUS_OK
Close 10727 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10729 NT_STATUS_OK
ReadX 10729 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10729 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10730 NT_STATUS_OK
ReadX 10730 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10730 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10730 1004 NT_STATUS_OK
ReadX 10730 8192 4096 4096 NT_STATUS_OK
ReadX 10730 12288 4096 4096 NT_STATUS_OK
ReadX 10730 16384 4096 4096 NT_STATUS_OK
ReadX 10730 20480 4096 4096 NT_STATUS_OK
ReadX 10730 24576 4096 4096 NT_STATUS_OK
ReadX 10730 28672 4096 4096 NT_STATUS_OK
ReadX 10730 32768 4096 4096 NT_STATUS_OK
ReadX 10730 36864 4096 4096 NT_STATUS_OK
ReadX 10730 40960 4096 4096 NT_STATUS_OK
ReadX 10730 45056 4096 4096 NT_STATUS_OK
ReadX 10730 49152 4096 4096 NT_STATUS_OK
ReadX 10730 53248 4096 4096 NT_STATUS_OK
ReadX 10730 57344 4096 4096 NT_STATUS_OK
ReadX 10730 61440 4096 4096 NT_STATUS_OK
ReadX 10730 65536 4096 4096 NT_STATUS_OK
ReadX 10730 69632 4096 4096 NT_STATUS_OK
ReadX 10730 73728 4096 4096 NT_STATUS_OK
ReadX 10730 77824 4096 4096 NT_STATUS_OK
ReadX 10730 81920 4096 4096 NT_STATUS_OK
ReadX 10730 86016 4096 4096 NT_STATUS_OK
ReadX 10730 90112 4096 4096 NT_STATUS_OK
ReadX 10730 94208 4096 4096 NT_STATUS_OK
ReadX 10730 98304 4096 4096 NT_STATUS_OK
ReadX 10730 102400 4096 4096 NT_STATUS_OK
ReadX 10730 106496 4096 4096 NT_STATUS_OK
ReadX 10730 110592 4096 4096 NT_STATUS_OK
ReadX 10730 114688 4096 4096 NT_STATUS_OK
ReadX 10730 118784 4096 4096 NT_STATUS_OK
ReadX 10730 122880 4096 4096 NT_STATUS_OK
ReadX 10730 126976 4096 4096 NT_STATUS_OK
ReadX 10730 131072 4096 4096 NT_STATUS_OK
ReadX 10730 135168 4096 4096 NT_STATUS_OK
ReadX 10730 139264 4096 4096 NT_STATUS_OK
ReadX 10730 143360 4096 4096 NT_STATUS_OK
ReadX 10730 147456 4096 4096 NT_STATUS_OK
ReadX 10730 151552 4096 4096 NT_STATUS_OK
ReadX 10730 155648 4096 4096 NT_STATUS_OK
ReadX 10730 159744 4096 4096 NT_STATUS_OK
ReadX 10730 163840 4096 4096 NT_STATUS_OK
ReadX 10730 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10730 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10731 NT_STATUS_OK
Close 10731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10729 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10733 NT_STATUS_OK
WriteX 10733 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10733 258 NT_STATUS_OK
Close 10730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10734 NT_STATUS_OK
SET_FILE_INFORMATION 10734 1004 NT_STATUS_OK
Close 10734 NT_STATUS_OK
WriteX 10733 0 42388 42388 NT_STATUS_OK
Close 10733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10735 NT_STATUS_OK
Close 10735 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10737 NT_STATUS_OK
ReadX 10737 0 4096 4096 NT_STATUS_OK
ReadX 10737 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10738 NT_STATUS_OK
WriteX 10738 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10738 258 NT_STATUS_OK
WriteX 10738 0 42652 42652 NT_STATUS_OK
SET_FILE_INFORMATION 10738 1004 NT_STATUS_OK
WriteX 10738 0 8192 8192 NT_STATUS_OK
Close 10738 NT_STATUS_OK
Close 10737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10740 NT_STATUS_OK
Close 10740 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10742 NT_STATUS_OK
ReadX 10742 0 4096 4096 NT_STATUS_OK
ReadX 10742 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10744 NT_STATUS_OK
Close 10744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10747 NT_STATUS_OK
WriteX 10747 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10747 258 NT_STATUS_OK
WriteX 10747 0 65536 65536 NT_STATUS_OK
WriteX 10747 65536 49 49 NT_STATUS_OK
Close 10747 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10748 NT_STATUS_OK
ReadX 10748 0 61440 61440 NT_STATUS_OK
ReadX 10748 61440 4096 4096 NT_STATUS_OK
ReadX 10748 65536 61440 61440 NT_STATUS_OK
ReadX 10748 126976 4096 4096 NT_STATUS_OK
ReadX 10748 131072 61440 61440 NT_STATUS_OK
ReadX 10748 192512 4096 4096 NT_STATUS_OK
ReadX 10748 196608 61440 61440 NT_STATUS_OK
ReadX 10748 258048 4096 4096 NT_STATUS_OK
ReadX 10748 262144 61440 61440 NT_STATUS_OK
ReadX 10748 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10749 NT_STATUS_OK
ReadX 10749 0 61440 61440 NT_STATUS_OK
ReadX 10749 61440 4096 4096 NT_STATUS_OK
ReadX 10749 65536 61440 61440 NT_STATUS_OK
ReadX 10749 126976 4096 4096 NT_STATUS_OK
ReadX 10749 131072 61440 61440 NT_STATUS_OK
ReadX 10749 192512 4096 4096 NT_STATUS_OK
ReadX 10749 196608 61440 61440 NT_STATUS_OK
ReadX 10749 258048 4096 4096 NT_STATUS_OK
ReadX 10749 262144 61440 61440 NT_STATUS_OK
ReadX 10749 323584 4096 4096 NT_STATUS_OK
ReadX 10749 327680 61440 61440 NT_STATUS_OK
ReadX 10749 389120 4096 4096 NT_STATUS_OK
ReadX 10749 393216 61440 61440 NT_STATUS_OK
ReadX 10749 454656 4096 4096 NT_STATUS_OK
ReadX 10749 458752 61440 61440 NT_STATUS_OK
ReadX 10749 520192 4096 4096 NT_STATUS_OK
ReadX 10749 524288 61440 61440 NT_STATUS_OK
ReadX 10749 585728 4096 4096 NT_STATUS_OK
ReadX 10749 589824 61440 61440 NT_STATUS_OK
ReadX 10749 651264 4096 4096 NT_STATUS_OK
ReadX 10749 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10750 NT_STATUS_OK
ReadX 10750 0 61440 61440 NT_STATUS_OK
ReadX 10750 61440 4096 4096 NT_STATUS_OK
ReadX 10750 65536 61440 61440 NT_STATUS_OK
ReadX 10750 126976 4096 4096 NT_STATUS_OK
ReadX 10750 131072 61440 61440 NT_STATUS_OK
ReadX 10750 192512 4096 4096 NT_STATUS_OK
ReadX 10750 196608 61440 61440 NT_STATUS_OK
ReadX 10750 258048 4096 4096 NT_STATUS_OK
ReadX 10750 262144 61440 61440 NT_STATUS_OK
ReadX 10750 323584 4096 4096 NT_STATUS_OK
ReadX 10750 327680 61440 61440 NT_STATUS_OK
ReadX 10750 389120 4096 4096 NT_STATUS_OK
ReadX 10750 393216 61440 61440 NT_STATUS_OK
ReadX 10750 454656 4096 4096 NT_STATUS_OK
ReadX 10750 458752 61440 61440 NT_STATUS_OK
ReadX 10750 520192 4096 4096 NT_STATUS_OK
ReadX 10750 524288 61440 61440 NT_STATUS_OK
ReadX 10750 585728 4096 4096 NT_STATUS_OK
ReadX 10750 589824 61440 61440 NT_STATUS_OK
ReadX 10750 651264 4096 4096 NT_STATUS_OK
ReadX 10750 655360 61440 61440 NT_STATUS_OK
ReadX 10750 716800 4096 4096 NT_STATUS_OK
ReadX 10750 720896 61440 61440 NT_STATUS_OK
ReadX 10750 782336 4096 4096 NT_STATUS_OK
ReadX 10750 786432 61440 61440 NT_STATUS_OK
ReadX 10750 847872 4096 4096 NT_STATUS_OK
ReadX 10750 851968 61440 61440 NT_STATUS_OK
ReadX 10750 913408 4096 4096 NT_STATUS_OK
ReadX 10750 917504 61440 61440 NT_STATUS_OK
ReadX 10750 978944 4096 4096 NT_STATUS_OK
ReadX 10750 983040 61440 61440 NT_STATUS_OK
ReadX 10750 1044480 4096 4096 NT_STATUS_OK
ReadX 10750 1048576 61440 61440 NT_STATUS_OK
ReadX 10750 1110016 4096 4096 NT_STATUS_OK
ReadX 10750 1114112 61440 61440 NT_STATUS_OK
ReadX 10750 1175552 4096 4096 NT_STATUS_OK
ReadX 10750 1179648 61440 61440 NT_STATUS_OK
ReadX 10750 1241088 4096 4096 NT_STATUS_OK
ReadX 10750 1245184 61440 61440 NT_STATUS_OK
ReadX 10750 1306624 4096 4096 NT_STATUS_OK
ReadX 10750 1310720 61440 61440 NT_STATUS_OK
ReadX 10750 1372160 4096 4096 NT_STATUS_OK
ReadX 10750 1376256 61440 61440 NT_STATUS_OK
ReadX 10750 1437696 4096 4096 NT_STATUS_OK
ReadX 10750 1441792 61440 61440 NT_STATUS_OK
ReadX 10750 1503232 4096 4096 NT_STATUS_OK
ReadX 10750 1507328 61440 61440 NT_STATUS_OK
ReadX 10750 1568768 4096 4096 NT_STATUS_OK
ReadX 10750 1572864 61440 61440 NT_STATUS_OK
ReadX 10750 1634304 4096 4096 NT_STATUS_OK
ReadX 10750 1638400 61440 61440 NT_STATUS_OK
ReadX 10750 1699840 4096 4096 NT_STATUS_OK
ReadX 10750 1703936 61440 61440 NT_STATUS_OK
ReadX 10750 1765376 4096 4096 NT_STATUS_OK
ReadX 10750 1769472 61440 61440 NT_STATUS_OK
ReadX 10750 1830912 4096 4096 NT_STATUS_OK
ReadX 10750 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10751 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10752 NT_STATUS_OK
QUERY_FILE_INFORMATION 10752 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10752 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10752 1005 NT_STATUS_OK
ReadX 10752 2156 24 24 NT_STATUS_OK
ReadX 10752 2139 276 276 NT_STATUS_OK
ReadX 10752 2136 14 14 NT_STATUS_OK
ReadX 10752 2136 7 7 NT_STATUS_OK
ReadX 10752 2138 12 12 NT_STATUS_OK
ReadX 10752 2137 8 8 NT_STATUS_OK
ReadX 10752 2135 15 15 NT_STATUS_OK
ReadX 10752 0 16 16 NT_STATUS_OK
ReadX 10752 16 2048 2048 NT_STATUS_OK
ReadX 10752 2064 2048 2048 NT_STATUS_OK
ReadX 10752 257 2048 2048 NT_STATUS_OK
ReadX 10752 385 2048 2048 NT_STATUS_OK
ReadX 10752 513 2048 2048 NT_STATUS_OK
ReadX 10752 641 2048 2048 NT_STATUS_OK
ReadX 10752 769 2048 2048 NT_STATUS_OK
ReadX 10752 897 2048 2048 NT_STATUS_OK
ReadX 10752 1025 2048 2048 NT_STATUS_OK
ReadX 10752 1153 2048 2048 NT_STATUS_OK
ReadX 10752 1281 2048 2048 NT_STATUS_OK
ReadX 10752 1409 2048 2048 NT_STATUS_OK
ReadX 10752 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10754 NT_STATUS_OK
Close 10754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10748 NT_STATUS_OK
Close 10749 NT_STATUS_OK
Close 10750 NT_STATUS_OK
Close 10742 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10757 NT_STATUS_OK
WriteX 10757 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10757 258 NT_STATUS_OK
WriteX 10757 0 10575 10575 NT_STATUS_OK
Flush 10757 NT_STATUS_OK
Close 10757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10758 NT_STATUS_OK
Close 10758 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10760 NT_STATUS_OK
ReadX 10760 0 4096 4096 NT_STATUS_OK
Close 10752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10762 NT_STATUS_OK
LockX 10762 2147483538 1 NT_STATUS_OK
UnlockX 10762 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10762 1005 NT_STATUS_OK
ReadX 10762 0 512 512 NT_STATUS_OK
ReadX 10762 512 512 512 NT_STATUS_OK
ReadX 10762 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10762 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10762 1004 NT_STATUS_OK
Close 10762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10763 NT_STATUS_OK
QUERY_FILE_INFORMATION 10763 1005 NT_STATUS_OK
ReadX 10763 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10764 NT_STATUS_OK
LockX 10764 2147483538 1 NT_STATUS_OK
UnlockX 10764 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10764 1005 NT_STATUS_OK
ReadX 10764 0 512 512 NT_STATUS_OK
ReadX 10764 512 512 512 NT_STATUS_OK
ReadX 10764 1024 512 512 NT_STATUS_OK
ReadX 10764 288 20 20 NT_STATUS_OK
ReadX 10764 308 2084 2084 NT_STATUS_OK
ReadX 10764 388 2084 2084 NT_STATUS_OK
ReadX 10764 388 2084 2084 NT_STATUS_OK
ReadX 10751 2157 1386 1386 NT_STATUS_OK
ReadX 10764 2472 399 399 NT_STATUS_OK
ReadX 10764 3072 1536 1536 NT_STATUS_OK
ReadX 10764 544 149 149 NT_STATUS_OK
ReadX 10764 693 485 485 NT_STATUS_OK
Close 10764 NT_STATUS_OK
ReadX 10751 2157 4096 4096 NT_STATUS_OK
ReadX 10751 6253 4096 4096 NT_STATUS_OK
ReadX 10751 10349 4096 4096 NT_STATUS_OK
ReadX 10751 14445 4096 4096 NT_STATUS_OK
ReadX 10751 18541 4096 4096 NT_STATUS_OK
ReadX 10751 22637 256 256 NT_STATUS_OK
ReadX 10751 22893 4096 4096 NT_STATUS_OK
ReadX 10751 26989 4096 4096 NT_STATUS_OK
ReadX 10751 31085 4096 4096 NT_STATUS_OK
ReadX 10751 35181 4096 4096 NT_STATUS_OK
ReadX 10751 39277 4096 4096 NT_STATUS_OK
ReadX 10751 43373 4096 4096 NT_STATUS_OK
ReadX 10751 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10751 2157 1024 1024 NT_STATUS_OK
ReadX 10751 1667 4688 4688 NT_STATUS_OK
ReadX 10751 6355 3516 3516 NT_STATUS_OK
ReadX 10751 9871 16384 16384 NT_STATUS_OK
ReadX 10751 26255 3771 3771 NT_STATUS_OK
ReadX 10751 30026 2048 2048 NT_STATUS_OK
ReadX 10751 32074 1024 1024 NT_STATUS_OK
ReadX 10751 33098 6652 6652 NT_STATUS_OK
ReadX 10751 39750 16384 16384 NT_STATUS_OK
ReadX 10751 56134 10496 10496 NT_STATUS_OK
ReadX 10751 66630 1784 1784 NT_STATUS_OK
ReadX 10751 68414 90 90 NT_STATUS_OK
ReadX 10751 68504 273 273 NT_STATUS_OK
ReadX 10751 68777 1600 1600 NT_STATUS_OK
ReadX 10751 70377 640 640 NT_STATUS_OK
ReadX 10751 71017 1280 1280 NT_STATUS_OK
ReadX 10751 72297 8464 8464 NT_STATUS_OK
ReadX 10751 80761 158 158 NT_STATUS_OK
ReadX 10751 80919 912 912 NT_STATUS_OK
ReadX 10751 81831 1980 1980 NT_STATUS_OK
ReadX 10751 83811 2256 2256 NT_STATUS_OK
ReadX 10751 86067 400 400 NT_STATUS_OK
ReadX 10751 86467 252 252 NT_STATUS_OK
ReadX 10751 86719 42 42 NT_STATUS_OK
ReadX 10751 86761 725 725 NT_STATUS_OK
ReadX 10751 2009 512 512 NT_STATUS_OK
ReadX 10751 3895 9 9 NT_STATUS_OK
ReadX 10751 3781 46 46 NT_STATUS_OK
ReadX 10751 4059 92 92 NT_STATUS_OK
ReadX 10751 3781 92 92 NT_STATUS_OK
ReadX 10751 3986 184 184 NT_STATUS_OK
ReadX 10751 3987 16384 16384 NT_STATUS_OK
ReadX 10751 3902 16384 16384 NT_STATUS_OK
ReadX 10751 3781 10240 10240 NT_STATUS_OK
ReadX 10751 3821 16384 16384 NT_STATUS_OK
ReadX 10751 3891 935 935 NT_STATUS_OK
ReadX 10751 4060 10240 10240 NT_STATUS_OK
ReadX 10751 4059 184 184 NT_STATUS_OK
ReadX 10751 256 184 184 NT_STATUS_OK
ReadX 10751 256 1026 1026 NT_STATUS_OK
ReadX 10751 3901 326 326 NT_STATUS_OK
ReadX 10751 3899 652 652 NT_STATUS_OK
ReadX 10751 256 2 2 NT_STATUS_OK
ReadX 10751 258 4948 4948 NT_STATUS_OK
Close 10751 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10766 NT_STATUS_OK
Close 10766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10769 NT_STATUS_OK
WriteX 10769 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10769 258 NT_STATUS_OK
WriteX 10769 0 65536 65536 NT_STATUS_OK
WriteX 10769 65536 65536 65536 NT_STATUS_OK
WriteX 10769 131072 65536 65536 NT_STATUS_OK
WriteX 10769 196608 65536 65536 NT_STATUS_OK
WriteX 10769 262144 65536 65536 NT_STATUS_OK
WriteX 10769 327680 65536 65536 NT_STATUS_OK
WriteX 10769 393216 65536 65536 NT_STATUS_OK
WriteX 10769 458752 65536 65536 NT_STATUS_OK
WriteX 10769 524288 65536 65536 NT_STATUS_OK
WriteX 10769 589824 35257 35257 NT_STATUS_OK
Close 10769 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10771 NT_STATUS_OK
Close 10771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10774 NT_STATUS_OK
WriteX 10774 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10774 258 NT_STATUS_OK
WriteX 10774 0 65536 65536 NT_STATUS_OK
WriteX 10774 65536 65536 65536 NT_STATUS_OK
WriteX 10774 131072 65536 65536 NT_STATUS_OK
WriteX 10774 196608 65536 65536 NT_STATUS_OK
WriteX 10774 262144 65536 65536 NT_STATUS_OK
WriteX 10774 327680 65536 65536 NT_STATUS_OK
WriteX 10774 393216 65536 65536 NT_STATUS_OK
WriteX 10774 458752 65536 65536 NT_STATUS_OK
WriteX 10774 524288 65536 65536 NT_STATUS_OK
WriteX 10774 589824 57598 57598 NT_STATUS_OK
Close 10774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10776 NT_STATUS_OK
WriteX 10776 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10776 258 NT_STATUS_OK
WriteX 10776 0 12543 12543 NT_STATUS_OK
Flush 10776 NT_STATUS_OK
Close 10776 NT_STATUS_OK
Close 10760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10778 NT_STATUS_OK
Close 10778 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10780 NT_STATUS_OK
ReadX 10780 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10781 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10782 NT_STATUS_OK
QUERY_FILE_INFORMATION 10782 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10782 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10782 1005 NT_STATUS_OK
ReadX 10782 1938 24 24 NT_STATUS_OK
ReadX 10782 1920 276 276 NT_STATUS_OK
ReadX 10782 1918 14 14 NT_STATUS_OK
ReadX 10782 1918 7 7 NT_STATUS_OK
ReadX 10782 1919 12 12 NT_STATUS_OK
ReadX 10782 1919 8 8 NT_STATUS_OK
ReadX 10782 1917 15 15 NT_STATUS_OK
ReadX 10782 0 16 16 NT_STATUS_OK
ReadX 10782 16 2048 2048 NT_STATUS_OK
ReadX 10782 2064 2048 2048 NT_STATUS_OK
ReadX 10782 257 2048 2048 NT_STATUS_OK
ReadX 10782 385 2048 2048 NT_STATUS_OK
ReadX 10782 513 2048 2048 NT_STATUS_OK
ReadX 10782 641 2048 2048 NT_STATUS_OK
ReadX 10782 769 2048 2048 NT_STATUS_OK
ReadX 10782 897 2048 2048 NT_STATUS_OK
ReadX 10782 1025 2048 2048 NT_STATUS_OK
ReadX 10782 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10784 NT_STATUS_OK
Close 10784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10787 NT_STATUS_OK
WriteX 10787 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10787 258 NT_STATUS_OK
WriteX 10787 0 11588 11588 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
Close 10787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10788 NT_STATUS_OK
Close 10788 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10790 NT_STATUS_OK
ReadX 10790 0 4096 4096 NT_STATUS_OK
Close 10782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10792 NT_STATUS_OK
WriteX 10792 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10792 258 NT_STATUS_OK
WriteX 10792 0 11615 11615 NT_STATUS_OK
Flush 10792 NT_STATUS_OK
Close 10792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10794 NT_STATUS_OK
Close 10794 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10796 NT_STATUS_OK
ReadX 10796 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10798 NT_STATUS_OK
Close 10798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10801 NT_STATUS_OK
WriteX 10801 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10801 258 NT_STATUS_OK
WriteX 10801 0 65536 65536 NT_STATUS_OK
WriteX 10801 65536 16050 16050 NT_STATUS_OK
Close 10801 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10781 1939 64 64 NT_STATUS_OK
ReadX 10781 128 248 248 NT_STATUS_OK
ReadX 10781 128 568 568 NT_STATUS_OK
ReadX 10781 3872 1536 1536 NT_STATUS_OK
ReadX 10781 3456 2560 2560 NT_STATUS_OK
ReadX 10781 3136 512 512 NT_STATUS_OK
ReadX 10781 2880 4096 4096 NT_STATUS_OK
ReadX 10781 3264 3072 3072 NT_STATUS_OK
ReadX 10781 320 4096 4096 NT_STATUS_OK
ReadX 10781 1024 4096 4096 NT_STATUS_OK
ReadX 10781 3616 4096 4096 NT_STATUS_OK
ReadX 10781 1939 64 64 NT_STATUS_OK
ReadX 10781 128 248 248 NT_STATUS_OK
ReadX 10781 128 608 608 NT_STATUS_OK
ReadX 10781 2858 1024 1024 NT_STATUS_OK
ReadX 10781 2810 4096 4096 NT_STATUS_OK
ReadX 10781 2826 4096 4096 NT_STATUS_OK
ReadX 10781 2580 2048 2048 NT_STATUS_OK
ReadX 10781 2800 2560 2560 NT_STATUS_OK
ReadX 10781 2100 4096 4096 NT_STATUS_OK
ReadX 10781 2084 4096 4096 NT_STATUS_OK
ReadX 10781 868 4096 4096 NT_STATUS_OK
ReadX 10781 2324 4096 4096 NT_STATUS_OK
ReadX 10781 884 4096 4096 NT_STATUS_OK
ReadX 10781 2604 1024 1024 NT_STATUS_OK
ReadX 10781 580 4096 4096 NT_STATUS_OK
ReadX 10781 596 4096 4096 NT_STATUS_OK
ReadX 10781 2752 4096 4096 NT_STATUS_OK
ReadX 10781 2842 1024 1024 NT_STATUS_OK
ReadX 10781 660 4096 4096 NT_STATUS_OK
ReadX 10781 2720 4096 4096 NT_STATUS_OK
ReadX 10781 2736 4096 4096 NT_STATUS_OK
ReadX 10781 628 4096 4096 NT_STATUS_OK
ReadX 10781 2704 4096 4096 NT_STATUS_OK
ReadX 10781 1556 4096 4096 NT_STATUS_OK
ReadX 10781 576 4096 4096 NT_STATUS_OK
ReadX 10781 3168 1536 1536 NT_STATUS_OK
ReadX 10781 832 4096 4096 NT_STATUS_OK
ReadX 10781 1088 4096 4096 NT_STATUS_OK
ReadX 10781 1344 4096 4096 NT_STATUS_OK
ReadX 10781 1600 4096 4096 NT_STATUS_OK
ReadX 10781 1856 4096 4096 NT_STATUS_OK
ReadX 10781 2112 4096 4096 NT_STATUS_OK
ReadX 10781 1892 4096 4096 NT_STATUS_OK
ReadX 10781 820 4096 4096 NT_STATUS_OK
ReadX 10781 788 4096 4096 NT_STATUS_OK
ReadX 10781 1604 4096 4096 NT_STATUS_OK
ReadX 10781 3648 4096 4096 NT_STATUS_OK
ReadX 10781 2608 4096 4096 NT_STATUS_OK
ReadX 10781 548 4096 4096 NT_STATUS_OK
ReadX 10781 740 4096 4096 NT_STATUS_OK
ReadX 10781 1344 4096 4096 NT_STATUS_OK
ReadX 10781 3392 4096 4096 NT_STATUS_OK
ReadX 10781 3904 4096 4096 NT_STATUS_OK
ReadX 10781 644 4096 4096 NT_STATUS_OK
ReadX 10781 676 4096 4096 NT_STATUS_OK
ReadX 10781 2688 4096 4096 NT_STATUS_OK
ReadX 10781 320 4096 4096 NT_STATUS_OK
ReadX 10781 900 4096 4096 NT_STATUS_OK
ReadX 10781 1908 4096 4096 NT_STATUS_OK
ReadX 10781 852 4096 4096 NT_STATUS_OK
ReadX 10781 724 4096 4096 NT_STATUS_OK
ReadX 10781 2292 4096 4096 NT_STATUS_OK
ReadX 10781 612 4096 4096 NT_STATUS_OK
ReadX 10781 388 4096 4096 NT_STATUS_OK
ReadX 10781 2368 4096 4096 NT_STATUS_OK
ReadX 10781 2624 4096 4096 NT_STATUS_OK
ReadX 10781 500 4096 4096 NT_STATUS_OK
ReadX 10781 356 4096 4096 NT_STATUS_OK
ReadX 10781 1024 4096 4096 NT_STATUS_OK
ReadX 10781 576 4096 4096 NT_STATUS_OK
ReadX 10781 340 4096 4096 NT_STATUS_OK
ReadX 10781 420 4096 4096 NT_STATUS_OK
ReadX 10781 1600 4096 4096 NT_STATUS_OK
ReadX 10781 404 4096 4096 NT_STATUS_OK
ReadX 10781 1428 4096 4096 NT_STATUS_OK
ReadX 10781 2656 4096 4096 NT_STATUS_OK
ReadX 10781 2624 4096 4096 NT_STATUS_OK
ReadX 10781 452 4096 4096 NT_STATUS_OK
ReadX 10781 692 4096 4096 NT_STATUS_OK
ReadX 10781 564 4096 4096 NT_STATUS_OK
ReadX 10781 372 4096 4096 NT_STATUS_OK
ReadX 10781 468 4096 4096 NT_STATUS_OK
ReadX 10781 484 4096 4096 NT_STATUS_OK
ReadX 10781 1088 4096 4096 NT_STATUS_OK
ReadX 10781 1924 4096 4096 NT_STATUS_OK
ReadX 10781 2768 4096 4096 NT_STATUS_OK
ReadX 10781 832 4096 4096 NT_STATUS_OK
ReadX 10781 836 4096 4096 NT_STATUS_OK
ReadX 10781 1856 4096 4096 NT_STATUS_OK
ReadX 10781 2640 4096 4096 NT_STATUS_OK
ReadX 10781 436 4096 4096 NT_STATUS_OK
ReadX 10781 1828 4096 4096 NT_STATUS_OK
ReadX 10781 804 4096 4096 NT_STATUS_OK
ReadX 10781 1860 4096 4096 NT_STATUS_OK
ReadX 10781 1812 4096 4096 NT_STATUS_OK
ReadX 10781 756 4096 4096 NT_STATUS_OK
ReadX 10781 1636 4096 4096 NT_STATUS_OK
ReadX 10781 772 4096 4096 NT_STATUS_OK
ReadX 10781 2036 4096 4096 NT_STATUS_OK
ReadX 10781 1220 4096 4096 NT_STATUS_OK
ReadX 10781 1652 4096 4096 NT_STATUS_OK
ReadX 10781 2588 4096 4096 NT_STATUS_OK
ReadX 10781 916 4096 4096 NT_STATUS_OK
ReadX 10781 260 4096 4096 NT_STATUS_OK
ReadX 10781 932 4096 4096 NT_STATUS_OK
ReadX 10781 2624 4096 4096 NT_STATUS_OK
ReadX 10781 308 4096 4096 NT_STATUS_OK
ReadX 10781 292 4096 4096 NT_STATUS_OK
ReadX 10781 1140 4096 4096 NT_STATUS_OK
ReadX 10781 276 4096 4096 NT_STATUS_OK
ReadX 10781 2020 4096 4096 NT_STATUS_OK
ReadX 10781 2880 4096 4096 NT_STATUS_OK
ReadX 10781 516 4096 4096 NT_STATUS_OK
ReadX 10781 1844 4096 4096 NT_STATUS_OK
ReadX 10781 1124 4096 4096 NT_STATUS_OK
ReadX 10781 3136 4096 4096 NT_STATUS_OK
ReadX 10781 324 4096 4096 NT_STATUS_OK
ReadX 10781 1156 4096 4096 NT_STATUS_OK
ReadX 10781 1172 4096 4096 NT_STATUS_OK
ReadX 10781 2112 4096 4096 NT_STATUS_OK
ReadX 10781 2368 4096 4096 NT_STATUS_OK
ReadX 10781 964 4096 4096 NT_STATUS_OK
ReadX 10781 980 4096 4096 NT_STATUS_OK
ReadX 10781 1012 4096 4096 NT_STATUS_OK
ReadX 10781 532 4096 4096 NT_STATUS_OK
ReadX 10781 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10781 1620 4096 4096 NT_STATUS_OK
ReadX 10781 1604 4096 4096 NT_STATUS_OK
ReadX 10781 2116 4096 4096 NT_STATUS_OK
ReadX 10781 2132 4096 4096 NT_STATUS_OK
ReadX 10781 2148 4096 4096 NT_STATUS_OK
ReadX 10781 2276 4096 4096 NT_STATUS_OK
ReadX 10781 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10803 NT_STATUS_OK
Close 10803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10806 NT_STATUS_OK
QUERY_FILE_INFORMATION 10761 1004 NT_STATUS_OK
Close 10761 NT_STATUS_OK
WriteX 10806 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10806 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10763 1004 NT_STATUS_OK
Close 10763 NT_STATUS_OK
WriteX 10806 0 65536 65536 NT_STATUS_OK
WriteX 10806 65536 64850 64850 NT_STATUS_OK
Close 10806 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10808 NT_STATUS_OK
WriteX 10808 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10808 258 NT_STATUS_OK
ReadX 10781 2068 4096 4096 NT_STATUS_OK
ReadX 10781 1588 4096 4096 NT_STATUS_OK
ReadX 10781 1572 4096 4096 NT_STATUS_OK
WriteX 10808 0 18630 18630 NT_STATUS_OK
Flush 10808 NT_STATUS_OK
Close 10808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10810 NT_STATUS_OK
Close 10810 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10812 NT_STATUS_OK
ReadX 10812 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10781 612 4096 4096 NT_STATUS_OK
ReadX 10781 564 4096 4096 NT_STATUS_OK
ReadX 10781 1876 4096 4096 NT_STATUS_OK
ReadX 10781 628 4096 4096 NT_STATUS_OK
ReadX 10781 740 4096 4096 NT_STATUS_OK
ReadX 10781 724 4096 4096 NT_STATUS_OK
ReadX 10781 644 4096 4096 NT_STATUS_OK
ReadX 10781 2324 4096 4096 NT_STATUS_OK
ReadX 10781 660 4096 4096 NT_STATUS_OK
ReadX 10781 852 4096 4096 NT_STATUS_OK
ReadX 10781 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10781 2368 4096 4096 NT_STATUS_OK
ReadX 10781 1024 4096 4096 NT_STATUS_OK
ReadX 10781 320 4096 4096 NT_STATUS_OK
ReadX 10781 580 4096 4096 NT_STATUS_OK
ReadX 10781 3136 512 512 NT_STATUS_OK
ReadX 10781 2880 4096 4096 NT_STATUS_OK
Close 10781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10813 NT_STATUS_OK
ReadX 10813 61440 4096 4096 NT_STATUS_OK
ReadX 10813 126976 4096 4096 NT_STATUS_OK
WriteX 10813 0 65536 65536 NT_STATUS_OK
WriteX 10813 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10814 NT_STATUS_OK
ReadX 10814 61440 4096 4096 NT_STATUS_OK
ReadX 10814 126976 4096 4096 NT_STATUS_OK
ReadX 10814 192512 4096 4096 NT_STATUS_OK
ReadX 10814 258048 4096 4096 NT_STATUS_OK
WriteX 10814 0 65536 65536 NT_STATUS_OK
WriteX 10814 65536 65536 65536 NT_STATUS_OK
WriteX 10814 131072 65536 65536 NT_STATUS_OK
WriteX 10814 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10815 NT_STATUS_OK
ReadX 10815 61440 4096 4096 NT_STATUS_OK
ReadX 10815 126976 4096 4096 NT_STATUS_OK
ReadX 10815 192512 4096 4096 NT_STATUS_OK
ReadX 10815 258048 4096 4096 NT_STATUS_OK
ReadX 10815 323584 4096 4096 NT_STATUS_OK
ReadX 10815 389120 4096 4096 NT_STATUS_OK
ReadX 10815 454656 4096 4096 NT_STATUS_OK
ReadX 10815 520192 4096 4096 NT_STATUS_OK
WriteX 10815 0 65536 65536 NT_STATUS_OK
WriteX 10815 65536 65536 65536 NT_STATUS_OK
WriteX 10815 131072 65536 65536 NT_STATUS_OK
WriteX 10815 196608 65536 65536 NT_STATUS_OK
WriteX 10815 262144 65536 65536 NT_STATUS_OK
WriteX 10815 327680 65536 65536 NT_STATUS_OK
WriteX 10815 393216 65536 65536 NT_STATUS_OK
WriteX 10815 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10816 NT_STATUS_OK
ReadX 10816 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10817 NT_STATUS_OK
Close 10817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10818 NT_STATUS_OK
WriteX 10818 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10818 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10816 0 8192 8192 NT_STATUS_OK
Flush 10816 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10816 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10816 0 8192 8192 NT_STATUS_OK
Flush 10816 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10816 0 8192 8192 NT_STATUS_OK
Flush 10816 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10816 0 8192 8192 NT_STATUS_OK
Flush 10816 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10820 NT_STATUS_OK
Close 10820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10812 NT_STATUS_OK
Close 10780 NT_STATUS_OK
Close 10813 NT_STATUS_OK
Close 10814 NT_STATUS_OK
Close 10815 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10823 NT_STATUS_OK
WriteX 10823 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10823 258 NT_STATUS_OK
WriteX 10823 0 62591 62591 NT_STATUS_OK
Close 10823 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10825 NT_STATUS_OK
Close 10825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10828 NT_STATUS_OK
WriteX 10828 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10828 258 NT_STATUS_OK
WriteX 10828 0 10845 10845 NT_STATUS_OK
Close 10828 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10830 NT_STATUS_OK
Close 10830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10833 NT_STATUS_OK
WriteX 10833 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10833 258 NT_STATUS_OK
WriteX 10833 0 30118 30118 NT_STATUS_OK
Close 10833 NT_STATUS_OK
WriteX 10816 0 4096 4096 NT_STATUS_OK
WriteX 10818 0 64 64 NT_STATUS_OK
Close 10818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10816 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10835 NT_STATUS_OK
ReadX 10835 0 61440 61440 NT_STATUS_OK
ReadX 10835 61440 4096 4096 NT_STATUS_OK
ReadX 10835 65536 61440 61440 NT_STATUS_OK
ReadX 10835 126976 4096 4096 NT_STATUS_OK
ReadX 10835 131072 61440 61440 NT_STATUS_OK
ReadX 10835 192512 4096 4096 NT_STATUS_OK
ReadX 10835 196608 61440 61440 NT_STATUS_OK
ReadX 10835 258048 4096 4096 NT_STATUS_OK
ReadX 10835 262144 61440 61440 NT_STATUS_OK
ReadX 10835 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10836 NT_STATUS_OK
ReadX 10836 0 61440 61440 NT_STATUS_OK
ReadX 10836 61440 4096 4096 NT_STATUS_OK
ReadX 10836 65536 61440 61440 NT_STATUS_OK
ReadX 10836 126976 4096 4096 NT_STATUS_OK
ReadX 10836 131072 61440 61440 NT_STATUS_OK
ReadX 10836 192512 4096 4096 NT_STATUS_OK
ReadX 10836 196608 61440 61440 NT_STATUS_OK
ReadX 10836 258048 4096 4096 NT_STATUS_OK
ReadX 10836 262144 61440 61440 NT_STATUS_OK
ReadX 10836 323584 4096 4096 NT_STATUS_OK
ReadX 10836 327680 61440 61440 NT_STATUS_OK
ReadX 10836 389120 4096 4096 NT_STATUS_OK
ReadX 10836 393216 61440 61440 NT_STATUS_OK
ReadX 10836 454656 4096 4096 NT_STATUS_OK
ReadX 10836 458752 61440 61440 NT_STATUS_OK
ReadX 10836 520192 4096 4096 NT_STATUS_OK
ReadX 10836 524288 61440 61440 NT_STATUS_OK
ReadX 10836 585728 4096 4096 NT_STATUS_OK
ReadX 10836 589824 61440 61440 NT_STATUS_OK
ReadX 10836 651264 4096 4096 NT_STATUS_OK
ReadX 10836 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10837 NT_STATUS_OK
ReadX 10837 0 61440 61440 NT_STATUS_OK
ReadX 10837 61440 4096 4096 NT_STATUS_OK
ReadX 10837 65536 61440 61440 NT_STATUS_OK
ReadX 10837 126976 4096 4096 NT_STATUS_OK
ReadX 10837 131072 61440 61440 NT_STATUS_OK
ReadX 10837 192512 4096 4096 NT_STATUS_OK
ReadX 10837 196608 61440 61440 NT_STATUS_OK
ReadX 10837 258048 4096 4096 NT_STATUS_OK
ReadX 10837 262144 61440 61440 NT_STATUS_OK
ReadX 10837 323584 4096 4096 NT_STATUS_OK
ReadX 10837 327680 61440 61440 NT_STATUS_OK
ReadX 10837 389120 4096 4096 NT_STATUS_OK
ReadX 10837 393216 61440 61440 NT_STATUS_OK
ReadX 10837 454656 4096 4096 NT_STATUS_OK
ReadX 10837 458752 61440 61440 NT_STATUS_OK
ReadX 10837 520192 4096 4096 NT_STATUS_OK
ReadX 10837 524288 61440 61440 NT_STATUS_OK
ReadX 10837 585728 4096 4096 NT_STATUS_OK
ReadX 10837 589824 61440 61440 NT_STATUS_OK
ReadX 10837 651264 4096 4096 NT_STATUS_OK
ReadX 10837 655360 61440 61440 NT_STATUS_OK
ReadX 10837 716800 4096 4096 NT_STATUS_OK
ReadX 10837 720896 61440 61440 NT_STATUS_OK
ReadX 10837 782336 4096 4096 NT_STATUS_OK
ReadX 10837 786432 61440 61440 NT_STATUS_OK
ReadX 10837 847872 4096 4096 NT_STATUS_OK
ReadX 10837 851968 61440 61440 NT_STATUS_OK
ReadX 10837 913408 4096 4096 NT_STATUS_OK
ReadX 10837 917504 61440 61440 NT_STATUS_OK
ReadX 10837 978944 4096 4096 NT_STATUS_OK
ReadX 10837 983040 61440 61440 NT_STATUS_OK
ReadX 10837 1044480 4096 4096 NT_STATUS_OK
ReadX 10837 1048576 61440 61440 NT_STATUS_OK
ReadX 10837 1110016 4096 4096 NT_STATUS_OK
ReadX 10837 1114112 61440 61440 NT_STATUS_OK
ReadX 10837 1175552 4096 4096 NT_STATUS_OK
ReadX 10837 1179648 61440 61440 NT_STATUS_OK
ReadX 10837 1241088 4096 4096 NT_STATUS_OK
ReadX 10837 1245184 61440 61440 NT_STATUS_OK
ReadX 10837 1306624 4096 4096 NT_STATUS_OK
ReadX 10837 1310720 61440 61440 NT_STATUS_OK
ReadX 10837 1372160 4096 4096 NT_STATUS_OK
ReadX 10837 1376256 61440 61440 NT_STATUS_OK
ReadX 10837 1437696 4096 4096 NT_STATUS_OK
ReadX 10837 1441792 61440 61440 NT_STATUS_OK
ReadX 10837 1503232 4096 4096 NT_STATUS_OK
ReadX 10837 1507328 61440 61440 NT_STATUS_OK
ReadX 10837 1568768 4096 4096 NT_STATUS_OK
ReadX 10837 1572864 61440 61440 NT_STATUS_OK
ReadX 10837 1634304 4096 4096 NT_STATUS_OK
ReadX 10837 1638400 61440 61440 NT_STATUS_OK
ReadX 10837 1699840 4096 4096 NT_STATUS_OK
ReadX 10837 1703936 61440 61440 NT_STATUS_OK
ReadX 10837 1765376 4096 4096 NT_STATUS_OK
ReadX 10837 1769472 61440 61440 NT_STATUS_OK
ReadX 10837 1830912 4096 4096 NT_STATUS_OK
ReadX 10837 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10838 NT_STATUS_OK
Close 10838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10835 NT_STATUS_OK
Close 10836 NT_STATUS_OK
Close 10837 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10840 NT_STATUS_OK
ReadX 10840 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10841 NT_STATUS_OK
ReadX 10841 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10842 NT_STATUS_OK
ReadX 10842 0 4096 4096 NT_STATUS_OK
ReadX 10842 4096 4096 4096 NT_STATUS_OK
ReadX 10842 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10843 NT_STATUS_OK
Close 10843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10840 NT_STATUS_OK
Close 10841 NT_STATUS_OK
Close 10842 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10845 NT_STATUS_OK
ReadX 10845 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10846 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10846 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10847 NT_STATUS_OK
Close 10847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10845 NT_STATUS_OK
Close 10846 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10849 NT_STATUS_OK
ReadX 10849 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10850 NT_STATUS_OK
ReadX 10850 0 8192 8192 NT_STATUS_OK
ReadX 10850 8192 8192 8192 NT_STATUS_OK
ReadX 10850 16384 8192 8192 NT_STATUS_OK
ReadX 10850 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10852 NT_STATUS_OK
Close 10852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10850 NT_STATUS_OK
Close 10849 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10855 NT_STATUS_OK
WriteX 10855 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10855 258 NT_STATUS_OK
WriteX 10855 0 10438 10438 NT_STATUS_OK
Close 10855 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10856 NT_STATUS_OK
Close 10856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10857 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10858 NT_STATUS_OK
Close 10858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10859 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10860 NT_STATUS_OK
Close 10860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10861 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10862 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10863 NT_STATUS_OK
Close 10863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10864 NT_STATUS_OK
ReadX 10864 0 4096 4096 NT_STATUS_OK
ReadX 10864 4096 4096 4096 NT_STATUS_OK
ReadX 10864 8192 4096 4096 NT_STATUS_OK
ReadX 10864 12288 8192 8192 NT_STATUS_OK
ReadX 10864 20480 8192 8192 NT_STATUS_OK
ReadX 10864 28672 8192 8192 NT_STATUS_OK
ReadX 10864 36864 8192 8192 NT_STATUS_OK
ReadX 10864 45056 8192 8192 NT_STATUS_OK
ReadX 10864 53248 8192 8192 NT_STATUS_OK
ReadX 10864 61440 8192 8192 NT_STATUS_OK
ReadX 10864 69632 8192 8192 NT_STATUS_OK
ReadX 10864 77824 8192 8192 NT_STATUS_OK
ReadX 10864 86016 8192 8192 NT_STATUS_OK
ReadX 10864 94208 8192 8192 NT_STATUS_OK
ReadX 10864 102400 8192 8192 NT_STATUS_OK
ReadX 10864 110592 8192 8192 NT_STATUS_OK
ReadX 10864 118784 8192 8192 NT_STATUS_OK
ReadX 10864 126976 8192 8192 NT_STATUS_OK
ReadX 10864 135168 8192 8192 NT_STATUS_OK
ReadX 10864 143360 8192 8192 NT_STATUS_OK
ReadX 10864 151552 8192 8192 NT_STATUS_OK
ReadX 10864 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10864 NT_STATUS_OK
Close 10857 NT_STATUS_OK
Close 10859 NT_STATUS_OK
Close 10861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10866 NT_STATUS_OK
Close 10866 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10869 NT_STATUS_OK
WriteX 10869 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10869 258 NT_STATUS_OK
WriteX 10869 0 28489 28489 NT_STATUS_OK
Close 10869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10870 NT_STATUS_OK
Close 10870 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10872 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10872 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10873 NT_STATUS_OK
Close 10873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10872 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10875 NT_STATUS_OK
ReadX 10875 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10876 NT_STATUS_OK
ReadX 10876 0 8192 8192 NT_STATUS_OK
ReadX 10876 8192 8192 8192 NT_STATUS_OK
ReadX 10876 16384 8192 8192 NT_STATUS_OK
ReadX 10876 24576 8192 8192 NT_STATUS_OK
ReadX 10876 32768 16384 16384 NT_STATUS_OK
ReadX 10876 49152 8192 8192 NT_STATUS_OK
ReadX 10876 57344 8192 8192 NT_STATUS_OK
ReadX 10876 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10878 NT_STATUS_OK
Close 10878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10876 NT_STATUS_OK
Close 10875 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10881 NT_STATUS_OK
WriteX 10881 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10881 258 NT_STATUS_OK
WriteX 10881 0 29253 29253 NT_STATUS_OK
Close 10881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10882 NT_STATUS_OK
Close 10882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10885 NT_STATUS_OK
Close 10885 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10888 NT_STATUS_OK
WriteX 10888 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10888 258 NT_STATUS_OK
WriteX 10888 0 30183 30183 NT_STATUS_OK
Close 10888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10889 NT_STATUS_OK
Close 10889 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10891 NT_STATUS_OK
WriteX 10891 0 510 510 NT_STATUS_OK
WriteX 10891 510 512 512 NT_STATUS_OK
WriteX 10891 1022 510 510 NT_STATUS_OK
WriteX 10891 1532 510 510 NT_STATUS_OK
WriteX 10891 2042 168 168 NT_STATUS_OK
Close 10891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10892 NT_STATUS_OK
Close 10892 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10894 NT_STATUS_OK
ReadX 10894 0 4096 4096 NT_STATUS_OK
WriteX 10894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10895 NT_STATUS_OK
ReadX 10895 61440 4096 4096 NT_STATUS_OK
ReadX 10895 126976 4096 4096 NT_STATUS_OK
WriteX 10895 0 65536 65536 NT_STATUS_OK
WriteX 10895 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10896 NT_STATUS_OK
ReadX 10896 61440 4096 4096 NT_STATUS_OK
ReadX 10896 126976 4096 4096 NT_STATUS_OK
ReadX 10896 192512 4096 4096 NT_STATUS_OK
ReadX 10896 258048 4096 4096 NT_STATUS_OK
WriteX 10896 0 65536 65536 NT_STATUS_OK
WriteX 10896 65536 65536 65536 NT_STATUS_OK
WriteX 10896 131072 65536 65536 NT_STATUS_OK
WriteX 10896 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10897 NT_STATUS_OK
ReadX 10897 61440 4096 4096 NT_STATUS_OK
ReadX 10897 126976 4096 4096 NT_STATUS_OK
ReadX 10897 192512 4096 4096 NT_STATUS_OK
ReadX 10897 258048 4096 4096 NT_STATUS_OK
ReadX 10897 323584 4096 4096 NT_STATUS_OK
ReadX 10897 389120 4096 4096 NT_STATUS_OK
ReadX 10897 454656 4096 4096 NT_STATUS_OK
ReadX 10897 520192 4096 4096 NT_STATUS_OK
WriteX 10897 0 65536 65536 NT_STATUS_OK
WriteX 10897 65536 65536 65536 NT_STATUS_OK
WriteX 10897 131072 65536 65536 NT_STATUS_OK
WriteX 10897 196608 65536 65536 NT_STATUS_OK
WriteX 10897 262144 65536 65536 NT_STATUS_OK
WriteX 10897 327680 65536 65536 NT_STATUS_OK
WriteX 10897 393216 65536 65536 NT_STATUS_OK
WriteX 10897 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10898 NT_STATUS_OK
Close 10898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10894 NT_STATUS_OK
Close 10895 NT_STATUS_OK
Close 10896 NT_STATUS_OK
Close 10897 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10900 NT_STATUS_OK
Close 10900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10904 NT_STATUS_OK
Close 10904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10907 NT_STATUS_OK
Close 10907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10909 NT_STATUS_OK
Close 10909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10913 NT_STATUS_OK
Close 10913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10916 NT_STATUS_OK
Close 10916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10918 NT_STATUS_OK
Close 10918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10922 NT_STATUS_OK
Close 10922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10927 NT_STATUS_OK
Close 10927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10932 NT_STATUS_OK
Close 10932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10937 NT_STATUS_OK
Close 10937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10942 NT_STATUS_OK
Close 10942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10947 NT_STATUS_OK
Close 10947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10952 NT_STATUS_OK
Close 10952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10957 NT_STATUS_OK
Close 10957 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10960 NT_STATUS_OK
Close 10960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10963 NT_STATUS_OK
Close 10963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10966 NT_STATUS_OK
WriteX 10966 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10966 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10966 0 65536 65536 NT_STATUS_OK
WriteX 10966 65536 65536 65536 NT_STATUS_OK
WriteX 10966 131072 65536 65536 NT_STATUS_OK
WriteX 10966 196608 65536 65536 NT_STATUS_OK
WriteX 10966 262144 26634 26634 NT_STATUS_OK
Close 10966 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10971 NT_STATUS_OK
Close 10971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10972 NT_STATUS_OK
Close 10972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10973 NT_STATUS_OK
ReadX 10973 0 4096 4096 NT_STATUS_OK
Close 10973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10974 NT_STATUS_OK
ReadX 10974 0 4096 4096 NT_STATUS_OK
ReadX 10974 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10975 NT_STATUS_OK
Close 10975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10974 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10979 NT_STATUS_OK
Close 10979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10982 NT_STATUS_OK
Close 10982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10984 NT_STATUS_OK
Close 10984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10988 NT_STATUS_OK
Close 10988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10991 NT_STATUS_OK
Close 10991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10993 NT_STATUS_OK
Close 10993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10997 NT_STATUS_OK
Close 10997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11002 NT_STATUS_OK
Close 11002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11007 NT_STATUS_OK
Close 11007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11012 NT_STATUS_OK
Close 11012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11017 NT_STATUS_OK
Close 11017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11022 NT_STATUS_OK
Close 11022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11026 NT_STATUS_OK
Close 11026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11031 NT_STATUS_OK
Close 11031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11036 NT_STATUS_OK
Close 11036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11039 NT_STATUS_OK
Close 11039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11041 NT_STATUS_OK
Close 11041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11051 NT_STATUS_OK
Close 11051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11052 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11053 NT_STATUS_OK
ReadX 11053 0 4096 4096 NT_STATUS_OK
Close 11053 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11054 NT_STATUS_OK
ReadX 11054 0 4096 4096 NT_STATUS_OK
Close 11054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11055 NT_STATUS_OK
ReadX 11055 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11065 NT_STATUS_OK
Close 11065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11067 NT_STATUS_OK
ReadX 11067 0 4096 4096 NT_STATUS_OK
Close 11067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11068 NT_STATUS_OK
ReadX 11068 0 4096 4096 NT_STATUS_OK
Close 11068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11069 NT_STATUS_OK
ReadX 11069 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11055 NT_STATUS_OK
Close 11069 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11098 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11098 0 4096 4096 NT_STATUS_OK
Close 11098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11099 NT_STATUS_OK
ReadX 11099 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11100 NT_STATUS_OK
ReadX 11100 0 4096 4096 NT_STATUS_OK
ReadX 11100 4096 4096 4096 NT_STATUS_OK
ReadX 11100 8192 4096 4096 NT_STATUS_OK
ReadX 11100 12288 4096 4096 NT_STATUS_OK
ReadX 11100 16384 4096 4096 NT_STATUS_OK
ReadX 11100 20480 4096 4096 NT_STATUS_OK
ReadX 11100 24576 4096 4096 NT_STATUS_OK
ReadX 11100 28672 4096 4096 NT_STATUS_OK
ReadX 11100 32768 4096 4096 NT_STATUS_OK
ReadX 11100 36864 4096 4096 NT_STATUS_OK
ReadX 11100 40960 4096 4096 NT_STATUS_OK
ReadX 11100 45056 4096 4096 NT_STATUS_OK
ReadX 11100 49152 4096 4096 NT_STATUS_OK
ReadX 11100 53248 4096 4096 NT_STATUS_OK
ReadX 11100 57344 4096 4096 NT_STATUS_OK
ReadX 11100 61440 4096 4096 NT_STATUS_OK
ReadX 11100 65536 4096 4096 NT_STATUS_OK
ReadX 11100 69632 4096 4096 NT_STATUS_OK
ReadX 11100 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11100 1004 NT_STATUS_OK
WriteX 11100 0 4096 4096 NT_STATUS_OK
Close 11100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11101 NT_STATUS_OK
SET_FILE_INFORMATION 11101 1004 NT_STATUS_OK
Close 11101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11102 NT_STATUS_OK
ReadX 11102 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11103 NT_STATUS_OK
Close 11103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11106 NT_STATUS_OK
WriteX 11106 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11106 258 NT_STATUS_OK
WriteX 11106 0 65536 65536 NT_STATUS_OK
WriteX 11106 65536 19979 19979 NT_STATUS_OK
Close 11106 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11107 NT_STATUS_OK
ReadX 11107 0 4096 4096 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
Flush 11107 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
Flush 11107 NT_STATUS_OK
QUERY_FILE_INFORMATION 11107 1004 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
Flush 11107 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
Flush 11107 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
Flush 11107 NT_STATUS_OK
SET_FILE_INFORMATION 11107 1004 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
Flush 11107 NT_STATUS_OK
Close 11107 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11108 NT_STATUS_OK
ReadX 11108 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11109 NT_STATUS_OK
ReadX 11109 0 4096 4096 NT_STATUS_OK
Close 11108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11110 NT_STATUS_OK
ReadX 11110 0 4096 4096 NT_STATUS_OK
Close 11110 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11111 NT_STATUS_OK
ReadX 11111 0 4096 4096 NT_STATUS_OK
Close 11111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11112 NT_STATUS_OK
ReadX 11112 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11112 1004 NT_STATUS_OK
WriteX 11112 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11113 NT_STATUS_OK
Close 11113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11109 NT_STATUS_OK
Close 11112 NT_STATUS_OK
Close 11102 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11115 NT_STATUS_OK
Close 11115 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11118 NT_STATUS_OK
WriteX 11118 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11118 258 NT_STATUS_OK
WriteX 11118 0 65536 65536 NT_STATUS_OK
WriteX 11118 65536 17654 17654 NT_STATUS_OK
Close 11118 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11119 NT_STATUS_OK
ReadX 11119 0 4096 4096 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
QUERY_FILE_INFORMATION 11119 1004 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
SET_FILE_INFORMATION 11119 1004 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
Close 11119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11120 NT_STATUS_OK
SET_FILE_INFORMATION 11120 1004 NT_STATUS_OK
Close 11120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11121 NT_STATUS_OK
ReadX 11121 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11122 NT_STATUS_OK
Close 11122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11124 NT_STATUS_OK
ReadX 11124 0 4096 4096 NT_STATUS_OK
ReadX 11124 4096 4096 4096 NT_STATUS_OK
ReadX 11124 8192 4096 4096 NT_STATUS_OK
ReadX 11124 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11124 16384 4096 4096 NT_STATUS_OK
ReadX 11124 20480 4096 4096 NT_STATUS_OK
ReadX 11124 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11125 NT_STATUS_OK
ReadX 11125 0 4096 4096 NT_STATUS_OK
Close 11125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11126 NT_STATUS_OK
ReadX 11126 0 4096 4096 NT_STATUS_OK
Close 11126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11127 NT_STATUS_OK
ReadX 11127 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11127 1004 NT_STATUS_OK
WriteX 11127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11128 NT_STATUS_OK
Close 11128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11127 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11130 NT_STATUS_OK
Close 11130 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11133 NT_STATUS_OK
WriteX 11133 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11133 258 NT_STATUS_OK
WriteX 11133 0 65536 65536 NT_STATUS_OK
WriteX 11133 65536 19490 19490 NT_STATUS_OK
Close 11133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11134 NT_STATUS_OK
ReadX 11134 0 4096 4096 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
Flush 11134 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
Flush 11134 NT_STATUS_OK
QUERY_FILE_INFORMATION 11134 1004 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
Flush 11134 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
Flush 11134 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
Flush 11134 NT_STATUS_OK
SET_FILE_INFORMATION 11134 1004 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
Flush 11134 NT_STATUS_OK
Close 11134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11135 NT_STATUS_OK
SET_FILE_INFORMATION 11135 1004 NT_STATUS_OK
Close 11135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11136 NT_STATUS_OK
ReadX 11136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11137 NT_STATUS_OK
Close 11137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11139 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11139 0 4096 4096 NT_STATUS_OK
Close 11139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11140 NT_STATUS_OK
ReadX 11140 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11141 NT_STATUS_OK
ReadX 11141 0 4096 4096 NT_STATUS_OK
ReadX 11141 4096 4096 4096 NT_STATUS_OK
ReadX 11141 8192 4096 4096 NT_STATUS_OK
ReadX 11141 12288 4096 4096 NT_STATUS_OK
ReadX 11141 16384 4096 4096 NT_STATUS_OK
ReadX 11141 20480 4096 4096 NT_STATUS_OK
ReadX 11141 24576 4096 4096 NT_STATUS_OK
ReadX 11141 28672 4096 4096 NT_STATUS_OK
ReadX 11141 32768 4096 4096 NT_STATUS_OK
ReadX 11141 36864 4096 4096 NT_STATUS_OK
ReadX 11141 40960 4096 4096 NT_STATUS_OK
ReadX 11141 45056 4096 4096 NT_STATUS_OK
ReadX 11141 49152 4096 4096 NT_STATUS_OK
ReadX 11141 53248 4096 4096 NT_STATUS_OK
ReadX 11141 57344 4096 4096 NT_STATUS_OK
ReadX 11141 61440 4096 4096 NT_STATUS_OK
ReadX 11141 65536 4096 4096 NT_STATUS_OK
ReadX 11141 69632 4096 4096 NT_STATUS_OK
ReadX 11141 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11141 1004 NT_STATUS_OK
WriteX 11141 0 4096 4096 NT_STATUS_OK
Close 11141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11142 NT_STATUS_OK
SET_FILE_INFORMATION 11142 1004 NT_STATUS_OK
Close 11142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11143 NT_STATUS_OK
ReadX 11143 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11144 NT_STATUS_OK
Close 11144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11136 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11147 NT_STATUS_OK
WriteX 11147 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11147 258 NT_STATUS_OK
WriteX 11147 0 65536 65536 NT_STATUS_OK
WriteX 11147 65536 8866 8866 NT_STATUS_OK
Close 11147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11148 NT_STATUS_OK
ReadX 11148 0 4096 4096 NT_STATUS_OK
WriteX 11148 0 4096 4096 NT_STATUS_OK
Flush 11148 NT_STATUS_OK
SET_FILE_INFORMATION 11148 1004 NT_STATUS_OK
WriteX 11148 0 4096 4096 NT_STATUS_OK
Flush 11148 NT_STATUS_OK
Close 11148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11149 NT_STATUS_OK
ReadX 11149 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11150 NT_STATUS_OK
ReadX 11150 0 4096 4096 NT_STATUS_OK
Close 11150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11151 NT_STATUS_OK
ReadX 11151 0 4096 4096 NT_STATUS_OK
Close 11151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11152 NT_STATUS_OK
ReadX 11152 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11152 1004 NT_STATUS_OK
WriteX 11152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11153 NT_STATUS_OK
Close 11153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11152 NT_STATUS_OK
Close 11143 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11155 NT_STATUS_OK
Close 11155 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11158 NT_STATUS_OK
WriteX 11158 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11158 258 NT_STATUS_OK
WriteX 11158 0 65536 65536 NT_STATUS_OK
WriteX 11158 65536 9298 9298 NT_STATUS_OK
Close 11158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11159 NT_STATUS_OK
ReadX 11159 0 4096 4096 NT_STATUS_OK
WriteX 11159 0 4096 4096 NT_STATUS_OK
Flush 11159 NT_STATUS_OK
SET_FILE_INFORMATION 11159 1004 NT_STATUS_OK
WriteX 11159 0 4096 4096 NT_STATUS_OK
Flush 11159 NT_STATUS_OK
Close 11159 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11160 NT_STATUS_OK
SET_FILE_INFORMATION 11160 1004 NT_STATUS_OK
Close 11160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11161 NT_STATUS_OK
ReadX 11161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11162 NT_STATUS_OK
Close 11162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11165 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11165 0 4096 4096 NT_STATUS_OK
Close 11165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11166 NT_STATUS_OK
ReadX 11166 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11166 4096 4096 4096 NT_STATUS_OK
ReadX 11166 8192 4096 4096 NT_STATUS_OK
ReadX 11166 12288 4096 4096 NT_STATUS_OK
ReadX 11166 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11167 NT_STATUS_OK
ReadX 11167 0 4096 4096 NT_STATUS_OK
Close 11167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11168 NT_STATUS_OK
ReadX 11168 0 4096 4096 NT_STATUS_OK
Close 11168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11169 NT_STATUS_OK
ReadX 11169 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11169 1004 NT_STATUS_OK
WriteX 11169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11170 NT_STATUS_OK
Close 11170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11166 NT_STATUS_OK
Close 11169 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11172 NT_STATUS_OK
Close 11172 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11175 NT_STATUS_OK
WriteX 11175 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11175 258 NT_STATUS_OK
WriteX 11175 0 65536 65536 NT_STATUS_OK
WriteX 11175 65536 11540 11540 NT_STATUS_OK
Close 11175 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11176 NT_STATUS_OK
ReadX 11176 0 4096 4096 NT_STATUS_OK
WriteX 11176 0 4096 4096 NT_STATUS_OK
Flush 11176 NT_STATUS_OK
SET_FILE_INFORMATION 11176 1004 NT_STATUS_OK
WriteX 11176 0 4096 4096 NT_STATUS_OK
Flush 11176 NT_STATUS_OK
Close 11176 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11177 NT_STATUS_OK
SET_FILE_INFORMATION 11177 1004 NT_STATUS_OK
Close 11177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11178 NT_STATUS_OK
ReadX 11178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11179 NT_STATUS_OK
Close 11179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11181 NT_STATUS_OK
ReadX 11181 61440 4096 4096 NT_STATUS_OK
ReadX 11181 126976 4096 4096 NT_STATUS_OK
WriteX 11181 0 65536 65536 NT_STATUS_OK
WriteX 11181 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11182 NT_STATUS_OK
ReadX 11182 61440 4096 4096 NT_STATUS_OK
ReadX 11182 126976 4096 4096 NT_STATUS_OK
ReadX 11182 192512 4096 4096 NT_STATUS_OK
ReadX 11182 258048 4096 4096 NT_STATUS_OK
WriteX 11182 0 65536 65536 NT_STATUS_OK
WriteX 11182 65536 65536 65536 NT_STATUS_OK
WriteX 11182 131072 65536 65536 NT_STATUS_OK
WriteX 11182 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11183 NT_STATUS_OK
ReadX 11183 61440 4096 4096 NT_STATUS_OK
ReadX 11183 126976 4096 4096 NT_STATUS_OK
ReadX 11183 192512 4096 4096 NT_STATUS_OK
ReadX 11183 258048 4096 4096 NT_STATUS_OK
ReadX 11183 323584 4096 4096 NT_STATUS_OK
ReadX 11183 389120 4096 4096 NT_STATUS_OK
ReadX 11183 454656 4096 4096 NT_STATUS_OK
ReadX 11183 520192 4096 4096 NT_STATUS_OK
WriteX 11183 0 65536 65536 NT_STATUS_OK
WriteX 11183 65536 65536 65536 NT_STATUS_OK
WriteX 11183 131072 65536 65536 NT_STATUS_OK
WriteX 11183 196608 65536 65536 NT_STATUS_OK
WriteX 11183 262144 65536 65536 NT_STATUS_OK
WriteX 11183 327680 65536 65536 NT_STATUS_OK
WriteX 11183 393216 65536 65536 NT_STATUS_OK
WriteX 11183 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11184 NT_STATUS_OK
ReadX 11184 0 4096 4096 NT_STATUS_OK
ReadX 11184 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11185 NT_STATUS_OK
WriteX 11185 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11185 258 NT_STATUS_OK
WriteX 11185 0 53 53 NT_STATUS_OK
Close 11185 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11186 NT_STATUS_OK
Close 11186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11178 NT_STATUS_OK
Close 11124 NT_STATUS_OK
Close 11181 NT_STATUS_OK
Close 11182 NT_STATUS_OK
Close 11183 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11184 8192 4096 4096 NT_STATUS_OK
ReadX 11184 12288 4096 4096 NT_STATUS_OK
WriteX 11188 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11188 258 NT_STATUS_OK
ReadX 11184 16384 4096 4096 NT_STATUS_OK
ReadX 11184 20480 4096 4096 NT_STATUS_OK
WriteX 11188 0 15360 15360 NT_STATUS_OK
Close 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11189 NT_STATUS_OK
ReadX 11189 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11189 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11189 1004 NT_STATUS_OK
WriteX 11189 0 4096 4096 NT_STATUS_OK
Close 11189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11190 NT_STATUS_OK
Close 11190 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11192 NT_STATUS_OK
ReadX 11192 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11193 NT_STATUS_OK
Close 11193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11192 4096 4096 4096 NT_STATUS_OK
ReadX 11192 8192 4096 4096 NT_STATUS_OK
ReadX 11192 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11195 NT_STATUS_OK
ReadX 11195 0 4096 4096 NT_STATUS_OK
ReadX 11195 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11196 NT_STATUS_OK
ReadX 11196 0 4096 4096 NT_STATUS_OK
ReadX 11196 4096 4096 4096 NT_STATUS_OK
ReadX 11196 8192 4096 4096 NT_STATUS_OK
Close 11195 NT_STATUS_OK
Close 11196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11197 NT_STATUS_OK
WriteX 11197 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11197 258 NT_STATUS_OK
WriteX 11197 0 15360 15360 NT_STATUS_OK
Close 11197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11198 NT_STATUS_OK
ReadX 11198 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11198 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11198 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11199 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11201 NT_STATUS_OK
ReadX 11201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11202 NT_STATUS_OK
SET_FILE_INFORMATION 11202 1004 NT_STATUS_OK
Close 11202 NT_STATUS_OK
WriteX 11198 0 4096 4096 NT_STATUS_OK
Close 11198 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11203 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11205 NT_STATUS_OK
ReadX 11205 0 4096 4096 NT_STATUS_OK
ReadX 11205 4096 4096 4096 NT_STATUS_OK
ReadX 11205 8192 4096 4096 NT_STATUS_OK
ReadX 11205 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11205 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11205 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11206 NT_STATUS_OK
ReadX 11206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11207 NT_STATUS_OK
WriteX 11207 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11207 258 NT_STATUS_OK
WriteX 11207 0 53 53 NT_STATUS_OK
Close 11207 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11208 NT_STATUS_OK
Close 11208 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11206 4096 4096 4096 NT_STATUS_OK
ReadX 11206 8192 4096 4096 NT_STATUS_OK
ReadX 11206 12288 4096 4096 NT_STATUS_OK
WriteX 11210 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11210 258 NT_STATUS_OK
WriteX 11210 0 12006 12006 NT_STATUS_OK
Close 11210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11211 NT_STATUS_OK
ReadX 11211 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11211 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11211 1004 NT_STATUS_OK
WriteX 11211 0 4096 4096 NT_STATUS_OK
Close 11211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11212 NT_STATUS_OK
Close 11212 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11214 NT_STATUS_OK
ReadX 11214 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11215 NT_STATUS_OK
Close 11215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11214 4096 4096 4096 NT_STATUS_OK
ReadX 11214 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11217 NT_STATUS_OK
WriteX 11217 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11217 258 NT_STATUS_OK
WriteX 11217 0 11991 11991 NT_STATUS_OK
Close 11217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11218 NT_STATUS_OK
ReadX 11218 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11218 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11218 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11214 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11219 NT_STATUS_OK
Close 11219 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11221 NT_STATUS_OK
ReadX 11221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11222 NT_STATUS_OK
SET_FILE_INFORMATION 11222 1004 NT_STATUS_OK
Close 11222 NT_STATUS_OK
WriteX 11218 0 4096 4096 NT_STATUS_OK
Close 11218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11223 NT_STATUS_OK
Close 11223 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11225 NT_STATUS_OK
ReadX 11225 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11226 NT_STATUS_OK
Close 11226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11225 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11225 1004 NT_STATUS_OK
ReadX 11225 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11225 1004 NT_STATUS_OK
WriteX 11225 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11225 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11225 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11225 1004 NT_STATUS_OK
Close 11201 NT_STATUS_OK
WriteX 11205 0 19054 19054 NT_STATUS_OK
WriteX 11225 0 12288 12288 NT_STATUS_OK
Close 11221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11228 NT_STATUS_OK
Close 11228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11205 NT_STATUS_OK
Close 11225 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11230 NT_STATUS_OK
Close 11230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11232 NT_STATUS_OK
ReadX 11232 0 61440 61440 NT_STATUS_OK
ReadX 11232 61440 4096 4096 NT_STATUS_OK
ReadX 11232 65536 61440 61440 NT_STATUS_OK
ReadX 11232 126976 4096 4096 NT_STATUS_OK
ReadX 11232 131072 61440 61440 NT_STATUS_OK
ReadX 11232 192512 4096 4096 NT_STATUS_OK
ReadX 11232 196608 61440 61440 NT_STATUS_OK
ReadX 11232 258048 4096 4096 NT_STATUS_OK
ReadX 11232 262144 61440 61440 NT_STATUS_OK
ReadX 11232 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11233 NT_STATUS_OK
ReadX 11233 0 61440 61440 NT_STATUS_OK
ReadX 11233 61440 4096 4096 NT_STATUS_OK
ReadX 11233 65536 61440 61440 NT_STATUS_OK
ReadX 11233 126976 4096 4096 NT_STATUS_OK
ReadX 11233 131072 61440 61440 NT_STATUS_OK
ReadX 11233 192512 4096 4096 NT_STATUS_OK
ReadX 11233 196608 61440 61440 NT_STATUS_OK
ReadX 11233 258048 4096 4096 NT_STATUS_OK
ReadX 11233 262144 61440 61440 NT_STATUS_OK
ReadX 11233 323584 4096 4096 NT_STATUS_OK
ReadX 11233 327680 61440 61440 NT_STATUS_OK
ReadX 11233 389120 4096 4096 NT_STATUS_OK
ReadX 11233 393216 61440 61440 NT_STATUS_OK
ReadX 11233 454656 4096 4096 NT_STATUS_OK
ReadX 11233 458752 61440 61440 NT_STATUS_OK
ReadX 11233 520192 4096 4096 NT_STATUS_OK
ReadX 11233 524288 61440 61440 NT_STATUS_OK
ReadX 11233 585728 4096 4096 NT_STATUS_OK
ReadX 11233 589824 61440 61440 NT_STATUS_OK
ReadX 11233 651264 4096 4096 NT_STATUS_OK
ReadX 11233 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11234 NT_STATUS_OK
ReadX 11234 0 61440 61440 NT_STATUS_OK
ReadX 11234 61440 4096 4096 NT_STATUS_OK
ReadX 11234 65536 61440 61440 NT_STATUS_OK
ReadX 11234 126976 4096 4096 NT_STATUS_OK
ReadX 11234 131072 61440 61440 NT_STATUS_OK
ReadX 11234 192512 4096 4096 NT_STATUS_OK
ReadX 11234 196608 61440 61440 NT_STATUS_OK
ReadX 11234 258048 4096 4096 NT_STATUS_OK
ReadX 11234 262144 61440 61440 NT_STATUS_OK
ReadX 11234 323584 4096 4096 NT_STATUS_OK
ReadX 11234 327680 61440 61440 NT_STATUS_OK
ReadX 11234 389120 4096 4096 NT_STATUS_OK
ReadX 11234 393216 61440 61440 NT_STATUS_OK
ReadX 11234 454656 4096 4096 NT_STATUS_OK
ReadX 11234 458752 61440 61440 NT_STATUS_OK
ReadX 11234 520192 4096 4096 NT_STATUS_OK
ReadX 11234 524288 61440 61440 NT_STATUS_OK
ReadX 11234 585728 4096 4096 NT_STATUS_OK
ReadX 11234 589824 61440 61440 NT_STATUS_OK
ReadX 11234 651264 4096 4096 NT_STATUS_OK
ReadX 11234 655360 61440 61440 NT_STATUS_OK
ReadX 11234 716800 4096 4096 NT_STATUS_OK
ReadX 11234 720896 61440 61440 NT_STATUS_OK
ReadX 11234 782336 4096 4096 NT_STATUS_OK
ReadX 11234 786432 61440 61440 NT_STATUS_OK
ReadX 11234 847872 4096 4096 NT_STATUS_OK
ReadX 11234 851968 61440 61440 NT_STATUS_OK
ReadX 11234 913408 4096 4096 NT_STATUS_OK
ReadX 11234 917504 61440 61440 NT_STATUS_OK
ReadX 11234 978944 4096 4096 NT_STATUS_OK
ReadX 11234 983040 61440 61440 NT_STATUS_OK
ReadX 11234 1044480 4096 4096 NT_STATUS_OK
ReadX 11234 1048576 61440 61440 NT_STATUS_OK
ReadX 11234 1110016 4096 4096 NT_STATUS_OK
ReadX 11234 1114112 61440 61440 NT_STATUS_OK
ReadX 11234 1175552 4096 4096 NT_STATUS_OK
ReadX 11234 1179648 61440 61440 NT_STATUS_OK
ReadX 11234 1241088 4096 4096 NT_STATUS_OK
ReadX 11234 1245184 61440 61440 NT_STATUS_OK
ReadX 11234 1306624 4096 4096 NT_STATUS_OK
ReadX 11234 1310720 61440 61440 NT_STATUS_OK
ReadX 11234 1372160 4096 4096 NT_STATUS_OK
ReadX 11234 1376256 61440 61440 NT_STATUS_OK
ReadX 11234 1437696 4096 4096 NT_STATUS_OK
ReadX 11234 1441792 61440 61440 NT_STATUS_OK
ReadX 11234 1503232 4096 4096 NT_STATUS_OK
ReadX 11234 1507328 61440 61440 NT_STATUS_OK
ReadX 11234 1568768 4096 4096 NT_STATUS_OK
ReadX 11234 1572864 61440 61440 NT_STATUS_OK
ReadX 11234 1634304 4096 4096 NT_STATUS_OK
ReadX 11234 1638400 61440 61440 NT_STATUS_OK
ReadX 11234 1699840 4096 4096 NT_STATUS_OK
ReadX 11234 1703936 61440 61440 NT_STATUS_OK
ReadX 11234 1765376 4096 4096 NT_STATUS_OK
ReadX 11234 1769472 61440 61440 NT_STATUS_OK
ReadX 11234 1830912 4096 4096 NT_STATUS_OK
ReadX 11234 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11235 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11236 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11237 NT_STATUS_OK
ReadX 11237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11238 NT_STATUS_OK
ReadX 11238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11239 NT_STATUS_OK
ReadX 11239 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11240 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11241 NT_STATUS_OK
QUERY_FILE_INFORMATION 11241 1004 NT_STATUS_OK
WriteX 11241 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11241 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11242 NT_STATUS_OK
Close 11242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11243 NT_STATUS_OK
WriteX 11243 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11243 258 NT_STATUS_OK
WriteX 11243 0 491 491 NT_STATUS_OK
Close 11243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11241 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11246 NT_STATUS_OK
Close 11246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11247 NT_STATUS_OK
WriteX 11247 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11247 258 NT_STATUS_OK
WriteX 11247 0 543 543 NT_STATUS_OK
Close 11247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11248 NT_STATUS_OK
ReadX 11248 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11232 NT_STATUS_OK
Close 11233 NT_STATUS_OK
Close 11234 NT_STATUS_OK
Close 11248 NT_STATUS_OK
Close 11236 NT_STATUS_OK
Close 11237 NT_STATUS_OK
Close 11238 NT_STATUS_OK
Close 11239 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11252 NT_STATUS_OK
ReadX 11252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11253 NT_STATUS_OK
ReadX 11253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11254 NT_STATUS_OK
ReadX 11254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11255 NT_STATUS_OK
ReadX 11255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11256 NT_STATUS_OK
ReadX 11256 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11260 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11261 NT_STATUS_OK
QUERY_FILE_INFORMATION 11261 1004 NT_STATUS_OK
WriteX 11261 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11261 258 NT_STATUS_OK
WriteX 11261 0 2048 2048 NT_STATUS_OK
Close 11261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11262 NT_STATUS_OK
ReadX 11262 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11262 0 4096 4096 NT_STATUS_OK
Flush 11262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11262 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11266 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11267 NT_STATUS_OK
WriteX 11267 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11267 258 NT_STATUS_OK
WriteX 11267 0 2048 2048 NT_STATUS_OK
Close 11267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11268 NT_STATUS_OK
ReadX 11268 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11272 NT_STATUS_OK
Close 11272 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11273 NT_STATUS_OK
WriteX 11273 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11273 258 NT_STATUS_OK
WriteX 11273 0 2048 2048 NT_STATUS_OK
Close 11273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11274 NT_STATUS_OK
ReadX 11274 0 2048 2048 NT_STATUS_OK
ReadX 11252 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11256 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11268 0 4096 4096 NT_STATUS_OK
WriteX 11252 0 8192 8192 NT_STATUS_OK
WriteX 11253 0 4096 4096 NT_STATUS_OK
WriteX 11254 0 4096 4096 NT_STATUS_OK
ReadX 11268 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11277 NT_STATUS_OK
ReadX 11277 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11278 NT_STATUS_OK
QUERY_FILE_INFORMATION 11278 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11277 NT_STATUS_OK
Close 11253 NT_STATUS_OK
Close 11254 NT_STATUS_OK
Close 11255 NT_STATUS_OK
Close 11268 NT_STATUS_OK
Close 11252 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11280 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11281 NT_STATUS_OK
ReadX 11281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11282 NT_STATUS_OK
ReadX 11282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11283 NT_STATUS_OK
ReadX 11283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11284 NT_STATUS_OK
ReadX 11284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11285 NT_STATUS_OK
ReadX 11285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11286 NT_STATUS_OK
ReadX 11286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11287 NT_STATUS_OK
ReadX 11287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11288 NT_STATUS_OK
ReadX 11288 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11289 NT_STATUS_OK
ReadX 11289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11290 NT_STATUS_OK
ReadX 11290 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11291 NT_STATUS_OK
ReadX 11291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11292 NT_STATUS_OK
ReadX 11292 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11293 NT_STATUS_OK
ReadX 11293 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11297 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11297 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11298 NT_STATUS_OK
QUERY_FILE_INFORMATION 11298 1004 NT_STATUS_OK
WriteX 11298 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11298 258 NT_STATUS_OK
WriteX 11298 0 2048 2048 NT_STATUS_OK
Close 11298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11299 NT_STATUS_OK
ReadX 11299 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11300 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11301 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11301 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11305 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11306 NT_STATUS_OK
QUERY_FILE_INFORMATION 11306 1004 NT_STATUS_OK
WriteX 11306 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11306 258 NT_STATUS_OK
WriteX 11306 0 2048 2048 NT_STATUS_OK
Close 11306 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11307 NT_STATUS_OK
ReadX 11307 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11299 0 4096 4096 NT_STATUS_OK
Flush 11299 NT_STATUS_OK
WriteX 11307 0 4096 4096 NT_STATUS_OK
Flush 11307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11299 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11307 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11301 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11308 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11308 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11309 NT_STATUS_OK
WriteX 11309 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11309 258 NT_STATUS_OK
WriteX 11309 0 4096 4096 NT_STATUS_OK
Close 11309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11310 NT_STATUS_OK
ReadX 11310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11311 NT_STATUS_OK
Close 11311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11312 NT_STATUS_OK
WriteX 11312 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11312 258 NT_STATUS_OK
WriteX 11312 0 4096 4096 NT_STATUS_OK
Close 11312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11313 NT_STATUS_OK
ReadX 11313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11313 0 4096 4096 NT_STATUS_OK
Close 11310 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11293 NT_STATUS_OK
Close 11287 NT_STATUS_OK
Close 11301 NT_STATUS_OK
Close 11290 NT_STATUS_OK
Close 11291 NT_STATUS_OK
Close 11292 NT_STATUS_OK
Close 11288 NT_STATUS_OK
Close 11281 NT_STATUS_OK
Close 11282 NT_STATUS_OK
Close 11285 NT_STATUS_OK
Close 11286 NT_STATUS_OK
Close 11283 NT_STATUS_OK
Close 11284 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11316 NT_STATUS_OK
Close 11316 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11318 NT_STATUS_OK
ReadX 11318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11319 NT_STATUS_OK
Close 11319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11320 NT_STATUS_OK
WriteX 11320 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11320 258 NT_STATUS_OK
WriteX 11320 0 2048 2048 NT_STATUS_OK
Close 11320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11321 NT_STATUS_OK
ReadX 11321 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11322 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11323 NT_STATUS_OK
ReadX 11323 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11324 NT_STATUS_OK
ReadX 11324 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11325 NT_STATUS_OK
ReadX 11325 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11326 NT_STATUS_OK
ReadX 11326 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11327 NT_STATUS_OK
ReadX 11327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11328 NT_STATUS_OK
ReadX 11328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11329 NT_STATUS_OK
ReadX 11329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11330 NT_STATUS_OK
ReadX 11330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11331 NT_STATUS_OK
ReadX 11331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11332 NT_STATUS_OK
ReadX 11332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11333 NT_STATUS_OK
ReadX 11333 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11334 NT_STATUS_OK
ReadX 11334 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11335 NT_STATUS_OK
QUERY_FILE_INFORMATION 11335 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11318 NT_STATUS_OK
Close 11321 NT_STATUS_OK
Close 11333 NT_STATUS_OK
Close 11328 NT_STATUS_OK
Close 11329 NT_STATUS_OK
Close 11330 NT_STATUS_OK
Close 11331 NT_STATUS_OK
Close 11332 NT_STATUS_OK
Close 11334 NT_STATUS_OK
Close 11322 NT_STATUS_OK
Close 11323 NT_STATUS_OK
Close 11326 NT_STATUS_OK
Close 11327 NT_STATUS_OK
Close 11324 NT_STATUS_OK
Close 11325 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11307 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11337 NT_STATUS_OK
QUERY_FILE_INFORMATION 11337 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11339 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11340 NT_STATUS_OK
ReadX 11340 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11341 NT_STATUS_OK
ReadX 11341 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11342 NT_STATUS_OK
ReadX 11342 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11343 NT_STATUS_OK
ReadX 11343 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11344 NT_STATUS_OK
ReadX 11344 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11345 NT_STATUS_OK
ReadX 11345 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11346 NT_STATUS_OK
ReadX 11346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11347 NT_STATUS_OK
ReadX 11347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11348 NT_STATUS_OK
ReadX 11348 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11349 NT_STATUS_OK
ReadX 11349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11350 NT_STATUS_OK
ReadX 11350 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11351 NT_STATUS_OK
ReadX 11351 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11352 NT_STATUS_OK
ReadX 11352 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11356 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11357 NT_STATUS_OK
QUERY_FILE_INFORMATION 11357 1004 NT_STATUS_OK
WriteX 11357 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11357 258 NT_STATUS_OK
WriteX 11357 0 2048 2048 NT_STATUS_OK
Close 11357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11358 NT_STATUS_OK
ReadX 11358 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11359 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11360 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11360 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11361 NT_STATUS_OK
ReadX 11361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11362 NT_STATUS_OK
ReadX 11362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11363 NT_STATUS_OK
ReadX 11363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11364 NT_STATUS_OK
ReadX 11364 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11368 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11369 NT_STATUS_OK
QUERY_FILE_INFORMATION 11369 1004 NT_STATUS_OK
WriteX 11369 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11369 258 NT_STATUS_OK
WriteX 11369 0 2048 2048 NT_STATUS_OK
Close 11369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11370 NT_STATUS_OK
ReadX 11370 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11371 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11372 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11372 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11376 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11377 NT_STATUS_OK
QUERY_FILE_INFORMATION 11377 1004 NT_STATUS_OK
WriteX 11377 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11377 258 NT_STATUS_OK
WriteX 11377 0 2048 2048 NT_STATUS_OK
Close 11377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11378 NT_STATUS_OK
ReadX 11378 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11358 0 4096 4096 NT_STATUS_OK
Flush 11358 NT_STATUS_OK
WriteX 11370 0 4096 4096 NT_STATUS_OK
Flush 11370 NT_STATUS_OK
WriteX 11378 0 4096 4096 NT_STATUS_OK
Flush 11378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11358 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11370 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11378 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11360 4096 16384 16384 NT_STATUS_OK
ReadX 11340 4096 16384 16384 NT_STATUS_OK
ReadX 11372 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11379 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11380 NT_STATUS_OK
ReadX 11380 0 2048 2048 NT_STATUS_OK
WriteX 11380 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11381 NT_STATUS_OK
QUERY_FILE_INFORMATION 11381 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11380 NT_STATUS_OK
Close 11364 NT_STATUS_OK
Close 11352 NT_STATUS_OK
Close 11344 NT_STATUS_OK
Close 11360 NT_STATUS_OK
Close 11361 NT_STATUS_OK
Close 11362 NT_STATUS_OK
Close 11363 NT_STATUS_OK
Close 11351 NT_STATUS_OK
Close 11372 NT_STATUS_OK
Close 11346 NT_STATUS_OK
Close 11349 NT_STATUS_OK
Close 11350 NT_STATUS_OK
Close 11347 NT_STATUS_OK
Close 11348 NT_STATUS_OK
Close 11340 NT_STATUS_OK
Close 11341 NT_STATUS_OK
Close 11342 NT_STATUS_OK
Close 11343 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11383 NT_STATUS_OK
QUERY_FILE_INFORMATION 11383 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11385 NT_STATUS_OK
QUERY_FILE_INFORMATION 11385 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11387 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11388 NT_STATUS_OK
ReadX 11388 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11389 NT_STATUS_OK
ReadX 11389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11390 NT_STATUS_OK
ReadX 11390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11391 NT_STATUS_OK
ReadX 11391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11392 NT_STATUS_OK
ReadX 11392 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11388 4096 16384 16384 NT_STATUS_OK
WriteX 11388 0 4096 4096 NT_STATUS_OK
WriteX 11389 0 4096 4096 NT_STATUS_OK
WriteX 11390 0 4096 4096 NT_STATUS_OK
WriteX 11391 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11393 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11394 NT_STATUS_OK
ReadX 11394 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11395 NT_STATUS_OK
ReadX 11395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11396 NT_STATUS_OK
ReadX 11396 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11397 NT_STATUS_OK
ReadX 11397 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11398 NT_STATUS_OK
ReadX 11398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11399 NT_STATUS_OK
ReadX 11399 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11400 NT_STATUS_OK
ReadX 11400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11401 NT_STATUS_OK
ReadX 11401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11402 NT_STATUS_OK
ReadX 11402 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11403 NT_STATUS_OK
ReadX 11403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11404 NT_STATUS_OK
ReadX 11404 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11405 NT_STATUS_OK
ReadX 11405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11406 NT_STATUS_OK
ReadX 11406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11407 NT_STATUS_OK
ReadX 11407 0 8192 8192 NT_STATUS_OK
ReadX 11394 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11408 0 4096 4096 NT_STATUS_OK
ReadX 11408 4096 4096 4096 NT_STATUS_OK
ReadX 11408 8192 4096 4096 NT_STATUS_OK
WriteX 11394 0 4096 4096 NT_STATUS_OK
WriteX 11395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11409 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11409 0 4096 4096 NT_STATUS_OK
ReadX 11409 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11388 0 4096 4096 NT_STATUS_OK
WriteX 11389 0 4096 4096 NT_STATUS_OK
WriteX 11390 0 4096 4096 NT_STATUS_OK
WriteX 11391 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11413 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11414 NT_STATUS_OK
QUERY_FILE_INFORMATION 11414 1004 NT_STATUS_OK
WriteX 11414 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11414 258 NT_STATUS_OK
WriteX 11414 0 2048 2048 NT_STATUS_OK
Close 11414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11415 NT_STATUS_OK
ReadX 11415 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11415 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11415 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11416 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11417 NT_STATUS_OK
ReadX 11417 0 4096 4096 NT_STATUS_OK
ReadX 11417 4096 4096 4096 NT_STATUS_OK
WriteX 11417 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11415 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11418 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11418 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11419 NT_STATUS_OK
ReadX 11419 0 4096 4096 NT_STATUS_OK
ReadX 11419 4096 4096 4096 NT_STATUS_OK
WriteX 11419 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11420 NT_STATUS_OK
QUERY_FILE_INFORMATION 11420 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11407 NT_STATUS_OK
Close 11392 NT_STATUS_OK
Close 11388 NT_STATUS_OK
Close 11389 NT_STATUS_OK
Close 11390 NT_STATUS_OK
Close 11391 NT_STATUS_OK
Close 11400 NT_STATUS_OK
Close 11405 NT_STATUS_OK
Close 11401 NT_STATUS_OK
Close 11402 NT_STATUS_OK
Close 11403 NT_STATUS_OK
Close 11404 NT_STATUS_OK
Close 11406 NT_STATUS_OK
Close 11394 NT_STATUS_OK
Close 11395 NT_STATUS_OK
Close 11398 NT_STATUS_OK
Close 11399 NT_STATUS_OK
Close 11396 NT_STATUS_OK
Close 11397 NT_STATUS_OK
Close 11419 NT_STATUS_OK
Close 11408 NT_STATUS_OK
Close 11409 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11422 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11422 0 4096 4096 NT_STATUS_OK
ReadX 11422 4096 4096 4096 NT_STATUS_OK
ReadX 11422 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11423 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11423 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11424 NT_STATUS_OK
ReadX 11424 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11425 NT_STATUS_OK
ReadX 11425 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11426 NT_STATUS_OK
ReadX 11426 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11427 NT_STATUS_OK
ReadX 11427 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11428 NT_STATUS_OK
ReadX 11428 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11429 NT_STATUS_OK
ReadX 11429 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11430 NT_STATUS_OK
ReadX 11430 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11431 NT_STATUS_OK
ReadX 11431 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11432 NT_STATUS_OK
ReadX 11432 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11433 NT_STATUS_OK
ReadX 11433 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11434 NT_STATUS_OK
ReadX 11434 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11435 NT_STATUS_OK
ReadX 11435 0 4096 4096 NT_STATUS_OK
ReadX 11423 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11439 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11439 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11440 NT_STATUS_OK
QUERY_FILE_INFORMATION 11440 1004 NT_STATUS_OK
WriteX 11440 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11440 258 NT_STATUS_OK
WriteX 11440 0 2048 2048 NT_STATUS_OK
Close 11440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11441 NT_STATUS_OK
ReadX 11441 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11441 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11445 NT_STATUS_OK
Close 11445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11446 NT_STATUS_OK
QUERY_FILE_INFORMATION 11446 1004 NT_STATUS_OK
WriteX 11446 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11446 258 NT_STATUS_OK
WriteX 11446 0 2048 2048 NT_STATUS_OK
Close 11446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11447 NT_STATUS_OK
ReadX 11447 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11447 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11430 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11441 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11448 NT_STATUS_OK
QUERY_FILE_INFORMATION 11448 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11434 NT_STATUS_OK
Close 11429 NT_STATUS_OK
Close 11435 NT_STATUS_OK
Close 11423 NT_STATUS_OK
Close 11424 NT_STATUS_OK
Close 11427 NT_STATUS_OK
Close 11428 NT_STATUS_OK
Close 11425 NT_STATUS_OK
Close 11426 NT_STATUS_OK
Close 11430 NT_STATUS_OK
Close 11431 NT_STATUS_OK
Close 11432 NT_STATUS_OK
Close 11433 NT_STATUS_OK
Close 11422 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11450 NT_STATUS_OK
QUERY_FILE_INFORMATION 11450 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11450 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11452 NT_STATUS_OK
ReadX 11452 61440 4096 4096 NT_STATUS_OK
ReadX 11452 126976 4096 4096 NT_STATUS_OK
WriteX 11452 0 65536 65536 NT_STATUS_OK
WriteX 11452 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11453 NT_STATUS_OK
ReadX 11453 61440 4096 4096 NT_STATUS_OK
ReadX 11453 126976 4096 4096 NT_STATUS_OK
ReadX 11453 192512 4096 4096 NT_STATUS_OK
ReadX 11453 258048 4096 4096 NT_STATUS_OK
WriteX 11453 0 65536 65536 NT_STATUS_OK
WriteX 11453 65536 65536 65536 NT_STATUS_OK
WriteX 11453 131072 65536 65536 NT_STATUS_OK
WriteX 11453 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11454 NT_STATUS_OK
ReadX 11454 61440 4096 4096 NT_STATUS_OK
ReadX 11454 126976 4096 4096 NT_STATUS_OK
ReadX 11454 192512 4096 4096 NT_STATUS_OK
ReadX 11454 258048 4096 4096 NT_STATUS_OK
ReadX 11454 323584 4096 4096 NT_STATUS_OK
ReadX 11454 389120 4096 4096 NT_STATUS_OK
ReadX 11454 454656 4096 4096 NT_STATUS_OK
ReadX 11454 520192 4096 4096 NT_STATUS_OK
WriteX 11454 0 65536 65536 NT_STATUS_OK
WriteX 11454 65536 65536 65536 NT_STATUS_OK
WriteX 11454 131072 65536 65536 NT_STATUS_OK
WriteX 11454 196608 65536 65536 NT_STATUS_OK
WriteX 11454 262144 65536 65536 NT_STATUS_OK
WriteX 11454 327680 65536 65536 NT_STATUS_OK
WriteX 11454 393216 65536 65536 NT_STATUS_OK
WriteX 11454 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11455 NT_STATUS_OK
ReadX 11455 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11455 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11455 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11455 8192 4096 4096 NT_STATUS_OK
ReadX 11455 12288 4096 4096 NT_STATUS_OK
ReadX 11455 16384 4096 4096 NT_STATUS_OK
ReadX 11455 20480 4096 4096 NT_STATUS_OK
ReadX 11455 24576 4096 4096 NT_STATUS_OK
ReadX 11455 28672 4096 4096 NT_STATUS_OK
ReadX 11455 32768 4096 4096 NT_STATUS_OK
ReadX 11455 36864 4096 4096 NT_STATUS_OK
ReadX 11455 40960 4096 4096 NT_STATUS_OK
ReadX 11455 45056 4096 4096 NT_STATUS_OK
ReadX 11455 49152 4096 4096 NT_STATUS_OK
ReadX 11455 53248 4096 4096 NT_STATUS_OK
ReadX 11455 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11455 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11456 NT_STATUS_OK
Close 11456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11452 NT_STATUS_OK
Close 11453 NT_STATUS_OK
Close 11454 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11458 NT_STATUS_OK
WriteX 11458 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11458 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11458 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11458 1004 NT_STATUS_OK
WriteX 11458 0 57088 57088 NT_STATUS_OK
WriteX 11458 0 4096 4096 NT_STATUS_OK
Flush 11458 NT_STATUS_OK
Close 11455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11459 NT_STATUS_OK
SET_FILE_INFORMATION 11459 1004 NT_STATUS_OK
Close 11459 NT_STATUS_OK
SET_FILE_INFORMATION 11458 1004 NT_STATUS_OK
WriteX 11458 0 4096 4096 NT_STATUS_OK
Close 11458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11460 NT_STATUS_OK
Close 11460 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11462 NT_STATUS_OK
ReadX 11462 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11462 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11463 NT_STATUS_OK
WriteX 11463 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11463 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11463 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11463 1004 NT_STATUS_OK
WriteX 11463 0 51456 51456 NT_STATUS_OK
WriteX 11463 0 4096 4096 NT_STATUS_OK
Flush 11463 NT_STATUS_OK
SET_FILE_INFORMATION 11463 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11463 1004 NT_STATUS_OK
WriteX 11463 0 4096 4096 NT_STATUS_OK
Close 11463 NT_STATUS_OK
Close 11462 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11465 NT_STATUS_OK
Close 11465 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11467 NT_STATUS_OK
ReadX 11467 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11467 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11469 NT_STATUS_OK
Close 11469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11472 NT_STATUS_OK
WriteX 11472 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11472 258 NT_STATUS_OK
WriteX 11472 0 53077 53077 NT_STATUS_OK
Close 11472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11473 NT_STATUS_OK
WriteX 11473 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11473 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11473 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11473 1004 NT_STATUS_OK
WriteX 11473 0 65536 65536 NT_STATUS_OK
WriteX 11473 65536 1856 1856 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
SET_FILE_INFORMATION 11473 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11473 1004 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Close 11473 NT_STATUS_OK
Close 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11475 NT_STATUS_OK
Close 11475 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11477 NT_STATUS_OK
ReadX 11477 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11479 NT_STATUS_OK
Close 11479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11482 NT_STATUS_OK
WriteX 11482 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11482 258 NT_STATUS_OK
WriteX 11482 0 7983 7983 NT_STATUS_OK
Close 11482 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11484 NT_STATUS_OK
Close 11484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11487 NT_STATUS_OK
WriteX 11487 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11487 258 NT_STATUS_OK
WriteX 11487 0 65536 65536 NT_STATUS_OK
WriteX 11487 65536 65536 65536 NT_STATUS_OK
WriteX 11487 131072 65536 65536 NT_STATUS_OK
WriteX 11487 196608 65536 65536 NT_STATUS_OK
WriteX 11487 262144 65536 65536 NT_STATUS_OK
WriteX 11487 327680 65536 65536 NT_STATUS_OK
WriteX 11487 393216 65536 65536 NT_STATUS_OK
WriteX 11487 458752 46731 46731 NT_STATUS_OK
Close 11487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11488 NT_STATUS_OK
WriteX 11488 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11488 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11477 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11488 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11488 1004 NT_STATUS_OK
WriteX 11488 0 65536 65536 NT_STATUS_OK
WriteX 11488 65536 22848 22848 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
SET_FILE_INFORMATION 11488 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11488 1004 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Close 11488 NT_STATUS_OK
Close 11477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11490 NT_STATUS_OK
Close 11490 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11492 NT_STATUS_OK
ReadX 11492 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11492 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11493 NT_STATUS_OK
ReadX 11493 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11493 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11493 1004 NT_STATUS_OK
ReadX 11493 8192 4096 4096 NT_STATUS_OK
ReadX 11493 12288 4096 4096 NT_STATUS_OK
ReadX 11493 16384 4096 4096 NT_STATUS_OK
ReadX 11493 20480 4096 4096 NT_STATUS_OK
ReadX 11493 24576 4096 4096 NT_STATUS_OK
ReadX 11493 28672 4096 4096 NT_STATUS_OK
ReadX 11493 32768 4096 4096 NT_STATUS_OK
ReadX 11493 36864 4096 4096 NT_STATUS_OK
ReadX 11493 40960 4096 4096 NT_STATUS_OK
ReadX 11493 45056 4096 4096 NT_STATUS_OK
ReadX 11493 49152 4096 4096 NT_STATUS_OK
ReadX 11493 53248 4096 4096 NT_STATUS_OK
ReadX 11493 57344 4096 4096 NT_STATUS_OK
ReadX 11493 61440 4096 4096 NT_STATUS_OK
ReadX 11493 65536 4096 4096 NT_STATUS_OK
ReadX 11493 69632 4096 4096 NT_STATUS_OK
ReadX 11493 73728 4096 4096 NT_STATUS_OK
ReadX 11493 77824 4096 4096 NT_STATUS_OK
ReadX 11493 81920 4096 4096 NT_STATUS_OK
ReadX 11493 86016 4096 4096 NT_STATUS_OK
ReadX 11493 90112 4096 4096 NT_STATUS_OK
ReadX 11493 94208 4096 4096 NT_STATUS_OK
ReadX 11493 98304 4096 4096 NT_STATUS_OK
ReadX 11493 102400 4096 4096 NT_STATUS_OK
ReadX 11493 106496 4096 4096 NT_STATUS_OK
ReadX 11493 110592 4096 4096 NT_STATUS_OK
ReadX 11493 114688 4096 4096 NT_STATUS_OK
ReadX 11493 118784 4096 4096 NT_STATUS_OK
ReadX 11493 122880 4096 4096 NT_STATUS_OK
ReadX 11493 126976 4096 4096 NT_STATUS_OK
ReadX 11493 131072 4096 4096 NT_STATUS_OK
ReadX 11493 135168 4096 4096 NT_STATUS_OK
ReadX 11493 139264 4096 4096 NT_STATUS_OK
ReadX 11493 143360 4096 4096 NT_STATUS_OK
ReadX 11493 147456 4096 4096 NT_STATUS_OK
ReadX 11493 151552 4096 4096 NT_STATUS_OK
ReadX 11493 155648 4096 4096 NT_STATUS_OK
ReadX 11493 159744 4096 4096 NT_STATUS_OK
ReadX 11493 163840 4096 4096 NT_STATUS_OK
ReadX 11493 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11493 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11494 NT_STATUS_OK
Close 11494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11492 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11496 NT_STATUS_OK
WriteX 11496 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11496 258 NT_STATUS_OK
Close 11493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11497 NT_STATUS_OK
SET_FILE_INFORMATION 11497 1004 NT_STATUS_OK
Close 11497 NT_STATUS_OK
WriteX 11496 0 42388 42388 NT_STATUS_OK
Close 11496 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11498 NT_STATUS_OK
Close 11498 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11500 NT_STATUS_OK
ReadX 11500 0 4096 4096 NT_STATUS_OK
ReadX 11500 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11501 NT_STATUS_OK
WriteX 11501 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11501 258 NT_STATUS_OK
SET_FILE_INFORMATION 11501 1004 NT_STATUS_OK
WriteX 11501 0 42652 42652 NT_STATUS_OK
Close 11501 NT_STATUS_OK
Close 11500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11503 NT_STATUS_OK
Close 11503 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11505 NT_STATUS_OK
ReadX 11505 0 4096 4096 NT_STATUS_OK
ReadX 11505 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11507 NT_STATUS_OK
Close 11507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11510 NT_STATUS_OK
WriteX 11510 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11510 258 NT_STATUS_OK
WriteX 11510 0 65536 65536 NT_STATUS_OK
WriteX 11510 65536 49 49 NT_STATUS_OK
Close 11510 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11511 NT_STATUS_OK
ReadX 11511 0 61440 61440 NT_STATUS_OK
ReadX 11511 61440 4096 4096 NT_STATUS_OK
ReadX 11511 65536 61440 61440 NT_STATUS_OK
ReadX 11511 126976 4096 4096 NT_STATUS_OK
ReadX 11511 131072 61440 61440 NT_STATUS_OK
ReadX 11511 192512 4096 4096 NT_STATUS_OK
ReadX 11511 196608 61440 61440 NT_STATUS_OK
ReadX 11511 258048 4096 4096 NT_STATUS_OK
ReadX 11511 262144 61440 61440 NT_STATUS_OK
ReadX 11511 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11512 NT_STATUS_OK
ReadX 11512 0 61440 61440 NT_STATUS_OK
ReadX 11512 61440 4096 4096 NT_STATUS_OK
ReadX 11512 65536 61440 61440 NT_STATUS_OK
ReadX 11512 126976 4096 4096 NT_STATUS_OK
ReadX 11512 131072 61440 61440 NT_STATUS_OK
ReadX 11512 192512 4096 4096 NT_STATUS_OK
ReadX 11512 196608 61440 61440 NT_STATUS_OK
ReadX 11512 258048 4096 4096 NT_STATUS_OK
ReadX 11512 262144 61440 61440 NT_STATUS_OK
ReadX 11512 323584 4096 4096 NT_STATUS_OK
ReadX 11512 327680 61440 61440 NT_STATUS_OK
ReadX 11512 389120 4096 4096 NT_STATUS_OK
ReadX 11512 393216 61440 61440 NT_STATUS_OK
ReadX 11512 454656 4096 4096 NT_STATUS_OK
ReadX 11512 458752 61440 61440 NT_STATUS_OK
ReadX 11512 520192 4096 4096 NT_STATUS_OK
ReadX 11512 524288 61440 61440 NT_STATUS_OK
ReadX 11512 585728 4096 4096 NT_STATUS_OK
ReadX 11512 589824 61440 61440 NT_STATUS_OK
ReadX 11512 651264 4096 4096 NT_STATUS_OK
ReadX 11512 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11513 NT_STATUS_OK
ReadX 11513 0 61440 61440 NT_STATUS_OK
ReadX 11513 61440 4096 4096 NT_STATUS_OK
ReadX 11513 65536 61440 61440 NT_STATUS_OK
ReadX 11513 126976 4096 4096 NT_STATUS_OK
ReadX 11513 131072 61440 61440 NT_STATUS_OK
ReadX 11513 192512 4096 4096 NT_STATUS_OK
ReadX 11513 196608 61440 61440 NT_STATUS_OK
ReadX 11513 258048 4096 4096 NT_STATUS_OK
ReadX 11513 262144 61440 61440 NT_STATUS_OK
ReadX 11513 323584 4096 4096 NT_STATUS_OK
ReadX 11513 327680 61440 61440 NT_STATUS_OK
ReadX 11513 389120 4096 4096 NT_STATUS_OK
ReadX 11513 393216 61440 61440 NT_STATUS_OK
ReadX 11513 454656 4096 4096 NT_STATUS_OK
ReadX 11513 458752 61440 61440 NT_STATUS_OK
ReadX 11513 520192 4096 4096 NT_STATUS_OK
ReadX 11513 524288 61440 61440 NT_STATUS_OK
ReadX 11513 585728 4096 4096 NT_STATUS_OK
ReadX 11513 589824 61440 61440 NT_STATUS_OK
ReadX 11513 651264 4096 4096 NT_STATUS_OK
ReadX 11513 655360 61440 61440 NT_STATUS_OK
ReadX 11513 716800 4096 4096 NT_STATUS_OK
ReadX 11513 720896 61440 61440 NT_STATUS_OK
ReadX 11513 782336 4096 4096 NT_STATUS_OK
ReadX 11513 786432 61440 61440 NT_STATUS_OK
ReadX 11513 847872 4096 4096 NT_STATUS_OK
ReadX 11513 851968 61440 61440 NT_STATUS_OK
ReadX 11513 913408 4096 4096 NT_STATUS_OK
ReadX 11513 917504 61440 61440 NT_STATUS_OK
ReadX 11513 978944 4096 4096 NT_STATUS_OK
ReadX 11513 983040 61440 61440 NT_STATUS_OK
ReadX 11513 1044480 4096 4096 NT_STATUS_OK
ReadX 11513 1048576 61440 61440 NT_STATUS_OK
ReadX 11513 1110016 4096 4096 NT_STATUS_OK
ReadX 11513 1114112 61440 61440 NT_STATUS_OK
ReadX 11513 1175552 4096 4096 NT_STATUS_OK
ReadX 11513 1179648 61440 61440 NT_STATUS_OK
ReadX 11513 1241088 4096 4096 NT_STATUS_OK
ReadX 11513 1245184 61440 61440 NT_STATUS_OK
ReadX 11513 1306624 4096 4096 NT_STATUS_OK
ReadX 11513 1310720 61440 61440 NT_STATUS_OK
ReadX 11513 1372160 4096 4096 NT_STATUS_OK
ReadX 11513 1376256 61440 61440 NT_STATUS_OK
ReadX 11513 1437696 4096 4096 NT_STATUS_OK
ReadX 11513 1441792 61440 61440 NT_STATUS_OK
ReadX 11513 1503232 4096 4096 NT_STATUS_OK
ReadX 11513 1507328 61440 61440 NT_STATUS_OK
ReadX 11513 1568768 4096 4096 NT_STATUS_OK
ReadX 11513 1572864 61440 61440 NT_STATUS_OK
ReadX 11513 1634304 4096 4096 NT_STATUS_OK
ReadX 11513 1638400 61440 61440 NT_STATUS_OK
ReadX 11513 1699840 4096 4096 NT_STATUS_OK
ReadX 11513 1703936 61440 61440 NT_STATUS_OK
ReadX 11513 1765376 4096 4096 NT_STATUS_OK
ReadX 11513 1769472 61440 61440 NT_STATUS_OK
ReadX 11513 1830912 4096 4096 NT_STATUS_OK
ReadX 11513 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11514 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11515 NT_STATUS_OK
QUERY_FILE_INFORMATION 11515 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11515 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11515 1005 NT_STATUS_OK
ReadX 11515 2156 24 24 NT_STATUS_OK
ReadX 11515 2139 276 276 NT_STATUS_OK
ReadX 11515 2136 14 14 NT_STATUS_OK
ReadX 11515 2136 7 7 NT_STATUS_OK
ReadX 11515 2138 12 12 NT_STATUS_OK
ReadX 11515 2137 8 8 NT_STATUS_OK
ReadX 11515 2135 15 15 NT_STATUS_OK
ReadX 11515 0 16 16 NT_STATUS_OK
ReadX 11515 16 2048 2048 NT_STATUS_OK
ReadX 11515 2064 2048 2048 NT_STATUS_OK
ReadX 11515 257 2048 2048 NT_STATUS_OK
ReadX 11515 385 2048 2048 NT_STATUS_OK
ReadX 11515 513 2048 2048 NT_STATUS_OK
ReadX 11515 641 2048 2048 NT_STATUS_OK
ReadX 11515 769 2048 2048 NT_STATUS_OK
ReadX 11515 897 2048 2048 NT_STATUS_OK
ReadX 11515 1025 2048 2048 NT_STATUS_OK
ReadX 11515 1153 2048 2048 NT_STATUS_OK
ReadX 11515 1281 2048 2048 NT_STATUS_OK
ReadX 11515 1409 2048 2048 NT_STATUS_OK
ReadX 11515 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11511 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11512 NT_STATUS_OK
Close 11513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11517 NT_STATUS_OK
Close 11517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11520 NT_STATUS_OK
WriteX 11520 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11520 258 NT_STATUS_OK
WriteX 11520 0 10575 10575 NT_STATUS_OK
Flush 11520 NT_STATUS_OK
Close 11520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11521 NT_STATUS_OK
Close 11521 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11523 NT_STATUS_OK
ReadX 11523 0 4096 4096 NT_STATUS_OK
Close 11515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11525 NT_STATUS_OK
LockX 11525 2147483538 1 NT_STATUS_OK
UnlockX 11525 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11525 1005 NT_STATUS_OK
ReadX 11525 0 512 512 NT_STATUS_OK
ReadX 11525 512 512 512 NT_STATUS_OK
ReadX 11525 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11525 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11525 1004 NT_STATUS_OK
Close 11525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11526 NT_STATUS_OK
QUERY_FILE_INFORMATION 11526 1005 NT_STATUS_OK
ReadX 11526 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11527 NT_STATUS_OK
LockX 11527 2147483538 1 NT_STATUS_OK
UnlockX 11527 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11527 1005 NT_STATUS_OK
ReadX 11527 0 512 512 NT_STATUS_OK
ReadX 11527 512 512 512 NT_STATUS_OK
ReadX 11527 1024 512 512 NT_STATUS_OK
ReadX 11527 288 20 20 NT_STATUS_OK
ReadX 11527 308 2084 2084 NT_STATUS_OK
ReadX 11527 388 2084 2084 NT_STATUS_OK
ReadX 11527 388 2084 2084 NT_STATUS_OK
ReadX 11514 2157 1386 1386 NT_STATUS_OK
ReadX 11527 2472 399 399 NT_STATUS_OK
ReadX 11527 3072 1536 1536 NT_STATUS_OK
ReadX 11527 544 149 149 NT_STATUS_OK
ReadX 11527 693 485 485 NT_STATUS_OK
Close 11527 NT_STATUS_OK
ReadX 11514 2157 4096 4096 NT_STATUS_OK
ReadX 11514 6253 4096 4096 NT_STATUS_OK
ReadX 11514 10349 4096 4096 NT_STATUS_OK
ReadX 11514 14445 4096 4096 NT_STATUS_OK
ReadX 11514 18541 4096 4096 NT_STATUS_OK
ReadX 11514 22637 256 256 NT_STATUS_OK
ReadX 11514 22893 4096 4096 NT_STATUS_OK
ReadX 11514 26989 4096 4096 NT_STATUS_OK
ReadX 11514 31085 4096 4096 NT_STATUS_OK
ReadX 11514 35181 4096 4096 NT_STATUS_OK
ReadX 11514 39277 4096 4096 NT_STATUS_OK
ReadX 11514 43373 4096 4096 NT_STATUS_OK
ReadX 11514 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11514 2157 1024 1024 NT_STATUS_OK
ReadX 11514 1667 4688 4688 NT_STATUS_OK
ReadX 11514 6355 3516 3516 NT_STATUS_OK
ReadX 11514 9871 16384 16384 NT_STATUS_OK
ReadX 11514 26255 3771 3771 NT_STATUS_OK
ReadX 11514 30026 2048 2048 NT_STATUS_OK
ReadX 11514 32074 1024 1024 NT_STATUS_OK
ReadX 11514 33098 6652 6652 NT_STATUS_OK
ReadX 11514 39750 16384 16384 NT_STATUS_OK
ReadX 11514 56134 10496 10496 NT_STATUS_OK
ReadX 11514 66630 1784 1784 NT_STATUS_OK
ReadX 11514 68414 90 90 NT_STATUS_OK
ReadX 11514 68504 273 273 NT_STATUS_OK
ReadX 11514 68777 1600 1600 NT_STATUS_OK
ReadX 11514 70377 640 640 NT_STATUS_OK
ReadX 11514 71017 1280 1280 NT_STATUS_OK
ReadX 11514 72297 8464 8464 NT_STATUS_OK
ReadX 11514 80761 158 158 NT_STATUS_OK
ReadX 11514 80919 912 912 NT_STATUS_OK
ReadX 11514 81831 1980 1980 NT_STATUS_OK
ReadX 11514 83811 2256 2256 NT_STATUS_OK
ReadX 11514 86067 400 400 NT_STATUS_OK
ReadX 11514 86467 252 252 NT_STATUS_OK
ReadX 11514 86719 42 42 NT_STATUS_OK
ReadX 11514 86761 725 725 NT_STATUS_OK
ReadX 11514 2009 512 512 NT_STATUS_OK
ReadX 11514 3895 9 9 NT_STATUS_OK
ReadX 11514 3781 46 46 NT_STATUS_OK
ReadX 11514 4059 92 92 NT_STATUS_OK
ReadX 11514 3781 92 92 NT_STATUS_OK
ReadX 11514 3986 184 184 NT_STATUS_OK
ReadX 11514 3987 16384 16384 NT_STATUS_OK
ReadX 11514 3902 16384 16384 NT_STATUS_OK
ReadX 11514 3781 10240 10240 NT_STATUS_OK
ReadX 11514 3821 16384 16384 NT_STATUS_OK
ReadX 11514 3891 935 935 NT_STATUS_OK
ReadX 11514 4060 10240 10240 NT_STATUS_OK
ReadX 11514 4059 184 184 NT_STATUS_OK
ReadX 11514 256 184 184 NT_STATUS_OK
ReadX 11514 256 1026 1026 NT_STATUS_OK
ReadX 11514 3901 326 326 NT_STATUS_OK
ReadX 11514 3899 652 652 NT_STATUS_OK
ReadX 11514 256 2 2 NT_STATUS_OK
ReadX 11514 258 4948 4948 NT_STATUS_OK
Close 11514 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11529 NT_STATUS_OK
Close 11529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11532 NT_STATUS_OK
WriteX 11532 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11532 258 NT_STATUS_OK
WriteX 11532 0 65536 65536 NT_STATUS_OK
WriteX 11532 65536 65536 65536 NT_STATUS_OK
WriteX 11532 131072 65536 65536 NT_STATUS_OK
WriteX 11532 196608 65536 65536 NT_STATUS_OK
WriteX 11532 262144 65536 65536 NT_STATUS_OK
WriteX 11532 327680 65536 65536 NT_STATUS_OK
WriteX 11532 393216 65536 65536 NT_STATUS_OK
WriteX 11532 458752 65536 65536 NT_STATUS_OK
WriteX 11532 524288 65536 65536 NT_STATUS_OK
WriteX 11532 589824 35257 35257 NT_STATUS_OK
Close 11532 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11534 NT_STATUS_OK
Close 11534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11537 NT_STATUS_OK
WriteX 11537 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11537 258 NT_STATUS_OK
WriteX 11537 0 65536 65536 NT_STATUS_OK
WriteX 11537 65536 65536 65536 NT_STATUS_OK
WriteX 11537 131072 65536 65536 NT_STATUS_OK
WriteX 11537 196608 65536 65536 NT_STATUS_OK
WriteX 11537 262144 65536 65536 NT_STATUS_OK
WriteX 11537 327680 65536 65536 NT_STATUS_OK
WriteX 11537 393216 65536 65536 NT_STATUS_OK
WriteX 11537 458752 65536 65536 NT_STATUS_OK
WriteX 11537 524288 65536 65536 NT_STATUS_OK
WriteX 11537 589824 57598 57598 NT_STATUS_OK
Close 11537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11539 NT_STATUS_OK
WriteX 11539 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11539 258 NT_STATUS_OK
WriteX 11539 0 12543 12543 NT_STATUS_OK
Flush 11539 NT_STATUS_OK
Close 11539 NT_STATUS_OK
Close 11523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11541 NT_STATUS_OK
Close 11541 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11543 NT_STATUS_OK
ReadX 11543 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11544 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11545 NT_STATUS_OK
QUERY_FILE_INFORMATION 11545 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11545 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11545 1005 NT_STATUS_OK
ReadX 11545 1938 24 24 NT_STATUS_OK
ReadX 11545 1920 276 276 NT_STATUS_OK
ReadX 11545 1918 14 14 NT_STATUS_OK
ReadX 11545 1918 7 7 NT_STATUS_OK
ReadX 11545 1919 12 12 NT_STATUS_OK
ReadX 11545 1919 8 8 NT_STATUS_OK
ReadX 11545 1917 15 15 NT_STATUS_OK
ReadX 11545 0 16 16 NT_STATUS_OK
ReadX 11545 16 2048 2048 NT_STATUS_OK
ReadX 11545 2064 2048 2048 NT_STATUS_OK
ReadX 11545 257 2048 2048 NT_STATUS_OK
ReadX 11545 385 2048 2048 NT_STATUS_OK
ReadX 11545 513 2048 2048 NT_STATUS_OK
ReadX 11545 641 2048 2048 NT_STATUS_OK
ReadX 11545 769 2048 2048 NT_STATUS_OK
ReadX 11545 897 2048 2048 NT_STATUS_OK
ReadX 11545 1025 2048 2048 NT_STATUS_OK
ReadX 11545 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11547 NT_STATUS_OK
Close 11547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11550 NT_STATUS_OK
WriteX 11550 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11550 258 NT_STATUS_OK
WriteX 11550 0 11588 11588 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
Close 11550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11551 NT_STATUS_OK
Close 11551 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11553 NT_STATUS_OK
ReadX 11553 0 4096 4096 NT_STATUS_OK
Close 11545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11555 NT_STATUS_OK
WriteX 11555 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11555 258 NT_STATUS_OK
WriteX 11555 0 11615 11615 NT_STATUS_OK
Flush 11555 NT_STATUS_OK
Close 11555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11557 NT_STATUS_OK
Close 11557 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11559 NT_STATUS_OK
ReadX 11559 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11561 NT_STATUS_OK
Close 11561 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11564 NT_STATUS_OK
WriteX 11564 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11564 258 NT_STATUS_OK
WriteX 11564 0 65536 65536 NT_STATUS_OK
WriteX 11564 65536 16050 16050 NT_STATUS_OK
Close 11564 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11544 1939 64 64 NT_STATUS_OK
ReadX 11544 128 248 248 NT_STATUS_OK
ReadX 11544 128 568 568 NT_STATUS_OK
ReadX 11544 3872 1536 1536 NT_STATUS_OK
ReadX 11544 3456 2560 2560 NT_STATUS_OK
ReadX 11544 3136 512 512 NT_STATUS_OK
ReadX 11544 2880 4096 4096 NT_STATUS_OK
ReadX 11544 3264 3072 3072 NT_STATUS_OK
ReadX 11544 320 4096 4096 NT_STATUS_OK
ReadX 11544 1024 4096 4096 NT_STATUS_OK
ReadX 11544 3616 4096 4096 NT_STATUS_OK
ReadX 11544 1939 64 64 NT_STATUS_OK
ReadX 11544 128 248 248 NT_STATUS_OK
ReadX 11544 128 608 608 NT_STATUS_OK
ReadX 11544 2858 1024 1024 NT_STATUS_OK
ReadX 11544 2810 4096 4096 NT_STATUS_OK
ReadX 11544 2826 4096 4096 NT_STATUS_OK
ReadX 11544 2580 2048 2048 NT_STATUS_OK
ReadX 11544 2800 2560 2560 NT_STATUS_OK
ReadX 11544 2100 4096 4096 NT_STATUS_OK
ReadX 11544 2084 4096 4096 NT_STATUS_OK
ReadX 11544 868 4096 4096 NT_STATUS_OK
ReadX 11544 2324 4096 4096 NT_STATUS_OK
ReadX 11544 884 4096 4096 NT_STATUS_OK
ReadX 11544 2604 1024 1024 NT_STATUS_OK
ReadX 11544 580 4096 4096 NT_STATUS_OK
ReadX 11544 596 4096 4096 NT_STATUS_OK
ReadX 11544 2752 4096 4096 NT_STATUS_OK
ReadX 11544 2842 1024 1024 NT_STATUS_OK
ReadX 11544 660 4096 4096 NT_STATUS_OK
ReadX 11544 2720 4096 4096 NT_STATUS_OK
ReadX 11544 2736 4096 4096 NT_STATUS_OK
ReadX 11544 628 4096 4096 NT_STATUS_OK
ReadX 11544 2704 4096 4096 NT_STATUS_OK
ReadX 11544 1556 4096 4096 NT_STATUS_OK
ReadX 11544 576 4096 4096 NT_STATUS_OK
ReadX 11544 3168 1536 1536 NT_STATUS_OK
ReadX 11544 832 4096 4096 NT_STATUS_OK
ReadX 11544 1088 4096 4096 NT_STATUS_OK
ReadX 11544 1344 4096 4096 NT_STATUS_OK
ReadX 11544 1600 4096 4096 NT_STATUS_OK
ReadX 11544 1856 4096 4096 NT_STATUS_OK
ReadX 11544 2112 4096 4096 NT_STATUS_OK
ReadX 11544 1892 4096 4096 NT_STATUS_OK
ReadX 11544 820 4096 4096 NT_STATUS_OK
ReadX 11544 788 4096 4096 NT_STATUS_OK
ReadX 11544 1604 4096 4096 NT_STATUS_OK
ReadX 11544 3648 4096 4096 NT_STATUS_OK
ReadX 11544 2608 4096 4096 NT_STATUS_OK
ReadX 11544 548 4096 4096 NT_STATUS_OK
ReadX 11544 740 4096 4096 NT_STATUS_OK
ReadX 11544 1344 4096 4096 NT_STATUS_OK
ReadX 11544 3392 4096 4096 NT_STATUS_OK
ReadX 11544 3904 4096 4096 NT_STATUS_OK
ReadX 11544 644 4096 4096 NT_STATUS_OK
ReadX 11544 676 4096 4096 NT_STATUS_OK
ReadX 11544 2688 4096 4096 NT_STATUS_OK
ReadX 11544 320 4096 4096 NT_STATUS_OK
ReadX 11544 900 4096 4096 NT_STATUS_OK
ReadX 11544 1908 4096 4096 NT_STATUS_OK
ReadX 11544 852 4096 4096 NT_STATUS_OK
ReadX 11544 724 4096 4096 NT_STATUS_OK
ReadX 11544 2292 4096 4096 NT_STATUS_OK
ReadX 11544 612 4096 4096 NT_STATUS_OK
ReadX 11544 388 4096 4096 NT_STATUS_OK
ReadX 11544 2368 4096 4096 NT_STATUS_OK
ReadX 11544 2624 4096 4096 NT_STATUS_OK
ReadX 11544 500 4096 4096 NT_STATUS_OK
ReadX 11544 356 4096 4096 NT_STATUS_OK
ReadX 11544 1024 4096 4096 NT_STATUS_OK
ReadX 11544 576 4096 4096 NT_STATUS_OK
ReadX 11544 340 4096 4096 NT_STATUS_OK
ReadX 11544 420 4096 4096 NT_STATUS_OK
ReadX 11544 1600 4096 4096 NT_STATUS_OK
ReadX 11544 404 4096 4096 NT_STATUS_OK
ReadX 11544 1428 4096 4096 NT_STATUS_OK
ReadX 11544 2656 4096 4096 NT_STATUS_OK
ReadX 11544 2624 4096 4096 NT_STATUS_OK
ReadX 11544 452 4096 4096 NT_STATUS_OK
ReadX 11544 692 4096 4096 NT_STATUS_OK
ReadX 11544 564 4096 4096 NT_STATUS_OK
ReadX 11544 372 4096 4096 NT_STATUS_OK
ReadX 11544 468 4096 4096 NT_STATUS_OK
ReadX 11544 484 4096 4096 NT_STATUS_OK
ReadX 11544 1088 4096 4096 NT_STATUS_OK
ReadX 11544 1924 4096 4096 NT_STATUS_OK
ReadX 11544 2768 4096 4096 NT_STATUS_OK
ReadX 11544 832 4096 4096 NT_STATUS_OK
ReadX 11544 836 4096 4096 NT_STATUS_OK
ReadX 11544 1856 4096 4096 NT_STATUS_OK
ReadX 11544 2640 4096 4096 NT_STATUS_OK
ReadX 11544 436 4096 4096 NT_STATUS_OK
ReadX 11544 1828 4096 4096 NT_STATUS_OK
ReadX 11544 804 4096 4096 NT_STATUS_OK
ReadX 11544 1860 4096 4096 NT_STATUS_OK
ReadX 11544 1812 4096 4096 NT_STATUS_OK
ReadX 11544 756 4096 4096 NT_STATUS_OK
ReadX 11544 1636 4096 4096 NT_STATUS_OK
ReadX 11544 772 4096 4096 NT_STATUS_OK
ReadX 11544 2036 4096 4096 NT_STATUS_OK
ReadX 11544 1220 4096 4096 NT_STATUS_OK
ReadX 11544 1652 4096 4096 NT_STATUS_OK
ReadX 11544 2588 4096 4096 NT_STATUS_OK
ReadX 11544 916 4096 4096 NT_STATUS_OK
ReadX 11544 260 4096 4096 NT_STATUS_OK
ReadX 11544 932 4096 4096 NT_STATUS_OK
ReadX 11544 2624 4096 4096 NT_STATUS_OK
ReadX 11544 308 4096 4096 NT_STATUS_OK
ReadX 11544 292 4096 4096 NT_STATUS_OK
ReadX 11544 1140 4096 4096 NT_STATUS_OK
ReadX 11544 276 4096 4096 NT_STATUS_OK
ReadX 11544 2020 4096 4096 NT_STATUS_OK
ReadX 11544 2880 4096 4096 NT_STATUS_OK
ReadX 11544 516 4096 4096 NT_STATUS_OK
ReadX 11544 1844 4096 4096 NT_STATUS_OK
ReadX 11544 1124 4096 4096 NT_STATUS_OK
ReadX 11544 3136 4096 4096 NT_STATUS_OK
ReadX 11544 324 4096 4096 NT_STATUS_OK
ReadX 11544 1156 4096 4096 NT_STATUS_OK
ReadX 11544 1172 4096 4096 NT_STATUS_OK
ReadX 11544 2112 4096 4096 NT_STATUS_OK
ReadX 11544 2368 4096 4096 NT_STATUS_OK
ReadX 11544 964 4096 4096 NT_STATUS_OK
ReadX 11544 980 4096 4096 NT_STATUS_OK
ReadX 11544 1012 4096 4096 NT_STATUS_OK
ReadX 11544 532 4096 4096 NT_STATUS_OK
ReadX 11544 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11544 1620 4096 4096 NT_STATUS_OK
ReadX 11544 1604 4096 4096 NT_STATUS_OK
ReadX 11544 2116 4096 4096 NT_STATUS_OK
ReadX 11544 2132 4096 4096 NT_STATUS_OK
ReadX 11544 2148 4096 4096 NT_STATUS_OK
ReadX 11544 2276 4096 4096 NT_STATUS_OK
ReadX 11544 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11566 NT_STATUS_OK
Close 11566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11569 NT_STATUS_OK
QUERY_FILE_INFORMATION 11524 1004 NT_STATUS_OK
Close 11524 NT_STATUS_OK
WriteX 11569 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11569 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11526 1004 NT_STATUS_OK
Close 11526 NT_STATUS_OK
WriteX 11569 0 65536 65536 NT_STATUS_OK
WriteX 11569 65536 64850 64850 NT_STATUS_OK
Close 11569 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11571 NT_STATUS_OK
WriteX 11571 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11571 258 NT_STATUS_OK
ReadX 11544 2068 4096 4096 NT_STATUS_OK
ReadX 11544 1588 4096 4096 NT_STATUS_OK
ReadX 11544 1572 4096 4096 NT_STATUS_OK
WriteX 11571 0 18630 18630 NT_STATUS_OK
Flush 11571 NT_STATUS_OK
Close 11571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11573 NT_STATUS_OK
Close 11573 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11575 NT_STATUS_OK
ReadX 11575 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11544 612 4096 4096 NT_STATUS_OK
ReadX 11544 564 4096 4096 NT_STATUS_OK
ReadX 11544 1876 4096 4096 NT_STATUS_OK
ReadX 11544 628 4096 4096 NT_STATUS_OK
ReadX 11544 740 4096 4096 NT_STATUS_OK
ReadX 11544 724 4096 4096 NT_STATUS_OK
ReadX 11544 644 4096 4096 NT_STATUS_OK
ReadX 11544 2324 4096 4096 NT_STATUS_OK
ReadX 11544 660 4096 4096 NT_STATUS_OK
ReadX 11544 852 4096 4096 NT_STATUS_OK
ReadX 11544 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11544 2368 4096 4096 NT_STATUS_OK
ReadX 11544 1024 4096 4096 NT_STATUS_OK
ReadX 11544 320 4096 4096 NT_STATUS_OK
ReadX 11544 580 4096 4096 NT_STATUS_OK
ReadX 11544 3136 512 512 NT_STATUS_OK
ReadX 11544 2880 4096 4096 NT_STATUS_OK
Close 11544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11576 NT_STATUS_OK
ReadX 11576 61440 4096 4096 NT_STATUS_OK
ReadX 11576 126976 4096 4096 NT_STATUS_OK
WriteX 11576 0 65536 65536 NT_STATUS_OK
WriteX 11576 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11577 NT_STATUS_OK
ReadX 11577 61440 4096 4096 NT_STATUS_OK
ReadX 11577 126976 4096 4096 NT_STATUS_OK
ReadX 11577 192512 4096 4096 NT_STATUS_OK
ReadX 11577 258048 4096 4096 NT_STATUS_OK
WriteX 11577 0 65536 65536 NT_STATUS_OK
WriteX 11577 65536 65536 65536 NT_STATUS_OK
WriteX 11577 131072 65536 65536 NT_STATUS_OK
WriteX 11577 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11578 NT_STATUS_OK
ReadX 11578 61440 4096 4096 NT_STATUS_OK
ReadX 11578 126976 4096 4096 NT_STATUS_OK
ReadX 11578 192512 4096 4096 NT_STATUS_OK
ReadX 11578 258048 4096 4096 NT_STATUS_OK
ReadX 11578 323584 4096 4096 NT_STATUS_OK
ReadX 11578 389120 4096 4096 NT_STATUS_OK
ReadX 11578 454656 4096 4096 NT_STATUS_OK
ReadX 11578 520192 4096 4096 NT_STATUS_OK
WriteX 11578 0 65536 65536 NT_STATUS_OK
WriteX 11578 65536 65536 65536 NT_STATUS_OK
WriteX 11578 131072 65536 65536 NT_STATUS_OK
WriteX 11578 196608 65536 65536 NT_STATUS_OK
WriteX 11578 262144 65536 65536 NT_STATUS_OK
WriteX 11578 327680 65536 65536 NT_STATUS_OK
WriteX 11578 393216 65536 65536 NT_STATUS_OK
WriteX 11578 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11579 NT_STATUS_OK
ReadX 11579 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11580 NT_STATUS_OK
Close 11580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11581 NT_STATUS_OK
WriteX 11581 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11581 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11579 0 8192 8192 NT_STATUS_OK
Flush 11579 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11579 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11579 0 8192 8192 NT_STATUS_OK
Flush 11579 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11579 0 8192 8192 NT_STATUS_OK
Flush 11579 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11579 0 8192 8192 NT_STATUS_OK
Flush 11579 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11583 NT_STATUS_OK
Close 11583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11575 NT_STATUS_OK
Close 11543 NT_STATUS_OK
Close 11576 NT_STATUS_OK
Close 11577 NT_STATUS_OK
Close 11578 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11586 NT_STATUS_OK
WriteX 11586 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11586 258 NT_STATUS_OK
WriteX 11586 0 62591 62591 NT_STATUS_OK
Close 11586 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11588 NT_STATUS_OK
Close 11588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11591 NT_STATUS_OK
WriteX 11591 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11591 258 NT_STATUS_OK
WriteX 11591 0 10845 10845 NT_STATUS_OK
Close 11591 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11593 NT_STATUS_OK
Close 11593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11596 NT_STATUS_OK
WriteX 11596 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11596 258 NT_STATUS_OK
WriteX 11596 0 30118 30118 NT_STATUS_OK
Close 11596 NT_STATUS_OK
WriteX 11579 0 4096 4096 NT_STATUS_OK
WriteX 11581 0 64 64 NT_STATUS_OK
Close 11581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11579 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11598 NT_STATUS_OK
ReadX 11598 0 61440 61440 NT_STATUS_OK
ReadX 11598 61440 4096 4096 NT_STATUS_OK
ReadX 11598 65536 61440 61440 NT_STATUS_OK
ReadX 11598 126976 4096 4096 NT_STATUS_OK
ReadX 11598 131072 61440 61440 NT_STATUS_OK
ReadX 11598 192512 4096 4096 NT_STATUS_OK
ReadX 11598 196608 61440 61440 NT_STATUS_OK
ReadX 11598 258048 4096 4096 NT_STATUS_OK
ReadX 11598 262144 61440 61440 NT_STATUS_OK
ReadX 11598 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11599 NT_STATUS_OK
ReadX 11599 0 61440 61440 NT_STATUS_OK
ReadX 11599 61440 4096 4096 NT_STATUS_OK
ReadX 11599 65536 61440 61440 NT_STATUS_OK
ReadX 11599 126976 4096 4096 NT_STATUS_OK
ReadX 11599 131072 61440 61440 NT_STATUS_OK
ReadX 11599 192512 4096 4096 NT_STATUS_OK
ReadX 11599 196608 61440 61440 NT_STATUS_OK
ReadX 11599 258048 4096 4096 NT_STATUS_OK
ReadX 11599 262144 61440 61440 NT_STATUS_OK
ReadX 11599 323584 4096 4096 NT_STATUS_OK
ReadX 11599 327680 61440 61440 NT_STATUS_OK
ReadX 11599 389120 4096 4096 NT_STATUS_OK
ReadX 11599 393216 61440 61440 NT_STATUS_OK
ReadX 11599 454656 4096 4096 NT_STATUS_OK
ReadX 11599 458752 61440 61440 NT_STATUS_OK
ReadX 11599 520192 4096 4096 NT_STATUS_OK
ReadX 11599 524288 61440 61440 NT_STATUS_OK
ReadX 11599 585728 4096 4096 NT_STATUS_OK
ReadX 11599 589824 61440 61440 NT_STATUS_OK
ReadX 11599 651264 4096 4096 NT_STATUS_OK
ReadX 11599 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11600 NT_STATUS_OK
ReadX 11600 0 61440 61440 NT_STATUS_OK
ReadX 11600 61440 4096 4096 NT_STATUS_OK
ReadX 11600 65536 61440 61440 NT_STATUS_OK
ReadX 11600 126976 4096 4096 NT_STATUS_OK
ReadX 11600 131072 61440 61440 NT_STATUS_OK
ReadX 11600 192512 4096 4096 NT_STATUS_OK
ReadX 11600 196608 61440 61440 NT_STATUS_OK
ReadX 11600 258048 4096 4096 NT_STATUS_OK
ReadX 11600 262144 61440 61440 NT_STATUS_OK
ReadX 11600 323584 4096 4096 NT_STATUS_OK
ReadX 11600 327680 61440 61440 NT_STATUS_OK
ReadX 11600 389120 4096 4096 NT_STATUS_OK
ReadX 11600 393216 61440 61440 NT_STATUS_OK
ReadX 11600 454656 4096 4096 NT_STATUS_OK
ReadX 11600 458752 61440 61440 NT_STATUS_OK
ReadX 11600 520192 4096 4096 NT_STATUS_OK
ReadX 11600 524288 61440 61440 NT_STATUS_OK
ReadX 11600 585728 4096 4096 NT_STATUS_OK
ReadX 11600 589824 61440 61440 NT_STATUS_OK
ReadX 11600 651264 4096 4096 NT_STATUS_OK
ReadX 11600 655360 61440 61440 NT_STATUS_OK
ReadX 11600 716800 4096 4096 NT_STATUS_OK
ReadX 11600 720896 61440 61440 NT_STATUS_OK
ReadX 11600 782336 4096 4096 NT_STATUS_OK
ReadX 11600 786432 61440 61440 NT_STATUS_OK
ReadX 11600 847872 4096 4096 NT_STATUS_OK
ReadX 11600 851968 61440 61440 NT_STATUS_OK
ReadX 11600 913408 4096 4096 NT_STATUS_OK
ReadX 11600 917504 61440 61440 NT_STATUS_OK
ReadX 11600 978944 4096 4096 NT_STATUS_OK
ReadX 11600 983040 61440 61440 NT_STATUS_OK
ReadX 11600 1044480 4096 4096 NT_STATUS_OK
ReadX 11600 1048576 61440 61440 NT_STATUS_OK
ReadX 11600 1110016 4096 4096 NT_STATUS_OK
ReadX 11600 1114112 61440 61440 NT_STATUS_OK
ReadX 11600 1175552 4096 4096 NT_STATUS_OK
ReadX 11600 1179648 61440 61440 NT_STATUS_OK
ReadX 11600 1241088 4096 4096 NT_STATUS_OK
ReadX 11600 1245184 61440 61440 NT_STATUS_OK
ReadX 11600 1306624 4096 4096 NT_STATUS_OK
ReadX 11600 1310720 61440 61440 NT_STATUS_OK
ReadX 11600 1372160 4096 4096 NT_STATUS_OK
ReadX 11600 1376256 61440 61440 NT_STATUS_OK
ReadX 11600 1437696 4096 4096 NT_STATUS_OK
ReadX 11600 1441792 61440 61440 NT_STATUS_OK
ReadX 11600 1503232 4096 4096 NT_STATUS_OK
ReadX 11600 1507328 61440 61440 NT_STATUS_OK
ReadX 11600 1568768 4096 4096 NT_STATUS_OK
ReadX 11600 1572864 61440 61440 NT_STATUS_OK
ReadX 11600 1634304 4096 4096 NT_STATUS_OK
ReadX 11600 1638400 61440 61440 NT_STATUS_OK
ReadX 11600 1699840 4096 4096 NT_STATUS_OK
ReadX 11600 1703936 61440 61440 NT_STATUS_OK
ReadX 11600 1765376 4096 4096 NT_STATUS_OK
ReadX 11600 1769472 61440 61440 NT_STATUS_OK
ReadX 11600 1830912 4096 4096 NT_STATUS_OK
ReadX 11600 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11601 NT_STATUS_OK
Close 11601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11598 NT_STATUS_OK
Close 11599 NT_STATUS_OK
Close 11600 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11603 NT_STATUS_OK
ReadX 11603 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11604 NT_STATUS_OK
ReadX 11604 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11605 NT_STATUS_OK
ReadX 11605 0 4096 4096 NT_STATUS_OK
ReadX 11605 4096 4096 4096 NT_STATUS_OK
ReadX 11605 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11606 NT_STATUS_OK
Close 11606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11603 NT_STATUS_OK
Close 11604 NT_STATUS_OK
Close 11605 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11608 NT_STATUS_OK
ReadX 11608 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11609 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11609 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11610 NT_STATUS_OK
Close 11610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11608 NT_STATUS_OK
Close 11609 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11612 NT_STATUS_OK
ReadX 11612 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11613 NT_STATUS_OK
ReadX 11613 0 8192 8192 NT_STATUS_OK
ReadX 11613 8192 8192 8192 NT_STATUS_OK
ReadX 11613 16384 8192 8192 NT_STATUS_OK
ReadX 11613 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11615 NT_STATUS_OK
Close 11615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11613 NT_STATUS_OK
Close 11612 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11618 NT_STATUS_OK
WriteX 11618 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11618 258 NT_STATUS_OK
WriteX 11618 0 10438 10438 NT_STATUS_OK
Close 11618 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11619 NT_STATUS_OK
Close 11619 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11620 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11621 NT_STATUS_OK
Close 11621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11622 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11623 NT_STATUS_OK
Close 11623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11624 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11625 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11626 NT_STATUS_OK
Close 11626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11627 NT_STATUS_OK
ReadX 11627 0 4096 4096 NT_STATUS_OK
ReadX 11627 4096 4096 4096 NT_STATUS_OK
ReadX 11627 8192 4096 4096 NT_STATUS_OK
ReadX 11627 12288 8192 8192 NT_STATUS_OK
ReadX 11627 20480 8192 8192 NT_STATUS_OK
ReadX 11627 28672 8192 8192 NT_STATUS_OK
ReadX 11627 36864 8192 8192 NT_STATUS_OK
ReadX 11627 45056 8192 8192 NT_STATUS_OK
ReadX 11627 53248 8192 8192 NT_STATUS_OK
ReadX 11627 61440 8192 8192 NT_STATUS_OK
ReadX 11627 69632 8192 8192 NT_STATUS_OK
ReadX 11627 77824 8192 8192 NT_STATUS_OK
ReadX 11627 86016 8192 8192 NT_STATUS_OK
ReadX 11627 94208 8192 8192 NT_STATUS_OK
ReadX 11627 102400 8192 8192 NT_STATUS_OK
ReadX 11627 110592 8192 8192 NT_STATUS_OK
ReadX 11627 118784 8192 8192 NT_STATUS_OK
ReadX 11627 126976 8192 8192 NT_STATUS_OK
ReadX 11627 135168 8192 8192 NT_STATUS_OK
ReadX 11627 143360 8192 8192 NT_STATUS_OK
ReadX 11627 151552 8192 8192 NT_STATUS_OK
ReadX 11627 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11627 NT_STATUS_OK
Close 11620 NT_STATUS_OK
Close 11622 NT_STATUS_OK
Close 11624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11629 NT_STATUS_OK
Close 11629 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11632 NT_STATUS_OK
WriteX 11632 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11632 258 NT_STATUS_OK
WriteX 11632 0 28489 28489 NT_STATUS_OK
Close 11632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11633 NT_STATUS_OK
Close 11633 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11635 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11635 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11636 NT_STATUS_OK
Close 11636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11635 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11638 NT_STATUS_OK
ReadX 11638 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11639 NT_STATUS_OK
ReadX 11639 0 8192 8192 NT_STATUS_OK
ReadX 11639 8192 8192 8192 NT_STATUS_OK
ReadX 11639 16384 8192 8192 NT_STATUS_OK
ReadX 11639 24576 8192 8192 NT_STATUS_OK
ReadX 11639 32768 16384 16384 NT_STATUS_OK
ReadX 11639 49152 8192 8192 NT_STATUS_OK
ReadX 11639 57344 8192 8192 NT_STATUS_OK
ReadX 11639 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11641 NT_STATUS_OK
Close 11641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11639 NT_STATUS_OK
Close 11638 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11644 NT_STATUS_OK
WriteX 11644 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11644 258 NT_STATUS_OK
WriteX 11644 0 29253 29253 NT_STATUS_OK
Close 11644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11645 NT_STATUS_OK
Close 11645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11646 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11648 NT_STATUS_OK
Close 11648 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11651 NT_STATUS_OK
WriteX 11651 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11651 258 NT_STATUS_OK
WriteX 11651 0 30183 30183 NT_STATUS_OK
Close 11651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11652 NT_STATUS_OK
Close 11652 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11654 NT_STATUS_OK
WriteX 11654 0 510 510 NT_STATUS_OK
WriteX 11654 510 512 512 NT_STATUS_OK
WriteX 11654 1022 510 510 NT_STATUS_OK
WriteX 11654 1532 510 510 NT_STATUS_OK
WriteX 11654 2042 168 168 NT_STATUS_OK
Close 11654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11655 NT_STATUS_OK
Close 11655 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11657 NT_STATUS_OK
ReadX 11657 0 4096 4096 NT_STATUS_OK
WriteX 11657 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11658 NT_STATUS_OK
ReadX 11658 61440 4096 4096 NT_STATUS_OK
ReadX 11658 126976 4096 4096 NT_STATUS_OK
WriteX 11658 0 65536 65536 NT_STATUS_OK
WriteX 11658 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11659 NT_STATUS_OK
ReadX 11659 61440 4096 4096 NT_STATUS_OK
ReadX 11659 126976 4096 4096 NT_STATUS_OK
ReadX 11659 192512 4096 4096 NT_STATUS_OK
ReadX 11659 258048 4096 4096 NT_STATUS_OK
WriteX 11659 0 65536 65536 NT_STATUS_OK
WriteX 11659 65536 65536 65536 NT_STATUS_OK
WriteX 11659 131072 65536 65536 NT_STATUS_OK
WriteX 11659 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11660 NT_STATUS_OK
ReadX 11660 61440 4096 4096 NT_STATUS_OK
ReadX 11660 126976 4096 4096 NT_STATUS_OK
ReadX 11660 192512 4096 4096 NT_STATUS_OK
ReadX 11660 258048 4096 4096 NT_STATUS_OK
ReadX 11660 323584 4096 4096 NT_STATUS_OK
ReadX 11660 389120 4096 4096 NT_STATUS_OK
ReadX 11660 454656 4096 4096 NT_STATUS_OK
ReadX 11660 520192 4096 4096 NT_STATUS_OK
WriteX 11660 0 65536 65536 NT_STATUS_OK
WriteX 11660 65536 65536 65536 NT_STATUS_OK
WriteX 11660 131072 65536 65536 NT_STATUS_OK
WriteX 11660 196608 65536 65536 NT_STATUS_OK
WriteX 11660 262144 65536 65536 NT_STATUS_OK
WriteX 11660 327680 65536 65536 NT_STATUS_OK
WriteX 11660 393216 65536 65536 NT_STATUS_OK
WriteX 11660 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11661 NT_STATUS_OK
Close 11661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11657 NT_STATUS_OK
Close 11658 NT_STATUS_OK
Close 11659 NT_STATUS_OK
Close 11660 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11663 NT_STATUS_OK
Close 11663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11667 NT_STATUS_OK
Close 11667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11670 NT_STATUS_OK
Close 11670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11672 NT_STATUS_OK
Close 11672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11676 NT_STATUS_OK
Close 11676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11679 NT_STATUS_OK
Close 11679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11681 NT_STATUS_OK
Close 11681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11685 NT_STATUS_OK
Close 11685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11690 NT_STATUS_OK
Close 11690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11695 NT_STATUS_OK
Close 11695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11700 NT_STATUS_OK
Close 11700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11705 NT_STATUS_OK
Close 11705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11710 NT_STATUS_OK
Close 11710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11715 NT_STATUS_OK
Close 11715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11720 NT_STATUS_OK
Close 11720 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11723 NT_STATUS_OK
Close 11723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11726 NT_STATUS_OK
Close 11726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11729 NT_STATUS_OK
WriteX 11729 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11729 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11729 0 65536 65536 NT_STATUS_OK
WriteX 11729 65536 65536 65536 NT_STATUS_OK
WriteX 11729 131072 65536 65536 NT_STATUS_OK
WriteX 11729 196608 65536 65536 NT_STATUS_OK
WriteX 11729 262144 26634 26634 NT_STATUS_OK
Close 11729 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11734 NT_STATUS_OK
Close 11734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11735 NT_STATUS_OK
Close 11735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11736 NT_STATUS_OK
ReadX 11736 0 4096 4096 NT_STATUS_OK
Close 11736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11737 NT_STATUS_OK
ReadX 11737 0 4096 4096 NT_STATUS_OK
ReadX 11737 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11738 NT_STATUS_OK
Close 11738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11737 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11742 NT_STATUS_OK
Close 11742 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11745 NT_STATUS_OK
Close 11745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11747 NT_STATUS_OK
Close 11747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11751 NT_STATUS_OK
Close 11751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11754 NT_STATUS_OK
Close 11754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11756 NT_STATUS_OK
Close 11756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11760 NT_STATUS_OK
Close 11760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11765 NT_STATUS_OK
Close 11765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11770 NT_STATUS_OK
Close 11770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11775 NT_STATUS_OK
Close 11775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11780 NT_STATUS_OK
Close 11780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11785 NT_STATUS_OK
Close 11785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11789 NT_STATUS_OK
Close 11789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11794 NT_STATUS_OK
Close 11794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11799 NT_STATUS_OK
Close 11799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11802 NT_STATUS_OK
Close 11802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11804 NT_STATUS_OK
Close 11804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11814 NT_STATUS_OK
Close 11814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11815 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11816 NT_STATUS_OK
ReadX 11816 0 4096 4096 NT_STATUS_OK
Close 11816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11817 NT_STATUS_OK
ReadX 11817 0 4096 4096 NT_STATUS_OK
Close 11817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11818 NT_STATUS_OK
ReadX 11818 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11828 NT_STATUS_OK
Close 11828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11829 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11830 NT_STATUS_OK
ReadX 11830 0 4096 4096 NT_STATUS_OK
Close 11830 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11831 NT_STATUS_OK
ReadX 11831 0 4096 4096 NT_STATUS_OK
Close 11831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11832 NT_STATUS_OK
ReadX 11832 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11818 NT_STATUS_OK
Close 11832 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11861 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11861 0 4096 4096 NT_STATUS_OK
Close 11861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11862 NT_STATUS_OK
ReadX 11862 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11863 NT_STATUS_OK
ReadX 11863 0 4096 4096 NT_STATUS_OK
ReadX 11863 4096 4096 4096 NT_STATUS_OK
ReadX 11863 8192 4096 4096 NT_STATUS_OK
ReadX 11863 12288 4096 4096 NT_STATUS_OK
ReadX 11863 16384 4096 4096 NT_STATUS_OK
ReadX 11863 20480 4096 4096 NT_STATUS_OK
ReadX 11863 24576 4096 4096 NT_STATUS_OK
ReadX 11863 28672 4096 4096 NT_STATUS_OK
ReadX 11863 32768 4096 4096 NT_STATUS_OK
ReadX 11863 36864 4096 4096 NT_STATUS_OK
ReadX 11863 40960 4096 4096 NT_STATUS_OK
ReadX 11863 45056 4096 4096 NT_STATUS_OK
ReadX 11863 49152 4096 4096 NT_STATUS_OK
ReadX 11863 53248 4096 4096 NT_STATUS_OK
ReadX 11863 57344 4096 4096 NT_STATUS_OK
ReadX 11863 61440 4096 4096 NT_STATUS_OK
ReadX 11863 65536 4096 4096 NT_STATUS_OK
ReadX 11863 69632 4096 4096 NT_STATUS_OK
ReadX 11863 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11863 1004 NT_STATUS_OK
WriteX 11863 0 4096 4096 NT_STATUS_OK
Close 11863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11864 NT_STATUS_OK
SET_FILE_INFORMATION 11864 1004 NT_STATUS_OK
Close 11864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11865 NT_STATUS_OK
ReadX 11865 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11866 NT_STATUS_OK
Close 11866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11869 NT_STATUS_OK
WriteX 11869 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11869 258 NT_STATUS_OK
WriteX 11869 0 65536 65536 NT_STATUS_OK
WriteX 11869 65536 19979 19979 NT_STATUS_OK
Close 11869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11870 NT_STATUS_OK
ReadX 11870 0 4096 4096 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
Flush 11870 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
Flush 11870 NT_STATUS_OK
QUERY_FILE_INFORMATION 11870 1004 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
Flush 11870 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
Flush 11870 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
Flush 11870 NT_STATUS_OK
SET_FILE_INFORMATION 11870 1004 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
Flush 11870 NT_STATUS_OK
Close 11870 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11871 NT_STATUS_OK
ReadX 11871 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11872 NT_STATUS_OK
ReadX 11872 0 4096 4096 NT_STATUS_OK
Close 11871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11873 NT_STATUS_OK
ReadX 11873 0 4096 4096 NT_STATUS_OK
Close 11873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11874 NT_STATUS_OK
ReadX 11874 0 4096 4096 NT_STATUS_OK
Close 11874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11875 NT_STATUS_OK
ReadX 11875 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11875 1004 NT_STATUS_OK
WriteX 11875 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11876 NT_STATUS_OK
Close 11876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11872 NT_STATUS_OK
Close 11875 NT_STATUS_OK
Close 11865 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11878 NT_STATUS_OK
Close 11878 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11881 NT_STATUS_OK
WriteX 11881 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11881 258 NT_STATUS_OK
WriteX 11881 0 65536 65536 NT_STATUS_OK
WriteX 11881 65536 17654 17654 NT_STATUS_OK
Close 11881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11882 NT_STATUS_OK
ReadX 11882 0 4096 4096 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
QUERY_FILE_INFORMATION 11882 1004 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
SET_FILE_INFORMATION 11882 1004 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
Close 11882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11883 NT_STATUS_OK
SET_FILE_INFORMATION 11883 1004 NT_STATUS_OK
Close 11883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11884 NT_STATUS_OK
ReadX 11884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11885 NT_STATUS_OK
Close 11885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11887 NT_STATUS_OK
ReadX 11887 0 4096 4096 NT_STATUS_OK
ReadX 11887 4096 4096 4096 NT_STATUS_OK
ReadX 11887 8192 4096 4096 NT_STATUS_OK
ReadX 11887 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11887 16384 4096 4096 NT_STATUS_OK
ReadX 11887 20480 4096 4096 NT_STATUS_OK
ReadX 11887 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11888 NT_STATUS_OK
ReadX 11888 0 4096 4096 NT_STATUS_OK
Close 11888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11889 NT_STATUS_OK
ReadX 11889 0 4096 4096 NT_STATUS_OK
Close 11889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11890 NT_STATUS_OK
ReadX 11890 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11890 1004 NT_STATUS_OK
WriteX 11890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11891 NT_STATUS_OK
Close 11891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11890 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11893 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11896 NT_STATUS_OK
WriteX 11896 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11896 258 NT_STATUS_OK
WriteX 11896 0 65536 65536 NT_STATUS_OK
WriteX 11896 65536 19490 19490 NT_STATUS_OK
Close 11896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11897 NT_STATUS_OK
ReadX 11897 0 4096 4096 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
Flush 11897 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
Flush 11897 NT_STATUS_OK
QUERY_FILE_INFORMATION 11897 1004 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
Flush 11897 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
Flush 11897 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
Flush 11897 NT_STATUS_OK
SET_FILE_INFORMATION 11897 1004 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
Flush 11897 NT_STATUS_OK
Close 11897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11898 NT_STATUS_OK
SET_FILE_INFORMATION 11898 1004 NT_STATUS_OK
Close 11898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11899 NT_STATUS_OK
ReadX 11899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11900 NT_STATUS_OK
Close 11900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11902 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11902 0 4096 4096 NT_STATUS_OK
Close 11902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11903 NT_STATUS_OK
ReadX 11903 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11904 NT_STATUS_OK
ReadX 11904 0 4096 4096 NT_STATUS_OK
ReadX 11904 4096 4096 4096 NT_STATUS_OK
ReadX 11904 8192 4096 4096 NT_STATUS_OK
ReadX 11904 12288 4096 4096 NT_STATUS_OK
ReadX 11904 16384 4096 4096 NT_STATUS_OK
ReadX 11904 20480 4096 4096 NT_STATUS_OK
ReadX 11904 24576 4096 4096 NT_STATUS_OK
ReadX 11904 28672 4096 4096 NT_STATUS_OK
ReadX 11904 32768 4096 4096 NT_STATUS_OK
ReadX 11904 36864 4096 4096 NT_STATUS_OK
ReadX 11904 40960 4096 4096 NT_STATUS_OK
ReadX 11904 45056 4096 4096 NT_STATUS_OK
ReadX 11904 49152 4096 4096 NT_STATUS_OK
ReadX 11904 53248 4096 4096 NT_STATUS_OK
ReadX 11904 57344 4096 4096 NT_STATUS_OK
ReadX 11904 61440 4096 4096 NT_STATUS_OK
ReadX 11904 65536 4096 4096 NT_STATUS_OK
ReadX 11904 69632 4096 4096 NT_STATUS_OK
ReadX 11904 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11904 1004 NT_STATUS_OK
WriteX 11904 0 4096 4096 NT_STATUS_OK
Close 11904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11905 NT_STATUS_OK
SET_FILE_INFORMATION 11905 1004 NT_STATUS_OK
Close 11905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11906 NT_STATUS_OK
ReadX 11906 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11907 NT_STATUS_OK
Close 11907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11899 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11910 NT_STATUS_OK
WriteX 11910 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11910 258 NT_STATUS_OK
WriteX 11910 0 65536 65536 NT_STATUS_OK
WriteX 11910 65536 8866 8866 NT_STATUS_OK
Close 11910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11911 NT_STATUS_OK
ReadX 11911 0 4096 4096 NT_STATUS_OK
WriteX 11911 0 4096 4096 NT_STATUS_OK
Flush 11911 NT_STATUS_OK
SET_FILE_INFORMATION 11911 1004 NT_STATUS_OK
WriteX 11911 0 4096 4096 NT_STATUS_OK
Flush 11911 NT_STATUS_OK
Close 11911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11912 NT_STATUS_OK
ReadX 11912 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11913 NT_STATUS_OK
ReadX 11913 0 4096 4096 NT_STATUS_OK
Close 11913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11914 NT_STATUS_OK
ReadX 11914 0 4096 4096 NT_STATUS_OK
Close 11914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11915 NT_STATUS_OK
ReadX 11915 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11915 1004 NT_STATUS_OK
WriteX 11915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11916 NT_STATUS_OK
Close 11916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11915 NT_STATUS_OK
Close 11906 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11918 NT_STATUS_OK
Close 11918 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11921 NT_STATUS_OK
WriteX 11921 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11921 258 NT_STATUS_OK
WriteX 11921 0 65536 65536 NT_STATUS_OK
WriteX 11921 65536 9298 9298 NT_STATUS_OK
Close 11921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11922 NT_STATUS_OK
ReadX 11922 0 4096 4096 NT_STATUS_OK
WriteX 11922 0 4096 4096 NT_STATUS_OK
Flush 11922 NT_STATUS_OK
SET_FILE_INFORMATION 11922 1004 NT_STATUS_OK
WriteX 11922 0 4096 4096 NT_STATUS_OK
Flush 11922 NT_STATUS_OK
Close 11922 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11923 NT_STATUS_OK
SET_FILE_INFORMATION 11923 1004 NT_STATUS_OK
Close 11923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11924 NT_STATUS_OK
ReadX 11924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11925 NT_STATUS_OK
Close 11925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11928 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11928 0 4096 4096 NT_STATUS_OK
Close 11928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11929 NT_STATUS_OK
ReadX 11929 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11929 4096 4096 4096 NT_STATUS_OK
ReadX 11929 8192 4096 4096 NT_STATUS_OK
ReadX 11929 12288 4096 4096 NT_STATUS_OK
ReadX 11929 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11930 NT_STATUS_OK
ReadX 11930 0 4096 4096 NT_STATUS_OK
Close 11930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11931 NT_STATUS_OK
ReadX 11931 0 4096 4096 NT_STATUS_OK
Close 11931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11932 NT_STATUS_OK
ReadX 11932 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11932 1004 NT_STATUS_OK
WriteX 11932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11933 NT_STATUS_OK
Close 11933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11929 NT_STATUS_OK
Close 11932 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11935 NT_STATUS_OK
Close 11935 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11938 NT_STATUS_OK
WriteX 11938 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11938 258 NT_STATUS_OK
WriteX 11938 0 65536 65536 NT_STATUS_OK
WriteX 11938 65536 11540 11540 NT_STATUS_OK
Close 11938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11939 NT_STATUS_OK
ReadX 11939 0 4096 4096 NT_STATUS_OK
WriteX 11939 0 4096 4096 NT_STATUS_OK
Flush 11939 NT_STATUS_OK
SET_FILE_INFORMATION 11939 1004 NT_STATUS_OK
WriteX 11939 0 4096 4096 NT_STATUS_OK
Flush 11939 NT_STATUS_OK
Close 11939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11940 NT_STATUS_OK
SET_FILE_INFORMATION 11940 1004 NT_STATUS_OK
Close 11940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11941 NT_STATUS_OK
ReadX 11941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11942 NT_STATUS_OK
Close 11942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11944 NT_STATUS_OK
ReadX 11944 61440 4096 4096 NT_STATUS_OK
ReadX 11944 126976 4096 4096 NT_STATUS_OK
WriteX 11944 0 65536 65536 NT_STATUS_OK
WriteX 11944 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11945 NT_STATUS_OK
ReadX 11945 61440 4096 4096 NT_STATUS_OK
ReadX 11945 126976 4096 4096 NT_STATUS_OK
ReadX 11945 192512 4096 4096 NT_STATUS_OK
ReadX 11945 258048 4096 4096 NT_STATUS_OK
WriteX 11945 0 65536 65536 NT_STATUS_OK
WriteX 11945 65536 65536 65536 NT_STATUS_OK
WriteX 11945 131072 65536 65536 NT_STATUS_OK
WriteX 11945 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11946 NT_STATUS_OK
ReadX 11946 61440 4096 4096 NT_STATUS_OK
ReadX 11946 126976 4096 4096 NT_STATUS_OK
ReadX 11946 192512 4096 4096 NT_STATUS_OK
ReadX 11946 258048 4096 4096 NT_STATUS_OK
ReadX 11946 323584 4096 4096 NT_STATUS_OK
ReadX 11946 389120 4096 4096 NT_STATUS_OK
ReadX 11946 454656 4096 4096 NT_STATUS_OK
ReadX 11946 520192 4096 4096 NT_STATUS_OK
WriteX 11946 0 65536 65536 NT_STATUS_OK
WriteX 11946 65536 65536 65536 NT_STATUS_OK
WriteX 11946 131072 65536 65536 NT_STATUS_OK
WriteX 11946 196608 65536 65536 NT_STATUS_OK
WriteX 11946 262144 65536 65536 NT_STATUS_OK
WriteX 11946 327680 65536 65536 NT_STATUS_OK
WriteX 11946 393216 65536 65536 NT_STATUS_OK
WriteX 11946 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11947 NT_STATUS_OK
ReadX 11947 0 4096 4096 NT_STATUS_OK
ReadX 11947 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11948 NT_STATUS_OK
WriteX 11948 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11948 258 NT_STATUS_OK
WriteX 11948 0 53 53 NT_STATUS_OK
Close 11948 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11949 NT_STATUS_OK
Close 11949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11941 NT_STATUS_OK
Close 11887 NT_STATUS_OK
Close 11944 NT_STATUS_OK
Close 11945 NT_STATUS_OK
Close 11946 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11947 8192 4096 4096 NT_STATUS_OK
ReadX 11947 12288 4096 4096 NT_STATUS_OK
WriteX 11951 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11951 258 NT_STATUS_OK
ReadX 11947 16384 4096 4096 NT_STATUS_OK
ReadX 11947 20480 4096 4096 NT_STATUS_OK
WriteX 11951 0 15360 15360 NT_STATUS_OK
Close 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11952 NT_STATUS_OK
ReadX 11952 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11952 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11952 1004 NT_STATUS_OK
WriteX 11952 0 4096 4096 NT_STATUS_OK
Close 11952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11953 NT_STATUS_OK
Close 11953 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11955 NT_STATUS_OK
ReadX 11955 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11956 NT_STATUS_OK
Close 11956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11955 4096 4096 4096 NT_STATUS_OK
ReadX 11955 8192 4096 4096 NT_STATUS_OK
ReadX 11955 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11958 NT_STATUS_OK
ReadX 11958 0 4096 4096 NT_STATUS_OK
ReadX 11958 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11959 NT_STATUS_OK
ReadX 11959 0 4096 4096 NT_STATUS_OK
ReadX 11959 4096 4096 4096 NT_STATUS_OK
ReadX 11959 8192 4096 4096 NT_STATUS_OK
Close 11958 NT_STATUS_OK
Close 11959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11960 NT_STATUS_OK
WriteX 11960 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11960 258 NT_STATUS_OK
WriteX 11960 0 15360 15360 NT_STATUS_OK
Close 11960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11961 NT_STATUS_OK
ReadX 11961 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11961 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11961 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11962 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11964 NT_STATUS_OK
ReadX 11964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11965 NT_STATUS_OK
SET_FILE_INFORMATION 11965 1004 NT_STATUS_OK
Close 11965 NT_STATUS_OK
WriteX 11961 0 4096 4096 NT_STATUS_OK
Close 11961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11966 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11968 NT_STATUS_OK
ReadX 11968 0 4096 4096 NT_STATUS_OK
ReadX 11968 4096 4096 4096 NT_STATUS_OK
ReadX 11968 8192 4096 4096 NT_STATUS_OK
ReadX 11968 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11968 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11968 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11969 NT_STATUS_OK
ReadX 11969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11970 NT_STATUS_OK
WriteX 11970 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11970 258 NT_STATUS_OK
WriteX 11970 0 53 53 NT_STATUS_OK
Close 11970 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11971 NT_STATUS_OK
Close 11971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11969 4096 4096 4096 NT_STATUS_OK
ReadX 11969 8192 4096 4096 NT_STATUS_OK
ReadX 11969 12288 4096 4096 NT_STATUS_OK
WriteX 11973 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11973 258 NT_STATUS_OK
WriteX 11973 0 12006 12006 NT_STATUS_OK
Close 11973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11974 NT_STATUS_OK
ReadX 11974 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11974 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11974 1004 NT_STATUS_OK
WriteX 11974 0 4096 4096 NT_STATUS_OK
Close 11974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11975 NT_STATUS_OK
Close 11975 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11977 NT_STATUS_OK
ReadX 11977 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11978 NT_STATUS_OK
Close 11978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11977 4096 4096 4096 NT_STATUS_OK
ReadX 11977 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11980 NT_STATUS_OK
WriteX 11980 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11980 258 NT_STATUS_OK
WriteX 11980 0 11991 11991 NT_STATUS_OK
Close 11980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11981 NT_STATUS_OK
ReadX 11981 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11981 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11981 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11977 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11982 NT_STATUS_OK
Close 11982 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11984 NT_STATUS_OK
ReadX 11984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11985 NT_STATUS_OK
SET_FILE_INFORMATION 11985 1004 NT_STATUS_OK
Close 11985 NT_STATUS_OK
WriteX 11981 0 4096 4096 NT_STATUS_OK
Close 11981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11986 NT_STATUS_OK
Close 11986 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11988 NT_STATUS_OK
ReadX 11988 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11989 NT_STATUS_OK
Close 11989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11988 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11988 1004 NT_STATUS_OK
ReadX 11988 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11988 1004 NT_STATUS_OK
WriteX 11988 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11988 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11988 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11988 1004 NT_STATUS_OK
Close 11964 NT_STATUS_OK
WriteX 11968 0 19054 19054 NT_STATUS_OK
WriteX 11988 0 12288 12288 NT_STATUS_OK
Close 11984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11991 NT_STATUS_OK
Close 11991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11968 NT_STATUS_OK
Close 11988 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11993 NT_STATUS_OK
Close 11993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11995 NT_STATUS_OK
ReadX 11995 0 61440 61440 NT_STATUS_OK
ReadX 11995 61440 4096 4096 NT_STATUS_OK
ReadX 11995 65536 61440 61440 NT_STATUS_OK
ReadX 11995 126976 4096 4096 NT_STATUS_OK
ReadX 11995 131072 61440 61440 NT_STATUS_OK
ReadX 11995 192512 4096 4096 NT_STATUS_OK
ReadX 11995 196608 61440 61440 NT_STATUS_OK
ReadX 11995 258048 4096 4096 NT_STATUS_OK
ReadX 11995 262144 61440 61440 NT_STATUS_OK
ReadX 11995 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11996 NT_STATUS_OK
ReadX 11996 0 61440 61440 NT_STATUS_OK
ReadX 11996 61440 4096 4096 NT_STATUS_OK
ReadX 11996 65536 61440 61440 NT_STATUS_OK
ReadX 11996 126976 4096 4096 NT_STATUS_OK
ReadX 11996 131072 61440 61440 NT_STATUS_OK
ReadX 11996 192512 4096 4096 NT_STATUS_OK
ReadX 11996 196608 61440 61440 NT_STATUS_OK
ReadX 11996 258048 4096 4096 NT_STATUS_OK
ReadX 11996 262144 61440 61440 NT_STATUS_OK
ReadX 11996 323584 4096 4096 NT_STATUS_OK
ReadX 11996 327680 61440 61440 NT_STATUS_OK
ReadX 11996 389120 4096 4096 NT_STATUS_OK
ReadX 11996 393216 61440 61440 NT_STATUS_OK
ReadX 11996 454656 4096 4096 NT_STATUS_OK
ReadX 11996 458752 61440 61440 NT_STATUS_OK
ReadX 11996 520192 4096 4096 NT_STATUS_OK
ReadX 11996 524288 61440 61440 NT_STATUS_OK
ReadX 11996 585728 4096 4096 NT_STATUS_OK
ReadX 11996 589824 61440 61440 NT_STATUS_OK
ReadX 11996 651264 4096 4096 NT_STATUS_OK
ReadX 11996 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11997 NT_STATUS_OK
ReadX 11997 0 61440 61440 NT_STATUS_OK
ReadX 11997 61440 4096 4096 NT_STATUS_OK
ReadX 11997 65536 61440 61440 NT_STATUS_OK
ReadX 11997 126976 4096 4096 NT_STATUS_OK
ReadX 11997 131072 61440 61440 NT_STATUS_OK
ReadX 11997 192512 4096 4096 NT_STATUS_OK
ReadX 11997 196608 61440 61440 NT_STATUS_OK
ReadX 11997 258048 4096 4096 NT_STATUS_OK
ReadX 11997 262144 61440 61440 NT_STATUS_OK
ReadX 11997 323584 4096 4096 NT_STATUS_OK
ReadX 11997 327680 61440 61440 NT_STATUS_OK
ReadX 11997 389120 4096 4096 NT_STATUS_OK
ReadX 11997 393216 61440 61440 NT_STATUS_OK
ReadX 11997 454656 4096 4096 NT_STATUS_OK
ReadX 11997 458752 61440 61440 NT_STATUS_OK
ReadX 11997 520192 4096 4096 NT_STATUS_OK
ReadX 11997 524288 61440 61440 NT_STATUS_OK
ReadX 11997 585728 4096 4096 NT_STATUS_OK
ReadX 11997 589824 61440 61440 NT_STATUS_OK
ReadX 11997 651264 4096 4096 NT_STATUS_OK
ReadX 11997 655360 61440 61440 NT_STATUS_OK
ReadX 11997 716800 4096 4096 NT_STATUS_OK
ReadX 11997 720896 61440 61440 NT_STATUS_OK
ReadX 11997 782336 4096 4096 NT_STATUS_OK
ReadX 11997 786432 61440 61440 NT_STATUS_OK
ReadX 11997 847872 4096 4096 NT_STATUS_OK
ReadX 11997 851968 61440 61440 NT_STATUS_OK
ReadX 11997 913408 4096 4096 NT_STATUS_OK
ReadX 11997 917504 61440 61440 NT_STATUS_OK
ReadX 11997 978944 4096 4096 NT_STATUS_OK
ReadX 11997 983040 61440 61440 NT_STATUS_OK
ReadX 11997 1044480 4096 4096 NT_STATUS_OK
ReadX 11997 1048576 61440 61440 NT_STATUS_OK
ReadX 11997 1110016 4096 4096 NT_STATUS_OK
ReadX 11997 1114112 61440 61440 NT_STATUS_OK
ReadX 11997 1175552 4096 4096 NT_STATUS_OK
ReadX 11997 1179648 61440 61440 NT_STATUS_OK
ReadX 11997 1241088 4096 4096 NT_STATUS_OK
ReadX 11997 1245184 61440 61440 NT_STATUS_OK
ReadX 11997 1306624 4096 4096 NT_STATUS_OK
ReadX 11997 1310720 61440 61440 NT_STATUS_OK
ReadX 11997 1372160 4096 4096 NT_STATUS_OK
ReadX 11997 1376256 61440 61440 NT_STATUS_OK
ReadX 11997 1437696 4096 4096 NT_STATUS_OK
ReadX 11997 1441792 61440 61440 NT_STATUS_OK
ReadX 11997 1503232 4096 4096 NT_STATUS_OK
ReadX 11997 1507328 61440 61440 NT_STATUS_OK
ReadX 11997 1568768 4096 4096 NT_STATUS_OK
ReadX 11997 1572864 61440 61440 NT_STATUS_OK
ReadX 11997 1634304 4096 4096 NT_STATUS_OK
ReadX 11997 1638400 61440 61440 NT_STATUS_OK
ReadX 11997 1699840 4096 4096 NT_STATUS_OK
ReadX 11997 1703936 61440 61440 NT_STATUS_OK
ReadX 11997 1765376 4096 4096 NT_STATUS_OK
ReadX 11997 1769472 61440 61440 NT_STATUS_OK
ReadX 11997 1830912 4096 4096 NT_STATUS_OK
ReadX 11997 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11998 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11999 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12000 NT_STATUS_OK
ReadX 12000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12001 NT_STATUS_OK
ReadX 12001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12002 NT_STATUS_OK
ReadX 12002 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12003 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12004 NT_STATUS_OK
QUERY_FILE_INFORMATION 12004 1004 NT_STATUS_OK
WriteX 12004 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12004 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12005 NT_STATUS_OK
Close 12005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12006 NT_STATUS_OK
WriteX 12006 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12006 258 NT_STATUS_OK
WriteX 12006 0 491 491 NT_STATUS_OK
Close 12006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12007 NT_STATUS_OK
ReadX 12007 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12004 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12009 NT_STATUS_OK
Close 12009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12010 NT_STATUS_OK
WriteX 12010 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12010 258 NT_STATUS_OK
WriteX 12010 0 543 543 NT_STATUS_OK
Close 12010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12011 NT_STATUS_OK
ReadX 12011 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11995 NT_STATUS_OK
Close 11996 NT_STATUS_OK
Close 11997 NT_STATUS_OK
Close 12011 NT_STATUS_OK
Close 11999 NT_STATUS_OK
Close 12000 NT_STATUS_OK
Close 12001 NT_STATUS_OK
Close 12002 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12015 NT_STATUS_OK
ReadX 12015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12016 NT_STATUS_OK
ReadX 12016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12017 NT_STATUS_OK
ReadX 12017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12018 NT_STATUS_OK
ReadX 12018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12019 NT_STATUS_OK
ReadX 12019 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12023 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12024 NT_STATUS_OK
QUERY_FILE_INFORMATION 12024 1004 NT_STATUS_OK
WriteX 12024 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12024 258 NT_STATUS_OK
WriteX 12024 0 2048 2048 NT_STATUS_OK
Close 12024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12025 NT_STATUS_OK
ReadX 12025 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12025 0 4096 4096 NT_STATUS_OK
Flush 12025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12025 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12029 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12030 NT_STATUS_OK
WriteX 12030 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12030 258 NT_STATUS_OK
WriteX 12030 0 2048 2048 NT_STATUS_OK
Close 12030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12031 NT_STATUS_OK
ReadX 12031 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12035 NT_STATUS_OK
Close 12035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12036 NT_STATUS_OK
WriteX 12036 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12036 258 NT_STATUS_OK
WriteX 12036 0 2048 2048 NT_STATUS_OK
Close 12036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12037 NT_STATUS_OK
ReadX 12037 0 2048 2048 NT_STATUS_OK
ReadX 12015 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12019 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12031 0 4096 4096 NT_STATUS_OK
WriteX 12015 0 8192 8192 NT_STATUS_OK
WriteX 12016 0 4096 4096 NT_STATUS_OK
WriteX 12017 0 4096 4096 NT_STATUS_OK
ReadX 12031 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12040 NT_STATUS_OK
ReadX 12040 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12041 NT_STATUS_OK
QUERY_FILE_INFORMATION 12041 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Close 12016 NT_STATUS_OK
Close 12017 NT_STATUS_OK
Close 12018 NT_STATUS_OK
Close 12031 NT_STATUS_OK
Close 12015 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12043 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12044 NT_STATUS_OK
ReadX 12044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12045 NT_STATUS_OK
ReadX 12045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12046 NT_STATUS_OK
ReadX 12046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12047 NT_STATUS_OK
ReadX 12047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12048 NT_STATUS_OK
ReadX 12048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12049 NT_STATUS_OK
ReadX 12049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12050 NT_STATUS_OK
ReadX 12050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12051 NT_STATUS_OK
ReadX 12051 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12052 NT_STATUS_OK
ReadX 12052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12053 NT_STATUS_OK
ReadX 12053 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12054 NT_STATUS_OK
ReadX 12054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12055 NT_STATUS_OK
ReadX 12055 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12056 NT_STATUS_OK
ReadX 12056 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12060 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12060 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12061 NT_STATUS_OK
QUERY_FILE_INFORMATION 12061 1004 NT_STATUS_OK
WriteX 12061 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12061 258 NT_STATUS_OK
WriteX 12061 0 2048 2048 NT_STATUS_OK
Close 12061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12062 NT_STATUS_OK
ReadX 12062 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12063 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12064 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12064 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12068 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12069 NT_STATUS_OK
QUERY_FILE_INFORMATION 12069 1004 NT_STATUS_OK
WriteX 12069 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12069 258 NT_STATUS_OK
WriteX 12069 0 2048 2048 NT_STATUS_OK
Close 12069 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12070 NT_STATUS_OK
ReadX 12070 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12062 0 4096 4096 NT_STATUS_OK
Flush 12062 NT_STATUS_OK
WriteX 12070 0 4096 4096 NT_STATUS_OK
Flush 12070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12062 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12070 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12064 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12071 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12071 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12072 NT_STATUS_OK
WriteX 12072 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12072 258 NT_STATUS_OK
WriteX 12072 0 4096 4096 NT_STATUS_OK
Close 12072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12073 NT_STATUS_OK
ReadX 12073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12074 NT_STATUS_OK
Close 12074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12075 NT_STATUS_OK
WriteX 12075 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12075 258 NT_STATUS_OK
WriteX 12075 0 4096 4096 NT_STATUS_OK
Close 12075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12076 NT_STATUS_OK
ReadX 12076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12076 0 4096 4096 NT_STATUS_OK
Close 12073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12056 NT_STATUS_OK
Close 12050 NT_STATUS_OK
Close 12064 NT_STATUS_OK
Close 12053 NT_STATUS_OK
Close 12054 NT_STATUS_OK
Close 12055 NT_STATUS_OK
Close 12051 NT_STATUS_OK
Close 12044 NT_STATUS_OK
Close 12045 NT_STATUS_OK
Close 12048 NT_STATUS_OK
Close 12049 NT_STATUS_OK
Close 12046 NT_STATUS_OK
Close 12047 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12079 NT_STATUS_OK
Close 12079 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12081 NT_STATUS_OK
ReadX 12081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12082 NT_STATUS_OK
Close 12082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12083 NT_STATUS_OK
WriteX 12083 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12083 258 NT_STATUS_OK
WriteX 12083 0 2048 2048 NT_STATUS_OK
Close 12083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12084 NT_STATUS_OK
ReadX 12084 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12085 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12086 NT_STATUS_OK
ReadX 12086 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12087 NT_STATUS_OK
ReadX 12087 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12088 NT_STATUS_OK
ReadX 12088 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12089 NT_STATUS_OK
ReadX 12089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12090 NT_STATUS_OK
ReadX 12090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12091 NT_STATUS_OK
ReadX 12091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12092 NT_STATUS_OK
ReadX 12092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12093 NT_STATUS_OK
ReadX 12093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12094 NT_STATUS_OK
ReadX 12094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12095 NT_STATUS_OK
ReadX 12095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12096 NT_STATUS_OK
ReadX 12096 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12097 NT_STATUS_OK
ReadX 12097 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12098 NT_STATUS_OK
QUERY_FILE_INFORMATION 12098 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12081 NT_STATUS_OK
Close 12084 NT_STATUS_OK
Close 12096 NT_STATUS_OK
Close 12091 NT_STATUS_OK
Close 12092 NT_STATUS_OK
Close 12093 NT_STATUS_OK
Close 12094 NT_STATUS_OK
Close 12095 NT_STATUS_OK
Close 12097 NT_STATUS_OK
Close 12085 NT_STATUS_OK
Close 12086 NT_STATUS_OK
Close 12089 NT_STATUS_OK
Close 12090 NT_STATUS_OK
Close 12087 NT_STATUS_OK
Close 12088 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12100 NT_STATUS_OK
QUERY_FILE_INFORMATION 12100 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12102 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12103 NT_STATUS_OK
ReadX 12103 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12104 NT_STATUS_OK
ReadX 12104 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12105 NT_STATUS_OK
ReadX 12105 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12106 NT_STATUS_OK
ReadX 12106 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12107 NT_STATUS_OK
ReadX 12107 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12108 NT_STATUS_OK
ReadX 12108 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12109 NT_STATUS_OK
ReadX 12109 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12110 NT_STATUS_OK
ReadX 12110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12111 NT_STATUS_OK
ReadX 12111 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12112 NT_STATUS_OK
ReadX 12112 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12113 NT_STATUS_OK
ReadX 12113 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12114 NT_STATUS_OK
ReadX 12114 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12115 NT_STATUS_OK
ReadX 12115 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12119 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12120 NT_STATUS_OK
QUERY_FILE_INFORMATION 12120 1004 NT_STATUS_OK
WriteX 12120 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12120 258 NT_STATUS_OK
WriteX 12120 0 2048 2048 NT_STATUS_OK
Close 12120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12121 NT_STATUS_OK
ReadX 12121 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12122 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12122 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12123 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12123 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12124 NT_STATUS_OK
ReadX 12124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12125 NT_STATUS_OK
ReadX 12125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12126 NT_STATUS_OK
ReadX 12126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12127 NT_STATUS_OK
ReadX 12127 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12131 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12132 NT_STATUS_OK
QUERY_FILE_INFORMATION 12132 1004 NT_STATUS_OK
WriteX 12132 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12132 258 NT_STATUS_OK
WriteX 12132 0 2048 2048 NT_STATUS_OK
Close 12132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12133 NT_STATUS_OK
ReadX 12133 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12134 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12135 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12135 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12139 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12140 NT_STATUS_OK
QUERY_FILE_INFORMATION 12140 1004 NT_STATUS_OK
WriteX 12140 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12140 258 NT_STATUS_OK
WriteX 12140 0 2048 2048 NT_STATUS_OK
Close 12140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12141 NT_STATUS_OK
ReadX 12141 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12121 0 4096 4096 NT_STATUS_OK
Flush 12121 NT_STATUS_OK
WriteX 12133 0 4096 4096 NT_STATUS_OK
Flush 12133 NT_STATUS_OK
WriteX 12141 0 4096 4096 NT_STATUS_OK
Flush 12141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12121 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12133 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12141 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12123 4096 16384 16384 NT_STATUS_OK
ReadX 12103 4096 16384 16384 NT_STATUS_OK
ReadX 12135 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12142 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12143 NT_STATUS_OK
ReadX 12143 0 2048 2048 NT_STATUS_OK
WriteX 12143 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12144 NT_STATUS_OK
QUERY_FILE_INFORMATION 12144 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12143 NT_STATUS_OK
Close 12127 NT_STATUS_OK
Close 12115 NT_STATUS_OK
Close 12107 NT_STATUS_OK
Close 12123 NT_STATUS_OK
Close 12124 NT_STATUS_OK
Close 12125 NT_STATUS_OK
Close 12126 NT_STATUS_OK
Close 12114 NT_STATUS_OK
Close 12135 NT_STATUS_OK
Close 12109 NT_STATUS_OK
Close 12112 NT_STATUS_OK
Close 12113 NT_STATUS_OK
Close 12110 NT_STATUS_OK
Close 12111 NT_STATUS_OK
Close 12103 NT_STATUS_OK
Close 12104 NT_STATUS_OK
Close 12105 NT_STATUS_OK
Close 12106 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12146 NT_STATUS_OK
QUERY_FILE_INFORMATION 12146 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12148 NT_STATUS_OK
QUERY_FILE_INFORMATION 12148 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12148 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12150 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12151 NT_STATUS_OK
ReadX 12151 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12152 NT_STATUS_OK
ReadX 12152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12153 NT_STATUS_OK
ReadX 12153 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12154 NT_STATUS_OK
ReadX 12154 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12155 NT_STATUS_OK
ReadX 12155 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12151 4096 16384 16384 NT_STATUS_OK
WriteX 12151 0 4096 4096 NT_STATUS_OK
WriteX 12152 0 4096 4096 NT_STATUS_OK
WriteX 12153 0 4096 4096 NT_STATUS_OK
WriteX 12154 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12156 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12157 NT_STATUS_OK
ReadX 12157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12158 NT_STATUS_OK
ReadX 12158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12159 NT_STATUS_OK
ReadX 12159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12160 NT_STATUS_OK
ReadX 12160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12161 NT_STATUS_OK
ReadX 12161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12162 NT_STATUS_OK
ReadX 12162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12163 NT_STATUS_OK
ReadX 12163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12164 NT_STATUS_OK
ReadX 12164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12165 NT_STATUS_OK
ReadX 12165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12166 NT_STATUS_OK
ReadX 12166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12167 NT_STATUS_OK
ReadX 12167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12168 NT_STATUS_OK
ReadX 12168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12169 NT_STATUS_OK
ReadX 12169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12170 NT_STATUS_OK
ReadX 12170 0 8192 8192 NT_STATUS_OK
ReadX 12157 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12171 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12171 0 4096 4096 NT_STATUS_OK
ReadX 12171 4096 4096 4096 NT_STATUS_OK
ReadX 12171 8192 4096 4096 NT_STATUS_OK
WriteX 12157 0 4096 4096 NT_STATUS_OK
WriteX 12158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12172 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12172 0 4096 4096 NT_STATUS_OK
ReadX 12172 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12151 0 4096 4096 NT_STATUS_OK
WriteX 12152 0 4096 4096 NT_STATUS_OK
WriteX 12153 0 4096 4096 NT_STATUS_OK
WriteX 12154 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12176 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12176 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12177 NT_STATUS_OK
QUERY_FILE_INFORMATION 12177 1004 NT_STATUS_OK
WriteX 12177 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12177 258 NT_STATUS_OK
WriteX 12177 0 2048 2048 NT_STATUS_OK
Close 12177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12178 NT_STATUS_OK
ReadX 12178 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12178 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12178 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12179 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12180 NT_STATUS_OK
ReadX 12180 0 4096 4096 NT_STATUS_OK
ReadX 12180 4096 4096 4096 NT_STATUS_OK
WriteX 12180 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12178 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12181 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12182 NT_STATUS_OK
ReadX 12182 0 4096 4096 NT_STATUS_OK
ReadX 12182 4096 4096 4096 NT_STATUS_OK
WriteX 12182 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12183 NT_STATUS_OK
QUERY_FILE_INFORMATION 12183 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12170 NT_STATUS_OK
Close 12155 NT_STATUS_OK
Close 12151 NT_STATUS_OK
Close 12152 NT_STATUS_OK
Close 12153 NT_STATUS_OK
Close 12154 NT_STATUS_OK
Close 12163 NT_STATUS_OK
Close 12168 NT_STATUS_OK
Close 12164 NT_STATUS_OK
Close 12165 NT_STATUS_OK
Close 12166 NT_STATUS_OK
Close 12167 NT_STATUS_OK
Close 12169 NT_STATUS_OK
Close 12157 NT_STATUS_OK
Close 12158 NT_STATUS_OK
Close 12161 NT_STATUS_OK
Close 12162 NT_STATUS_OK
Close 12159 NT_STATUS_OK
Close 12160 NT_STATUS_OK
Close 12182 NT_STATUS_OK
Close 12171 NT_STATUS_OK
Close 12172 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12185 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12185 0 4096 4096 NT_STATUS_OK
ReadX 12185 4096 4096 4096 NT_STATUS_OK
ReadX 12185 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12186 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12187 NT_STATUS_OK
ReadX 12187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12188 NT_STATUS_OK
ReadX 12188 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12189 NT_STATUS_OK
ReadX 12189 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12190 NT_STATUS_OK
ReadX 12190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12191 NT_STATUS_OK
ReadX 12191 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12192 NT_STATUS_OK
ReadX 12192 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12193 NT_STATUS_OK
ReadX 12193 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12194 NT_STATUS_OK
ReadX 12194 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12195 NT_STATUS_OK
ReadX 12195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12196 NT_STATUS_OK
ReadX 12196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12197 NT_STATUS_OK
ReadX 12197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12198 NT_STATUS_OK
ReadX 12198 0 4096 4096 NT_STATUS_OK
ReadX 12186 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12202 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12202 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12203 NT_STATUS_OK
QUERY_FILE_INFORMATION 12203 1004 NT_STATUS_OK
WriteX 12203 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12203 258 NT_STATUS_OK
WriteX 12203 0 2048 2048 NT_STATUS_OK
Close 12203 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12204 NT_STATUS_OK
ReadX 12204 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12204 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12208 NT_STATUS_OK
Close 12208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12209 NT_STATUS_OK
QUERY_FILE_INFORMATION 12209 1004 NT_STATUS_OK
WriteX 12209 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12209 258 NT_STATUS_OK
WriteX 12209 0 2048 2048 NT_STATUS_OK
Close 12209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12210 NT_STATUS_OK
ReadX 12210 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12210 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12193 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12211 NT_STATUS_OK
QUERY_FILE_INFORMATION 12211 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12197 NT_STATUS_OK
Close 12192 NT_STATUS_OK
Close 12198 NT_STATUS_OK
Close 12186 NT_STATUS_OK
Close 12187 NT_STATUS_OK
Close 12190 NT_STATUS_OK
Close 12191 NT_STATUS_OK
Close 12188 NT_STATUS_OK
Close 12189 NT_STATUS_OK
Close 12193 NT_STATUS_OK
Close 12194 NT_STATUS_OK
Close 12195 NT_STATUS_OK
Close 12196 NT_STATUS_OK
Close 12185 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12213 NT_STATUS_OK
QUERY_FILE_INFORMATION 12213 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12215 NT_STATUS_OK
ReadX 12215 61440 4096 4096 NT_STATUS_OK
ReadX 12215 126976 4096 4096 NT_STATUS_OK
WriteX 12215 0 65536 65536 NT_STATUS_OK
WriteX 12215 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12216 NT_STATUS_OK
ReadX 12216 61440 4096 4096 NT_STATUS_OK
ReadX 12216 126976 4096 4096 NT_STATUS_OK
ReadX 12216 192512 4096 4096 NT_STATUS_OK
ReadX 12216 258048 4096 4096 NT_STATUS_OK
WriteX 12216 0 65536 65536 NT_STATUS_OK
WriteX 12216 65536 65536 65536 NT_STATUS_OK
WriteX 12216 131072 65536 65536 NT_STATUS_OK
WriteX 12216 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12217 NT_STATUS_OK
ReadX 12217 61440 4096 4096 NT_STATUS_OK
ReadX 12217 126976 4096 4096 NT_STATUS_OK
ReadX 12217 192512 4096 4096 NT_STATUS_OK
ReadX 12217 258048 4096 4096 NT_STATUS_OK
ReadX 12217 323584 4096 4096 NT_STATUS_OK
ReadX 12217 389120 4096 4096 NT_STATUS_OK
ReadX 12217 454656 4096 4096 NT_STATUS_OK
ReadX 12217 520192 4096 4096 NT_STATUS_OK
WriteX 12217 0 65536 65536 NT_STATUS_OK
WriteX 12217 65536 65536 65536 NT_STATUS_OK
WriteX 12217 131072 65536 65536 NT_STATUS_OK
WriteX 12217 196608 65536 65536 NT_STATUS_OK
WriteX 12217 262144 65536 65536 NT_STATUS_OK
WriteX 12217 327680 65536 65536 NT_STATUS_OK
WriteX 12217 393216 65536 65536 NT_STATUS_OK
WriteX 12217 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12218 NT_STATUS_OK
ReadX 12218 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12218 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12218 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12218 8192 4096 4096 NT_STATUS_OK
ReadX 12218 12288 4096 4096 NT_STATUS_OK
ReadX 12218 16384 4096 4096 NT_STATUS_OK
ReadX 12218 20480 4096 4096 NT_STATUS_OK
ReadX 12218 24576 4096 4096 NT_STATUS_OK
ReadX 12218 28672 4096 4096 NT_STATUS_OK
ReadX 12218 32768 4096 4096 NT_STATUS_OK
ReadX 12218 36864 4096 4096 NT_STATUS_OK
ReadX 12218 40960 4096 4096 NT_STATUS_OK
ReadX 12218 45056 4096 4096 NT_STATUS_OK
ReadX 12218 49152 4096 4096 NT_STATUS_OK
ReadX 12218 53248 4096 4096 NT_STATUS_OK
ReadX 12218 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12218 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12219 NT_STATUS_OK
Close 12219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12215 NT_STATUS_OK
Close 12216 NT_STATUS_OK
Close 12217 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12221 NT_STATUS_OK
WriteX 12221 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12221 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12221 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12221 1004 NT_STATUS_OK
WriteX 12221 0 57088 57088 NT_STATUS_OK
WriteX 12221 0 4096 4096 NT_STATUS_OK
Flush 12221 NT_STATUS_OK
Close 12218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12222 NT_STATUS_OK
SET_FILE_INFORMATION 12222 1004 NT_STATUS_OK
Close 12222 NT_STATUS_OK
SET_FILE_INFORMATION 12221 1004 NT_STATUS_OK
WriteX 12221 0 4096 4096 NT_STATUS_OK
Close 12221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12223 NT_STATUS_OK
Close 12223 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12225 NT_STATUS_OK
ReadX 12225 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12225 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12226 NT_STATUS_OK
WriteX 12226 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12226 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12226 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12226 1004 NT_STATUS_OK
WriteX 12226 0 51456 51456 NT_STATUS_OK
WriteX 12226 0 4096 4096 NT_STATUS_OK
Flush 12226 NT_STATUS_OK
SET_FILE_INFORMATION 12226 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12226 1004 NT_STATUS_OK
WriteX 12226 0 4096 4096 NT_STATUS_OK
Close 12226 NT_STATUS_OK
Close 12225 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12228 NT_STATUS_OK
Close 12228 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12230 NT_STATUS_OK
ReadX 12230 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12230 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12232 NT_STATUS_OK
Close 12232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12235 NT_STATUS_OK
WriteX 12235 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12235 258 NT_STATUS_OK
WriteX 12235 0 53077 53077 NT_STATUS_OK
Close 12235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12236 NT_STATUS_OK
WriteX 12236 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12236 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12236 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12236 1004 NT_STATUS_OK
WriteX 12236 0 65536 65536 NT_STATUS_OK
WriteX 12236 65536 1856 1856 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
SET_FILE_INFORMATION 12236 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12236 1004 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Close 12236 NT_STATUS_OK
Close 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12238 NT_STATUS_OK
Close 12238 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12240 NT_STATUS_OK
ReadX 12240 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12242 NT_STATUS_OK
Close 12242 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12245 NT_STATUS_OK
WriteX 12245 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12245 258 NT_STATUS_OK
WriteX 12245 0 7983 7983 NT_STATUS_OK
Close 12245 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12247 NT_STATUS_OK
Close 12247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12250 NT_STATUS_OK
WriteX 12250 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12250 258 NT_STATUS_OK
WriteX 12250 0 65536 65536 NT_STATUS_OK
WriteX 12250 65536 65536 65536 NT_STATUS_OK
WriteX 12250 131072 65536 65536 NT_STATUS_OK
WriteX 12250 196608 65536 65536 NT_STATUS_OK
WriteX 12250 262144 65536 65536 NT_STATUS_OK
WriteX 12250 327680 65536 65536 NT_STATUS_OK
WriteX 12250 393216 65536 65536 NT_STATUS_OK
WriteX 12250 458752 46731 46731 NT_STATUS_OK
Close 12250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12251 NT_STATUS_OK
WriteX 12251 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12251 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12240 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12251 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12251 1004 NT_STATUS_OK
WriteX 12251 0 65536 65536 NT_STATUS_OK
WriteX 12251 65536 22848 22848 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
SET_FILE_INFORMATION 12251 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12251 1004 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Close 12251 NT_STATUS_OK
Close 12240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12253 NT_STATUS_OK
Close 12253 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12255 NT_STATUS_OK
ReadX 12255 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12255 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12256 NT_STATUS_OK
ReadX 12256 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12256 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12256 1004 NT_STATUS_OK
ReadX 12256 8192 4096 4096 NT_STATUS_OK
ReadX 12256 12288 4096 4096 NT_STATUS_OK
ReadX 12256 16384 4096 4096 NT_STATUS_OK
ReadX 12256 20480 4096 4096 NT_STATUS_OK
ReadX 12256 24576 4096 4096 NT_STATUS_OK
ReadX 12256 28672 4096 4096 NT_STATUS_OK
ReadX 12256 32768 4096 4096 NT_STATUS_OK
ReadX 12256 36864 4096 4096 NT_STATUS_OK
ReadX 12256 40960 4096 4096 NT_STATUS_OK
ReadX 12256 45056 4096 4096 NT_STATUS_OK
ReadX 12256 49152 4096 4096 NT_STATUS_OK
ReadX 12256 53248 4096 4096 NT_STATUS_OK
ReadX 12256 57344 4096 4096 NT_STATUS_OK
ReadX 12256 61440 4096 4096 NT_STATUS_OK
ReadX 12256 65536 4096 4096 NT_STATUS_OK
ReadX 12256 69632 4096 4096 NT_STATUS_OK
ReadX 12256 73728 4096 4096 NT_STATUS_OK
ReadX 12256 77824 4096 4096 NT_STATUS_OK
ReadX 12256 81920 4096 4096 NT_STATUS_OK
ReadX 12256 86016 4096 4096 NT_STATUS_OK
ReadX 12256 90112 4096 4096 NT_STATUS_OK
ReadX 12256 94208 4096 4096 NT_STATUS_OK
ReadX 12256 98304 4096 4096 NT_STATUS_OK
ReadX 12256 102400 4096 4096 NT_STATUS_OK
ReadX 12256 106496 4096 4096 NT_STATUS_OK
ReadX 12256 110592 4096 4096 NT_STATUS_OK
ReadX 12256 114688 4096 4096 NT_STATUS_OK
ReadX 12256 118784 4096 4096 NT_STATUS_OK
ReadX 12256 122880 4096 4096 NT_STATUS_OK
ReadX 12256 126976 4096 4096 NT_STATUS_OK
ReadX 12256 131072 4096 4096 NT_STATUS_OK
ReadX 12256 135168 4096 4096 NT_STATUS_OK
ReadX 12256 139264 4096 4096 NT_STATUS_OK
ReadX 12256 143360 4096 4096 NT_STATUS_OK
ReadX 12256 147456 4096 4096 NT_STATUS_OK
ReadX 12256 151552 4096 4096 NT_STATUS_OK
ReadX 12256 155648 4096 4096 NT_STATUS_OK
ReadX 12256 159744 4096 4096 NT_STATUS_OK
ReadX 12256 163840 4096 4096 NT_STATUS_OK
ReadX 12256 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12256 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12257 NT_STATUS_OK
Close 12257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12255 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12259 NT_STATUS_OK
WriteX 12259 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12259 258 NT_STATUS_OK
Close 12256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12260 NT_STATUS_OK
SET_FILE_INFORMATION 12260 1004 NT_STATUS_OK
Close 12260 NT_STATUS_OK
WriteX 12259 0 42388 42388 NT_STATUS_OK
Close 12259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12261 NT_STATUS_OK
Close 12261 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12263 NT_STATUS_OK
ReadX 12263 0 4096 4096 NT_STATUS_OK
ReadX 12263 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12264 NT_STATUS_OK
WriteX 12264 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12264 258 NT_STATUS_OK
SET_FILE_INFORMATION 12264 1004 NT_STATUS_OK
WriteX 12264 0 42652 42652 NT_STATUS_OK
Close 12264 NT_STATUS_OK
Close 12263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12266 NT_STATUS_OK
Close 12266 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12268 NT_STATUS_OK
ReadX 12268 0 4096 4096 NT_STATUS_OK
ReadX 12268 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12270 NT_STATUS_OK
Close 12270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12273 NT_STATUS_OK
WriteX 12273 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12273 258 NT_STATUS_OK
WriteX 12273 0 65536 65536 NT_STATUS_OK
WriteX 12273 65536 49 49 NT_STATUS_OK
Close 12273 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12274 NT_STATUS_OK
ReadX 12274 0 61440 61440 NT_STATUS_OK
ReadX 12274 61440 4096 4096 NT_STATUS_OK
ReadX 12274 65536 61440 61440 NT_STATUS_OK
ReadX 12274 126976 4096 4096 NT_STATUS_OK
ReadX 12274 131072 61440 61440 NT_STATUS_OK
ReadX 12274 192512 4096 4096 NT_STATUS_OK
ReadX 12274 196608 61440 61440 NT_STATUS_OK
ReadX 12274 258048 4096 4096 NT_STATUS_OK
ReadX 12274 262144 61440 61440 NT_STATUS_OK
ReadX 12274 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12275 NT_STATUS_OK
ReadX 12275 0 61440 61440 NT_STATUS_OK
ReadX 12275 61440 4096 4096 NT_STATUS_OK
ReadX 12275 65536 61440 61440 NT_STATUS_OK
ReadX 12275 126976 4096 4096 NT_STATUS_OK
ReadX 12275 131072 61440 61440 NT_STATUS_OK
ReadX 12275 192512 4096 4096 NT_STATUS_OK
ReadX 12275 196608 61440 61440 NT_STATUS_OK
ReadX 12275 258048 4096 4096 NT_STATUS_OK
ReadX 12275 262144 61440 61440 NT_STATUS_OK
ReadX 12275 323584 4096 4096 NT_STATUS_OK
ReadX 12275 327680 61440 61440 NT_STATUS_OK
ReadX 12275 389120 4096 4096 NT_STATUS_OK
ReadX 12275 393216 61440 61440 NT_STATUS_OK
ReadX 12275 454656 4096 4096 NT_STATUS_OK
ReadX 12275 458752 61440 61440 NT_STATUS_OK
ReadX 12275 520192 4096 4096 NT_STATUS_OK
ReadX 12275 524288 61440 61440 NT_STATUS_OK
ReadX 12275 585728 4096 4096 NT_STATUS_OK
ReadX 12275 589824 61440 61440 NT_STATUS_OK
ReadX 12275 651264 4096 4096 NT_STATUS_OK
ReadX 12275 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12276 NT_STATUS_OK
ReadX 12276 0 61440 61440 NT_STATUS_OK
ReadX 12276 61440 4096 4096 NT_STATUS_OK
ReadX 12276 65536 61440 61440 NT_STATUS_OK
ReadX 12276 126976 4096 4096 NT_STATUS_OK
ReadX 12276 131072 61440 61440 NT_STATUS_OK
ReadX 12276 192512 4096 4096 NT_STATUS_OK
ReadX 12276 196608 61440 61440 NT_STATUS_OK
ReadX 12276 258048 4096 4096 NT_STATUS_OK
ReadX 12276 262144 61440 61440 NT_STATUS_OK
ReadX 12276 323584 4096 4096 NT_STATUS_OK
ReadX 12276 327680 61440 61440 NT_STATUS_OK
ReadX 12276 389120 4096 4096 NT_STATUS_OK
ReadX 12276 393216 61440 61440 NT_STATUS_OK
ReadX 12276 454656 4096 4096 NT_STATUS_OK
ReadX 12276 458752 61440 61440 NT_STATUS_OK
ReadX 12276 520192 4096 4096 NT_STATUS_OK
ReadX 12276 524288 61440 61440 NT_STATUS_OK
ReadX 12276 585728 4096 4096 NT_STATUS_OK
ReadX 12276 589824 61440 61440 NT_STATUS_OK
ReadX 12276 651264 4096 4096 NT_STATUS_OK
ReadX 12276 655360 61440 61440 NT_STATUS_OK
ReadX 12276 716800 4096 4096 NT_STATUS_OK
ReadX 12276 720896 61440 61440 NT_STATUS_OK
ReadX 12276 782336 4096 4096 NT_STATUS_OK
ReadX 12276 786432 61440 61440 NT_STATUS_OK
ReadX 12276 847872 4096 4096 NT_STATUS_OK
ReadX 12276 851968 61440 61440 NT_STATUS_OK
ReadX 12276 913408 4096 4096 NT_STATUS_OK
ReadX 12276 917504 61440 61440 NT_STATUS_OK
ReadX 12276 978944 4096 4096 NT_STATUS_OK
ReadX 12276 983040 61440 61440 NT_STATUS_OK
ReadX 12276 1044480 4096 4096 NT_STATUS_OK
ReadX 12276 1048576 61440 61440 NT_STATUS_OK
ReadX 12276 1110016 4096 4096 NT_STATUS_OK
ReadX 12276 1114112 61440 61440 NT_STATUS_OK
ReadX 12276 1175552 4096 4096 NT_STATUS_OK
ReadX 12276 1179648 61440 61440 NT_STATUS_OK
ReadX 12276 1241088 4096 4096 NT_STATUS_OK
ReadX 12276 1245184 61440 61440 NT_STATUS_OK
ReadX 12276 1306624 4096 4096 NT_STATUS_OK
ReadX 12276 1310720 61440 61440 NT_STATUS_OK
ReadX 12276 1372160 4096 4096 NT_STATUS_OK
ReadX 12276 1376256 61440 61440 NT_STATUS_OK
ReadX 12276 1437696 4096 4096 NT_STATUS_OK
ReadX 12276 1441792 61440 61440 NT_STATUS_OK
ReadX 12276 1503232 4096 4096 NT_STATUS_OK
ReadX 12276 1507328 61440 61440 NT_STATUS_OK
ReadX 12276 1568768 4096 4096 NT_STATUS_OK
ReadX 12276 1572864 61440 61440 NT_STATUS_OK
ReadX 12276 1634304 4096 4096 NT_STATUS_OK
ReadX 12276 1638400 61440 61440 NT_STATUS_OK
ReadX 12276 1699840 4096 4096 NT_STATUS_OK
ReadX 12276 1703936 61440 61440 NT_STATUS_OK
ReadX 12276 1765376 4096 4096 NT_STATUS_OK
ReadX 12276 1769472 61440 61440 NT_STATUS_OK
ReadX 12276 1830912 4096 4096 NT_STATUS_OK
ReadX 12276 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12277 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12278 NT_STATUS_OK
QUERY_FILE_INFORMATION 12278 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12278 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12278 1005 NT_STATUS_OK
ReadX 12278 2156 24 24 NT_STATUS_OK
ReadX 12278 2139 276 276 NT_STATUS_OK
ReadX 12278 2136 14 14 NT_STATUS_OK
ReadX 12278 2136 7 7 NT_STATUS_OK
ReadX 12278 2138 12 12 NT_STATUS_OK
ReadX 12278 2137 8 8 NT_STATUS_OK
ReadX 12278 2135 15 15 NT_STATUS_OK
ReadX 12278 0 16 16 NT_STATUS_OK
ReadX 12278 16 2048 2048 NT_STATUS_OK
ReadX 12278 2064 2048 2048 NT_STATUS_OK
ReadX 12278 257 2048 2048 NT_STATUS_OK
ReadX 12278 385 2048 2048 NT_STATUS_OK
ReadX 12278 513 2048 2048 NT_STATUS_OK
ReadX 12278 641 2048 2048 NT_STATUS_OK
ReadX 12278 769 2048 2048 NT_STATUS_OK
ReadX 12278 897 2048 2048 NT_STATUS_OK
ReadX 12278 1025 2048 2048 NT_STATUS_OK
ReadX 12278 1153 2048 2048 NT_STATUS_OK
ReadX 12278 1281 2048 2048 NT_STATUS_OK
ReadX 12278 1409 2048 2048 NT_STATUS_OK
ReadX 12278 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12280 NT_STATUS_OK
Close 12280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12274 NT_STATUS_OK
Close 12275 NT_STATUS_OK
Close 12276 NT_STATUS_OK
Close 12268 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12283 NT_STATUS_OK
WriteX 12283 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12283 258 NT_STATUS_OK
WriteX 12283 0 10575 10575 NT_STATUS_OK
Flush 12283 NT_STATUS_OK
Close 12283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12284 NT_STATUS_OK
Close 12284 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12286 NT_STATUS_OK
ReadX 12286 0 4096 4096 NT_STATUS_OK
Close 12278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12288 NT_STATUS_OK
LockX 12288 2147483538 1 NT_STATUS_OK
UnlockX 12288 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12288 1005 NT_STATUS_OK
ReadX 12288 0 512 512 NT_STATUS_OK
ReadX 12288 512 512 512 NT_STATUS_OK
ReadX 12288 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12288 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12288 1004 NT_STATUS_OK
Close 12288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12289 NT_STATUS_OK
QUERY_FILE_INFORMATION 12289 1005 NT_STATUS_OK
ReadX 12289 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12290 NT_STATUS_OK
LockX 12290 2147483538 1 NT_STATUS_OK
UnlockX 12290 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12290 1005 NT_STATUS_OK
ReadX 12290 0 512 512 NT_STATUS_OK
ReadX 12290 512 512 512 NT_STATUS_OK
ReadX 12290 1024 512 512 NT_STATUS_OK
ReadX 12290 288 20 20 NT_STATUS_OK
ReadX 12290 308 2084 2084 NT_STATUS_OK
ReadX 12290 388 2084 2084 NT_STATUS_OK
ReadX 12290 388 2084 2084 NT_STATUS_OK
ReadX 12277 2157 1386 1386 NT_STATUS_OK
ReadX 12290 2472 399 399 NT_STATUS_OK
ReadX 12290 3072 1536 1536 NT_STATUS_OK
ReadX 12290 544 149 149 NT_STATUS_OK
ReadX 12290 693 485 485 NT_STATUS_OK
Close 12290 NT_STATUS_OK
ReadX 12277 2157 4096 4096 NT_STATUS_OK
ReadX 12277 6253 4096 4096 NT_STATUS_OK
ReadX 12277 10349 4096 4096 NT_STATUS_OK
ReadX 12277 14445 4096 4096 NT_STATUS_OK
ReadX 12277 18541 4096 4096 NT_STATUS_OK
ReadX 12277 22637 256 256 NT_STATUS_OK
ReadX 12277 22893 4096 4096 NT_STATUS_OK
ReadX 12277 26989 4096 4096 NT_STATUS_OK
ReadX 12277 31085 4096 4096 NT_STATUS_OK
ReadX 12277 35181 4096 4096 NT_STATUS_OK
ReadX 12277 39277 4096 4096 NT_STATUS_OK
ReadX 12277 43373 4096 4096 NT_STATUS_OK
ReadX 12277 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12277 2157 1024 1024 NT_STATUS_OK
ReadX 12277 1667 4688 4688 NT_STATUS_OK
ReadX 12277 6355 3516 3516 NT_STATUS_OK
ReadX 12277 9871 16384 16384 NT_STATUS_OK
ReadX 12277 26255 3771 3771 NT_STATUS_OK
ReadX 12277 30026 2048 2048 NT_STATUS_OK
ReadX 12277 32074 1024 1024 NT_STATUS_OK
ReadX 12277 33098 6652 6652 NT_STATUS_OK
ReadX 12277 39750 16384 16384 NT_STATUS_OK
ReadX 12277 56134 10496 10496 NT_STATUS_OK
ReadX 12277 66630 1784 1784 NT_STATUS_OK
ReadX 12277 68414 90 90 NT_STATUS_OK
ReadX 12277 68504 273 273 NT_STATUS_OK
ReadX 12277 68777 1600 1600 NT_STATUS_OK
ReadX 12277 70377 640 640 NT_STATUS_OK
ReadX 12277 71017 1280 1280 NT_STATUS_OK
ReadX 12277 72297 8464 8464 NT_STATUS_OK
ReadX 12277 80761 158 158 NT_STATUS_OK
ReadX 12277 80919 912 912 NT_STATUS_OK
ReadX 12277 81831 1980 1980 NT_STATUS_OK
ReadX 12277 83811 2256 2256 NT_STATUS_OK
ReadX 12277 86067 400 400 NT_STATUS_OK
ReadX 12277 86467 252 252 NT_STATUS_OK
ReadX 12277 86719 42 42 NT_STATUS_OK
ReadX 12277 86761 725 725 NT_STATUS_OK
ReadX 12277 2009 512 512 NT_STATUS_OK
ReadX 12277 3895 9 9 NT_STATUS_OK
ReadX 12277 3781 46 46 NT_STATUS_OK
ReadX 12277 4059 92 92 NT_STATUS_OK
ReadX 12277 3781 92 92 NT_STATUS_OK
ReadX 12277 3986 184 184 NT_STATUS_OK
ReadX 12277 3987 16384 16384 NT_STATUS_OK
ReadX 12277 3902 16384 16384 NT_STATUS_OK
ReadX 12277 3781 10240 10240 NT_STATUS_OK
ReadX 12277 3821 16384 16384 NT_STATUS_OK
ReadX 12277 3891 935 935 NT_STATUS_OK
ReadX 12277 4060 10240 10240 NT_STATUS_OK
ReadX 12277 4059 184 184 NT_STATUS_OK
ReadX 12277 256 184 184 NT_STATUS_OK
ReadX 12277 256 1026 1026 NT_STATUS_OK
ReadX 12277 3901 326 326 NT_STATUS_OK
ReadX 12277 3899 652 652 NT_STATUS_OK
ReadX 12277 256 2 2 NT_STATUS_OK
ReadX 12277 258 4948 4948 NT_STATUS_OK
Close 12277 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12292 NT_STATUS_OK
Close 12292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12295 NT_STATUS_OK
WriteX 12295 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12295 258 NT_STATUS_OK
WriteX 12295 0 65536 65536 NT_STATUS_OK
WriteX 12295 65536 65536 65536 NT_STATUS_OK
WriteX 12295 131072 65536 65536 NT_STATUS_OK
WriteX 12295 196608 65536 65536 NT_STATUS_OK
WriteX 12295 262144 65536 65536 NT_STATUS_OK
WriteX 12295 327680 65536 65536 NT_STATUS_OK
WriteX 12295 393216 65536 65536 NT_STATUS_OK
WriteX 12295 458752 65536 65536 NT_STATUS_OK
WriteX 12295 524288 65536 65536 NT_STATUS_OK
WriteX 12295 589824 35257 35257 NT_STATUS_OK
Close 12295 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12297 NT_STATUS_OK
Close 12297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12300 NT_STATUS_OK
WriteX 12300 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12300 258 NT_STATUS_OK
WriteX 12300 0 65536 65536 NT_STATUS_OK
WriteX 12300 65536 65536 65536 NT_STATUS_OK
WriteX 12300 131072 65536 65536 NT_STATUS_OK
WriteX 12300 196608 65536 65536 NT_STATUS_OK
WriteX 12300 262144 65536 65536 NT_STATUS_OK
WriteX 12300 327680 65536 65536 NT_STATUS_OK
WriteX 12300 393216 65536 65536 NT_STATUS_OK
WriteX 12300 458752 65536 65536 NT_STATUS_OK
WriteX 12300 524288 65536 65536 NT_STATUS_OK
WriteX 12300 589824 57598 57598 NT_STATUS_OK
Close 12300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12302 NT_STATUS_OK
WriteX 12302 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12302 258 NT_STATUS_OK
WriteX 12302 0 12543 12543 NT_STATUS_OK
Flush 12302 NT_STATUS_OK
Close 12302 NT_STATUS_OK
Close 12286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12304 NT_STATUS_OK
Close 12304 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12306 NT_STATUS_OK
ReadX 12306 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12308 NT_STATUS_OK
QUERY_FILE_INFORMATION 12308 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12308 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12308 1005 NT_STATUS_OK
ReadX 12308 1938 24 24 NT_STATUS_OK
ReadX 12308 1920 276 276 NT_STATUS_OK
ReadX 12308 1918 14 14 NT_STATUS_OK
ReadX 12308 1918 7 7 NT_STATUS_OK
ReadX 12308 1919 12 12 NT_STATUS_OK
ReadX 12308 1919 8 8 NT_STATUS_OK
ReadX 12308 1917 15 15 NT_STATUS_OK
ReadX 12308 0 16 16 NT_STATUS_OK
ReadX 12308 16 2048 2048 NT_STATUS_OK
ReadX 12308 2064 2048 2048 NT_STATUS_OK
ReadX 12308 257 2048 2048 NT_STATUS_OK
ReadX 12308 385 2048 2048 NT_STATUS_OK
ReadX 12308 513 2048 2048 NT_STATUS_OK
ReadX 12308 641 2048 2048 NT_STATUS_OK
ReadX 12308 769 2048 2048 NT_STATUS_OK
ReadX 12308 897 2048 2048 NT_STATUS_OK
ReadX 12308 1025 2048 2048 NT_STATUS_OK
ReadX 12308 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12310 NT_STATUS_OK
Close 12310 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12313 NT_STATUS_OK
WriteX 12313 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12313 258 NT_STATUS_OK
WriteX 12313 0 11588 11588 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
Close 12313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12314 NT_STATUS_OK
Close 12314 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12316 NT_STATUS_OK
ReadX 12316 0 4096 4096 NT_STATUS_OK
Close 12308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12318 NT_STATUS_OK
WriteX 12318 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12318 258 NT_STATUS_OK
WriteX 12318 0 11615 11615 NT_STATUS_OK
Flush 12318 NT_STATUS_OK
Close 12318 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12320 NT_STATUS_OK
Close 12320 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12322 NT_STATUS_OK
ReadX 12322 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12324 NT_STATUS_OK
Close 12324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12327 NT_STATUS_OK
WriteX 12327 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12327 258 NT_STATUS_OK
WriteX 12327 0 65536 65536 NT_STATUS_OK
WriteX 12327 65536 16050 16050 NT_STATUS_OK
Close 12327 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12307 1939 64 64 NT_STATUS_OK
ReadX 12307 128 248 248 NT_STATUS_OK
ReadX 12307 128 568 568 NT_STATUS_OK
ReadX 12307 3872 1536 1536 NT_STATUS_OK
ReadX 12307 3456 2560 2560 NT_STATUS_OK
ReadX 12307 3136 512 512 NT_STATUS_OK
ReadX 12307 2880 4096 4096 NT_STATUS_OK
ReadX 12307 3264 3072 3072 NT_STATUS_OK
ReadX 12307 320 4096 4096 NT_STATUS_OK
ReadX 12307 1024 4096 4096 NT_STATUS_OK
ReadX 12307 3616 4096 4096 NT_STATUS_OK
ReadX 12307 1939 64 64 NT_STATUS_OK
ReadX 12307 128 248 248 NT_STATUS_OK
ReadX 12307 128 608 608 NT_STATUS_OK
ReadX 12307 2858 1024 1024 NT_STATUS_OK
ReadX 12307 2810 4096 4096 NT_STATUS_OK
ReadX 12307 2826 4096 4096 NT_STATUS_OK
ReadX 12307 2580 2048 2048 NT_STATUS_OK
ReadX 12307 2800 2560 2560 NT_STATUS_OK
ReadX 12307 2100 4096 4096 NT_STATUS_OK
ReadX 12307 2084 4096 4096 NT_STATUS_OK
ReadX 12307 868 4096 4096 NT_STATUS_OK
ReadX 12307 2324 4096 4096 NT_STATUS_OK
ReadX 12307 884 4096 4096 NT_STATUS_OK
ReadX 12307 2604 1024 1024 NT_STATUS_OK
ReadX 12307 580 4096 4096 NT_STATUS_OK
ReadX 12307 596 4096 4096 NT_STATUS_OK
ReadX 12307 2752 4096 4096 NT_STATUS_OK
ReadX 12307 2842 1024 1024 NT_STATUS_OK
ReadX 12307 660 4096 4096 NT_STATUS_OK
ReadX 12307 2720 4096 4096 NT_STATUS_OK
ReadX 12307 2736 4096 4096 NT_STATUS_OK
ReadX 12307 628 4096 4096 NT_STATUS_OK
ReadX 12307 2704 4096 4096 NT_STATUS_OK
ReadX 12307 1556 4096 4096 NT_STATUS_OK
ReadX 12307 576 4096 4096 NT_STATUS_OK
ReadX 12307 3168 1536 1536 NT_STATUS_OK
ReadX 12307 832 4096 4096 NT_STATUS_OK
ReadX 12307 1088 4096 4096 NT_STATUS_OK
ReadX 12307 1344 4096 4096 NT_STATUS_OK
ReadX 12307 1600 4096 4096 NT_STATUS_OK
ReadX 12307 1856 4096 4096 NT_STATUS_OK
ReadX 12307 2112 4096 4096 NT_STATUS_OK
ReadX 12307 1892 4096 4096 NT_STATUS_OK
ReadX 12307 820 4096 4096 NT_STATUS_OK
ReadX 12307 788 4096 4096 NT_STATUS_OK
ReadX 12307 1604 4096 4096 NT_STATUS_OK
ReadX 12307 3648 4096 4096 NT_STATUS_OK
ReadX 12307 2608 4096 4096 NT_STATUS_OK
ReadX 12307 548 4096 4096 NT_STATUS_OK
ReadX 12307 740 4096 4096 NT_STATUS_OK
ReadX 12307 1344 4096 4096 NT_STATUS_OK
ReadX 12307 3392 4096 4096 NT_STATUS_OK
ReadX 12307 3904 4096 4096 NT_STATUS_OK
ReadX 12307 644 4096 4096 NT_STATUS_OK
ReadX 12307 676 4096 4096 NT_STATUS_OK
ReadX 12307 2688 4096 4096 NT_STATUS_OK
ReadX 12307 320 4096 4096 NT_STATUS_OK
ReadX 12307 900 4096 4096 NT_STATUS_OK
ReadX 12307 1908 4096 4096 NT_STATUS_OK
ReadX 12307 852 4096 4096 NT_STATUS_OK
ReadX 12307 724 4096 4096 NT_STATUS_OK
ReadX 12307 2292 4096 4096 NT_STATUS_OK
ReadX 12307 612 4096 4096 NT_STATUS_OK
ReadX 12307 388 4096 4096 NT_STATUS_OK
ReadX 12307 2368 4096 4096 NT_STATUS_OK
ReadX 12307 2624 4096 4096 NT_STATUS_OK
ReadX 12307 500 4096 4096 NT_STATUS_OK
ReadX 12307 356 4096 4096 NT_STATUS_OK
ReadX 12307 1024 4096 4096 NT_STATUS_OK
ReadX 12307 576 4096 4096 NT_STATUS_OK
ReadX 12307 340 4096 4096 NT_STATUS_OK
ReadX 12307 420 4096 4096 NT_STATUS_OK
ReadX 12307 1600 4096 4096 NT_STATUS_OK
ReadX 12307 404 4096 4096 NT_STATUS_OK
ReadX 12307 1428 4096 4096 NT_STATUS_OK
ReadX 12307 2656 4096 4096 NT_STATUS_OK
ReadX 12307 2624 4096 4096 NT_STATUS_OK
ReadX 12307 452 4096 4096 NT_STATUS_OK
ReadX 12307 692 4096 4096 NT_STATUS_OK
ReadX 12307 564 4096 4096 NT_STATUS_OK
ReadX 12307 372 4096 4096 NT_STATUS_OK
ReadX 12307 468 4096 4096 NT_STATUS_OK
ReadX 12307 484 4096 4096 NT_STATUS_OK
ReadX 12307 1088 4096 4096 NT_STATUS_OK
ReadX 12307 1924 4096 4096 NT_STATUS_OK
ReadX 12307 2768 4096 4096 NT_STATUS_OK
ReadX 12307 832 4096 4096 NT_STATUS_OK
ReadX 12307 836 4096 4096 NT_STATUS_OK
ReadX 12307 1856 4096 4096 NT_STATUS_OK
ReadX 12307 2640 4096 4096 NT_STATUS_OK
ReadX 12307 436 4096 4096 NT_STATUS_OK
ReadX 12307 1828 4096 4096 NT_STATUS_OK
ReadX 12307 804 4096 4096 NT_STATUS_OK
ReadX 12307 1860 4096 4096 NT_STATUS_OK
ReadX 12307 1812 4096 4096 NT_STATUS_OK
ReadX 12307 756 4096 4096 NT_STATUS_OK
ReadX 12307 1636 4096 4096 NT_STATUS_OK
ReadX 12307 772 4096 4096 NT_STATUS_OK
ReadX 12307 2036 4096 4096 NT_STATUS_OK
ReadX 12307 1220 4096 4096 NT_STATUS_OK
ReadX 12307 1652 4096 4096 NT_STATUS_OK
ReadX 12307 2588 4096 4096 NT_STATUS_OK
ReadX 12307 916 4096 4096 NT_STATUS_OK
ReadX 12307 260 4096 4096 NT_STATUS_OK
ReadX 12307 932 4096 4096 NT_STATUS_OK
ReadX 12307 2624 4096 4096 NT_STATUS_OK
ReadX 12307 308 4096 4096 NT_STATUS_OK
ReadX 12307 292 4096 4096 NT_STATUS_OK
ReadX 12307 1140 4096 4096 NT_STATUS_OK
ReadX 12307 276 4096 4096 NT_STATUS_OK
ReadX 12307 2020 4096 4096 NT_STATUS_OK
ReadX 12307 2880 4096 4096 NT_STATUS_OK
ReadX 12307 516 4096 4096 NT_STATUS_OK
ReadX 12307 1844 4096 4096 NT_STATUS_OK
ReadX 12307 1124 4096 4096 NT_STATUS_OK
ReadX 12307 3136 4096 4096 NT_STATUS_OK
ReadX 12307 324 4096 4096 NT_STATUS_OK
ReadX 12307 1156 4096 4096 NT_STATUS_OK
ReadX 12307 1172 4096 4096 NT_STATUS_OK
ReadX 12307 2112 4096 4096 NT_STATUS_OK
ReadX 12307 2368 4096 4096 NT_STATUS_OK
ReadX 12307 964 4096 4096 NT_STATUS_OK
ReadX 12307 980 4096 4096 NT_STATUS_OK
ReadX 12307 1012 4096 4096 NT_STATUS_OK
ReadX 12307 532 4096 4096 NT_STATUS_OK
ReadX 12307 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12307 1620 4096 4096 NT_STATUS_OK
ReadX 12307 1604 4096 4096 NT_STATUS_OK
ReadX 12307 2116 4096 4096 NT_STATUS_OK
ReadX 12307 2132 4096 4096 NT_STATUS_OK
ReadX 12307 2148 4096 4096 NT_STATUS_OK
ReadX 12307 2276 4096 4096 NT_STATUS_OK
ReadX 12307 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12329 NT_STATUS_OK
Close 12329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12332 NT_STATUS_OK
QUERY_FILE_INFORMATION 12287 1004 NT_STATUS_OK
Close 12287 NT_STATUS_OK
WriteX 12332 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12332 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12289 1004 NT_STATUS_OK
Close 12289 NT_STATUS_OK
WriteX 12332 0 65536 65536 NT_STATUS_OK
WriteX 12332 65536 64850 64850 NT_STATUS_OK
Close 12332 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12334 NT_STATUS_OK
WriteX 12334 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12334 258 NT_STATUS_OK
ReadX 12307 2068 4096 4096 NT_STATUS_OK
ReadX 12307 1588 4096 4096 NT_STATUS_OK
ReadX 12307 1572 4096 4096 NT_STATUS_OK
WriteX 12334 0 18630 18630 NT_STATUS_OK
Flush 12334 NT_STATUS_OK
Close 12334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12336 NT_STATUS_OK
Close 12336 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12338 NT_STATUS_OK
ReadX 12338 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12307 612 4096 4096 NT_STATUS_OK
ReadX 12307 564 4096 4096 NT_STATUS_OK
ReadX 12307 1876 4096 4096 NT_STATUS_OK
ReadX 12307 628 4096 4096 NT_STATUS_OK
ReadX 12307 740 4096 4096 NT_STATUS_OK
ReadX 12307 724 4096 4096 NT_STATUS_OK
ReadX 12307 644 4096 4096 NT_STATUS_OK
ReadX 12307 2324 4096 4096 NT_STATUS_OK
ReadX 12307 660 4096 4096 NT_STATUS_OK
ReadX 12307 852 4096 4096 NT_STATUS_OK
ReadX 12307 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12307 2368 4096 4096 NT_STATUS_OK
ReadX 12307 1024 4096 4096 NT_STATUS_OK
ReadX 12307 320 4096 4096 NT_STATUS_OK
ReadX 12307 580 4096 4096 NT_STATUS_OK
ReadX 12307 3136 512 512 NT_STATUS_OK
ReadX 12307 2880 4096 4096 NT_STATUS_OK
Close 12307 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12339 NT_STATUS_OK
ReadX 12339 61440 4096 4096 NT_STATUS_OK
ReadX 12339 126976 4096 4096 NT_STATUS_OK
WriteX 12339 0 65536 65536 NT_STATUS_OK
WriteX 12339 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12340 NT_STATUS_OK
ReadX 12340 61440 4096 4096 NT_STATUS_OK
ReadX 12340 126976 4096 4096 NT_STATUS_OK
ReadX 12340 192512 4096 4096 NT_STATUS_OK
ReadX 12340 258048 4096 4096 NT_STATUS_OK
WriteX 12340 0 65536 65536 NT_STATUS_OK
WriteX 12340 65536 65536 65536 NT_STATUS_OK
WriteX 12340 131072 65536 65536 NT_STATUS_OK
WriteX 12340 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12341 NT_STATUS_OK
ReadX 12341 61440 4096 4096 NT_STATUS_OK
ReadX 12341 126976 4096 4096 NT_STATUS_OK
ReadX 12341 192512 4096 4096 NT_STATUS_OK
ReadX 12341 258048 4096 4096 NT_STATUS_OK
ReadX 12341 323584 4096 4096 NT_STATUS_OK
ReadX 12341 389120 4096 4096 NT_STATUS_OK
ReadX 12341 454656 4096 4096 NT_STATUS_OK
ReadX 12341 520192 4096 4096 NT_STATUS_OK
WriteX 12341 0 65536 65536 NT_STATUS_OK
WriteX 12341 65536 65536 65536 NT_STATUS_OK
WriteX 12341 131072 65536 65536 NT_STATUS_OK
WriteX 12341 196608 65536 65536 NT_STATUS_OK
WriteX 12341 262144 65536 65536 NT_STATUS_OK
WriteX 12341 327680 65536 65536 NT_STATUS_OK
WriteX 12341 393216 65536 65536 NT_STATUS_OK
WriteX 12341 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12342 NT_STATUS_OK
ReadX 12342 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12343 NT_STATUS_OK
Close 12343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12344 NT_STATUS_OK
WriteX 12344 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12344 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12342 0 8192 8192 NT_STATUS_OK
Flush 12342 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12342 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12342 0 8192 8192 NT_STATUS_OK
Flush 12342 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12342 0 8192 8192 NT_STATUS_OK
Flush 12342 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12342 0 8192 8192 NT_STATUS_OK
Flush 12342 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12346 NT_STATUS_OK
Close 12346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12338 NT_STATUS_OK
Close 12306 NT_STATUS_OK
Close 12339 NT_STATUS_OK
Close 12340 NT_STATUS_OK
Close 12341 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12349 NT_STATUS_OK
WriteX 12349 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12349 258 NT_STATUS_OK
WriteX 12349 0 62591 62591 NT_STATUS_OK
Close 12349 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12351 NT_STATUS_OK
Close 12351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12354 NT_STATUS_OK
WriteX 12354 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12354 258 NT_STATUS_OK
WriteX 12354 0 10845 10845 NT_STATUS_OK
Close 12354 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12356 NT_STATUS_OK
Close 12356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12359 NT_STATUS_OK
WriteX 12359 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12359 258 NT_STATUS_OK
WriteX 12359 0 30118 30118 NT_STATUS_OK
Close 12359 NT_STATUS_OK
WriteX 12342 0 4096 4096 NT_STATUS_OK
WriteX 12344 0 64 64 NT_STATUS_OK
Close 12344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12342 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12361 NT_STATUS_OK
ReadX 12361 0 61440 61440 NT_STATUS_OK
ReadX 12361 61440 4096 4096 NT_STATUS_OK
ReadX 12361 65536 61440 61440 NT_STATUS_OK
ReadX 12361 126976 4096 4096 NT_STATUS_OK
ReadX 12361 131072 61440 61440 NT_STATUS_OK
ReadX 12361 192512 4096 4096 NT_STATUS_OK
ReadX 12361 196608 61440 61440 NT_STATUS_OK
ReadX 12361 258048 4096 4096 NT_STATUS_OK
ReadX 12361 262144 61440 61440 NT_STATUS_OK
ReadX 12361 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12362 NT_STATUS_OK
ReadX 12362 0 61440 61440 NT_STATUS_OK
ReadX 12362 61440 4096 4096 NT_STATUS_OK
ReadX 12362 65536 61440 61440 NT_STATUS_OK
ReadX 12362 126976 4096 4096 NT_STATUS_OK
ReadX 12362 131072 61440 61440 NT_STATUS_OK
ReadX 12362 192512 4096 4096 NT_STATUS_OK
ReadX 12362 196608 61440 61440 NT_STATUS_OK
ReadX 12362 258048 4096 4096 NT_STATUS_OK
ReadX 12362 262144 61440 61440 NT_STATUS_OK
ReadX 12362 323584 4096 4096 NT_STATUS_OK
ReadX 12362 327680 61440 61440 NT_STATUS_OK
ReadX 12362 389120 4096 4096 NT_STATUS_OK
ReadX 12362 393216 61440 61440 NT_STATUS_OK
ReadX 12362 454656 4096 4096 NT_STATUS_OK
ReadX 12362 458752 61440 61440 NT_STATUS_OK
ReadX 12362 520192 4096 4096 NT_STATUS_OK
ReadX 12362 524288 61440 61440 NT_STATUS_OK
ReadX 12362 585728 4096 4096 NT_STATUS_OK
ReadX 12362 589824 61440 61440 NT_STATUS_OK
ReadX 12362 651264 4096 4096 NT_STATUS_OK
ReadX 12362 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12363 NT_STATUS_OK
ReadX 12363 0 61440 61440 NT_STATUS_OK
ReadX 12363 61440 4096 4096 NT_STATUS_OK
ReadX 12363 65536 61440 61440 NT_STATUS_OK
ReadX 12363 126976 4096 4096 NT_STATUS_OK
ReadX 12363 131072 61440 61440 NT_STATUS_OK
ReadX 12363 192512 4096 4096 NT_STATUS_OK
ReadX 12363 196608 61440 61440 NT_STATUS_OK
ReadX 12363 258048 4096 4096 NT_STATUS_OK
ReadX 12363 262144 61440 61440 NT_STATUS_OK
ReadX 12363 323584 4096 4096 NT_STATUS_OK
ReadX 12363 327680 61440 61440 NT_STATUS_OK
ReadX 12363 389120 4096 4096 NT_STATUS_OK
ReadX 12363 393216 61440 61440 NT_STATUS_OK
ReadX 12363 454656 4096 4096 NT_STATUS_OK
ReadX 12363 458752 61440 61440 NT_STATUS_OK
ReadX 12363 520192 4096 4096 NT_STATUS_OK
ReadX 12363 524288 61440 61440 NT_STATUS_OK
ReadX 12363 585728 4096 4096 NT_STATUS_OK
ReadX 12363 589824 61440 61440 NT_STATUS_OK
ReadX 12363 651264 4096 4096 NT_STATUS_OK
ReadX 12363 655360 61440 61440 NT_STATUS_OK
ReadX 12363 716800 4096 4096 NT_STATUS_OK
ReadX 12363 720896 61440 61440 NT_STATUS_OK
ReadX 12363 782336 4096 4096 NT_STATUS_OK
ReadX 12363 786432 61440 61440 NT_STATUS_OK
ReadX 12363 847872 4096 4096 NT_STATUS_OK
ReadX 12363 851968 61440 61440 NT_STATUS_OK
ReadX 12363 913408 4096 4096 NT_STATUS_OK
ReadX 12363 917504 61440 61440 NT_STATUS_OK
ReadX 12363 978944 4096 4096 NT_STATUS_OK
ReadX 12363 983040 61440 61440 NT_STATUS_OK
ReadX 12363 1044480 4096 4096 NT_STATUS_OK
ReadX 12363 1048576 61440 61440 NT_STATUS_OK
ReadX 12363 1110016 4096 4096 NT_STATUS_OK
ReadX 12363 1114112 61440 61440 NT_STATUS_OK
ReadX 12363 1175552 4096 4096 NT_STATUS_OK
ReadX 12363 1179648 61440 61440 NT_STATUS_OK
ReadX 12363 1241088 4096 4096 NT_STATUS_OK
ReadX 12363 1245184 61440 61440 NT_STATUS_OK
ReadX 12363 1306624 4096 4096 NT_STATUS_OK
ReadX 12363 1310720 61440 61440 NT_STATUS_OK
ReadX 12363 1372160 4096 4096 NT_STATUS_OK
ReadX 12363 1376256 61440 61440 NT_STATUS_OK
ReadX 12363 1437696 4096 4096 NT_STATUS_OK
ReadX 12363 1441792 61440 61440 NT_STATUS_OK
ReadX 12363 1503232 4096 4096 NT_STATUS_OK
ReadX 12363 1507328 61440 61440 NT_STATUS_OK
ReadX 12363 1568768 4096 4096 NT_STATUS_OK
ReadX 12363 1572864 61440 61440 NT_STATUS_OK
ReadX 12363 1634304 4096 4096 NT_STATUS_OK
ReadX 12363 1638400 61440 61440 NT_STATUS_OK
ReadX 12363 1699840 4096 4096 NT_STATUS_OK
ReadX 12363 1703936 61440 61440 NT_STATUS_OK
ReadX 12363 1765376 4096 4096 NT_STATUS_OK
ReadX 12363 1769472 61440 61440 NT_STATUS_OK
ReadX 12363 1830912 4096 4096 NT_STATUS_OK
ReadX 12363 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12364 NT_STATUS_OK
Close 12364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12361 NT_STATUS_OK
Close 12362 NT_STATUS_OK
Close 12363 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12366 NT_STATUS_OK
ReadX 12366 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12367 NT_STATUS_OK
ReadX 12367 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12368 NT_STATUS_OK
ReadX 12368 0 4096 4096 NT_STATUS_OK
ReadX 12368 4096 4096 4096 NT_STATUS_OK
ReadX 12368 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12369 NT_STATUS_OK
Close 12369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12366 NT_STATUS_OK
Close 12367 NT_STATUS_OK
Close 12368 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12371 NT_STATUS_OK
ReadX 12371 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12372 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12372 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12373 NT_STATUS_OK
Close 12373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12371 NT_STATUS_OK
Close 12372 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12375 NT_STATUS_OK
ReadX 12375 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12376 NT_STATUS_OK
ReadX 12376 0 8192 8192 NT_STATUS_OK
ReadX 12376 8192 8192 8192 NT_STATUS_OK
ReadX 12376 16384 8192 8192 NT_STATUS_OK
ReadX 12376 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12378 NT_STATUS_OK
Close 12378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12376 NT_STATUS_OK
Close 12375 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12381 NT_STATUS_OK
WriteX 12381 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12381 258 NT_STATUS_OK
WriteX 12381 0 10438 10438 NT_STATUS_OK
Close 12381 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12382 NT_STATUS_OK
Close 12382 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12383 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12384 NT_STATUS_OK
Close 12384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12385 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12386 NT_STATUS_OK
Close 12386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12387 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12388 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12389 NT_STATUS_OK
Close 12389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12390 NT_STATUS_OK
ReadX 12390 0 4096 4096 NT_STATUS_OK
ReadX 12390 4096 4096 4096 NT_STATUS_OK
ReadX 12390 8192 4096 4096 NT_STATUS_OK
ReadX 12390 12288 8192 8192 NT_STATUS_OK
ReadX 12390 20480 8192 8192 NT_STATUS_OK
ReadX 12390 28672 8192 8192 NT_STATUS_OK
ReadX 12390 36864 8192 8192 NT_STATUS_OK
ReadX 12390 45056 8192 8192 NT_STATUS_OK
ReadX 12390 53248 8192 8192 NT_STATUS_OK
ReadX 12390 61440 8192 8192 NT_STATUS_OK
ReadX 12390 69632 8192 8192 NT_STATUS_OK
ReadX 12390 77824 8192 8192 NT_STATUS_OK
ReadX 12390 86016 8192 8192 NT_STATUS_OK
ReadX 12390 94208 8192 8192 NT_STATUS_OK
ReadX 12390 102400 8192 8192 NT_STATUS_OK
ReadX 12390 110592 8192 8192 NT_STATUS_OK
ReadX 12390 118784 8192 8192 NT_STATUS_OK
ReadX 12390 126976 8192 8192 NT_STATUS_OK
ReadX 12390 135168 8192 8192 NT_STATUS_OK
ReadX 12390 143360 8192 8192 NT_STATUS_OK
ReadX 12390 151552 8192 8192 NT_STATUS_OK
ReadX 12390 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12390 NT_STATUS_OK
Close 12383 NT_STATUS_OK
Close 12385 NT_STATUS_OK
Close 12387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12392 NT_STATUS_OK
Close 12392 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12395 NT_STATUS_OK
WriteX 12395 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12395 258 NT_STATUS_OK
WriteX 12395 0 28489 28489 NT_STATUS_OK
Close 12395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12396 NT_STATUS_OK
Close 12396 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12398 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12398 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12399 NT_STATUS_OK
Close 12399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12398 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12401 NT_STATUS_OK
ReadX 12401 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12402 NT_STATUS_OK
ReadX 12402 0 8192 8192 NT_STATUS_OK
ReadX 12402 8192 8192 8192 NT_STATUS_OK
ReadX 12402 16384 8192 8192 NT_STATUS_OK
ReadX 12402 24576 8192 8192 NT_STATUS_OK
ReadX 12402 32768 16384 16384 NT_STATUS_OK
ReadX 12402 49152 8192 8192 NT_STATUS_OK
ReadX 12402 57344 8192 8192 NT_STATUS_OK
ReadX 12402 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12404 NT_STATUS_OK
Close 12404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12402 NT_STATUS_OK
Close 12401 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12407 NT_STATUS_OK
WriteX 12407 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12407 258 NT_STATUS_OK
WriteX 12407 0 29253 29253 NT_STATUS_OK
Close 12407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12408 NT_STATUS_OK
Close 12408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12409 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12411 NT_STATUS_OK
Close 12411 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12414 NT_STATUS_OK
WriteX 12414 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12414 258 NT_STATUS_OK
WriteX 12414 0 30183 30183 NT_STATUS_OK
Close 12414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12415 NT_STATUS_OK
Close 12415 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12417 NT_STATUS_OK
WriteX 12417 0 510 510 NT_STATUS_OK
WriteX 12417 510 512 512 NT_STATUS_OK
WriteX 12417 1022 510 510 NT_STATUS_OK
WriteX 12417 1532 510 510 NT_STATUS_OK
WriteX 12417 2042 168 168 NT_STATUS_OK
Close 12417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12418 NT_STATUS_OK
Close 12418 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12420 NT_STATUS_OK
ReadX 12420 0 4096 4096 NT_STATUS_OK
WriteX 12420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12421 NT_STATUS_OK
ReadX 12421 61440 4096 4096 NT_STATUS_OK
ReadX 12421 126976 4096 4096 NT_STATUS_OK
WriteX 12421 0 65536 65536 NT_STATUS_OK
WriteX 12421 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12422 NT_STATUS_OK
ReadX 12422 61440 4096 4096 NT_STATUS_OK
ReadX 12422 126976 4096 4096 NT_STATUS_OK
ReadX 12422 192512 4096 4096 NT_STATUS_OK
ReadX 12422 258048 4096 4096 NT_STATUS_OK
WriteX 12422 0 65536 65536 NT_STATUS_OK
WriteX 12422 65536 65536 65536 NT_STATUS_OK
WriteX 12422 131072 65536 65536 NT_STATUS_OK
WriteX 12422 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12423 NT_STATUS_OK
ReadX 12423 61440 4096 4096 NT_STATUS_OK
ReadX 12423 126976 4096 4096 NT_STATUS_OK
ReadX 12423 192512 4096 4096 NT_STATUS_OK
ReadX 12423 258048 4096 4096 NT_STATUS_OK
ReadX 12423 323584 4096 4096 NT_STATUS_OK
ReadX 12423 389120 4096 4096 NT_STATUS_OK
ReadX 12423 454656 4096 4096 NT_STATUS_OK
ReadX 12423 520192 4096 4096 NT_STATUS_OK
WriteX 12423 0 65536 65536 NT_STATUS_OK
WriteX 12423 65536 65536 65536 NT_STATUS_OK
WriteX 12423 131072 65536 65536 NT_STATUS_OK
WriteX 12423 196608 65536 65536 NT_STATUS_OK
WriteX 12423 262144 65536 65536 NT_STATUS_OK
WriteX 12423 327680 65536 65536 NT_STATUS_OK
WriteX 12423 393216 65536 65536 NT_STATUS_OK
WriteX 12423 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12424 NT_STATUS_OK
Close 12424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12420 NT_STATUS_OK
Close 12421 NT_STATUS_OK
Close 12422 NT_STATUS_OK
Close 12423 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12426 NT_STATUS_OK
Close 12426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12430 NT_STATUS_OK
Close 12430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12433 NT_STATUS_OK
Close 12433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12435 NT_STATUS_OK
Close 12435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12439 NT_STATUS_OK
Close 12439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12442 NT_STATUS_OK
Close 12442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12444 NT_STATUS_OK
Close 12444 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12448 NT_STATUS_OK
Close 12448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12453 NT_STATUS_OK
Close 12453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12458 NT_STATUS_OK
Close 12458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12463 NT_STATUS_OK
Close 12463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12468 NT_STATUS_OK
Close 12468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12473 NT_STATUS_OK
Close 12473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12478 NT_STATUS_OK
Close 12478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12483 NT_STATUS_OK
Close 12483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12486 NT_STATUS_OK
Close 12486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12489 NT_STATUS_OK
Close 12489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12492 NT_STATUS_OK
WriteX 12492 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12492 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12492 0 65536 65536 NT_STATUS_OK
WriteX 12492 65536 65536 65536 NT_STATUS_OK
WriteX 12492 131072 65536 65536 NT_STATUS_OK
WriteX 12492 196608 65536 65536 NT_STATUS_OK
WriteX 12492 262144 26634 26634 NT_STATUS_OK
Close 12492 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12497 NT_STATUS_OK
Close 12497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12498 NT_STATUS_OK
Close 12498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12499 NT_STATUS_OK
ReadX 12499 0 4096 4096 NT_STATUS_OK
Close 12499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12500 NT_STATUS_OK
ReadX 12500 0 4096 4096 NT_STATUS_OK
ReadX 12500 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12501 NT_STATUS_OK
Close 12501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12500 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12505 NT_STATUS_OK
Close 12505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12508 NT_STATUS_OK
Close 12508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12510 NT_STATUS_OK
Close 12510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12514 NT_STATUS_OK
Close 12514 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12517 NT_STATUS_OK
Close 12517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12519 NT_STATUS_OK
Close 12519 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12523 NT_STATUS_OK
Close 12523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12528 NT_STATUS_OK
Close 12528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12533 NT_STATUS_OK
Close 12533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12538 NT_STATUS_OK
Close 12538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12543 NT_STATUS_OK
Close 12543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12548 NT_STATUS_OK
Close 12548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12552 NT_STATUS_OK
Close 12552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12557 NT_STATUS_OK
Close 12557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12562 NT_STATUS_OK
Close 12562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12565 NT_STATUS_OK
Close 12565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12567 NT_STATUS_OK
Close 12567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12577 NT_STATUS_OK
Close 12577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12578 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12579 NT_STATUS_OK
ReadX 12579 0 4096 4096 NT_STATUS_OK
Close 12579 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12580 NT_STATUS_OK
ReadX 12580 0 4096 4096 NT_STATUS_OK
Close 12580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12581 NT_STATUS_OK
ReadX 12581 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12591 NT_STATUS_OK
Close 12591 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12592 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12592 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12593 NT_STATUS_OK
ReadX 12593 0 4096 4096 NT_STATUS_OK
Close 12593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12594 NT_STATUS_OK
ReadX 12594 0 4096 4096 NT_STATUS_OK
Close 12594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12595 NT_STATUS_OK
ReadX 12595 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12581 NT_STATUS_OK
Close 12595 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12624 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12624 0 4096 4096 NT_STATUS_OK
Close 12624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12625 NT_STATUS_OK
ReadX 12625 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12626 NT_STATUS_OK
ReadX 12626 0 4096 4096 NT_STATUS_OK
ReadX 12626 4096 4096 4096 NT_STATUS_OK
ReadX 12626 8192 4096 4096 NT_STATUS_OK
ReadX 12626 12288 4096 4096 NT_STATUS_OK
ReadX 12626 16384 4096 4096 NT_STATUS_OK
ReadX 12626 20480 4096 4096 NT_STATUS_OK
ReadX 12626 24576 4096 4096 NT_STATUS_OK
ReadX 12626 28672 4096 4096 NT_STATUS_OK
ReadX 12626 32768 4096 4096 NT_STATUS_OK
ReadX 12626 36864 4096 4096 NT_STATUS_OK
ReadX 12626 40960 4096 4096 NT_STATUS_OK
ReadX 12626 45056 4096 4096 NT_STATUS_OK
ReadX 12626 49152 4096 4096 NT_STATUS_OK
ReadX 12626 53248 4096 4096 NT_STATUS_OK
ReadX 12626 57344 4096 4096 NT_STATUS_OK
ReadX 12626 61440 4096 4096 NT_STATUS_OK
ReadX 12626 65536 4096 4096 NT_STATUS_OK
ReadX 12626 69632 4096 4096 NT_STATUS_OK
ReadX 12626 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12626 1004 NT_STATUS_OK
WriteX 12626 0 4096 4096 NT_STATUS_OK
Close 12626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12627 NT_STATUS_OK
SET_FILE_INFORMATION 12627 1004 NT_STATUS_OK
Close 12627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12628 NT_STATUS_OK
ReadX 12628 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12629 NT_STATUS_OK
Close 12629 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12632 NT_STATUS_OK
WriteX 12632 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12632 258 NT_STATUS_OK
WriteX 12632 0 65536 65536 NT_STATUS_OK
WriteX 12632 65536 19979 19979 NT_STATUS_OK
Close 12632 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12633 NT_STATUS_OK
ReadX 12633 0 4096 4096 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
Flush 12633 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
Flush 12633 NT_STATUS_OK
QUERY_FILE_INFORMATION 12633 1004 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
Flush 12633 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
Flush 12633 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
Flush 12633 NT_STATUS_OK
SET_FILE_INFORMATION 12633 1004 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
Flush 12633 NT_STATUS_OK
Close 12633 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12634 NT_STATUS_OK
ReadX 12634 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12635 NT_STATUS_OK
ReadX 12635 0 4096 4096 NT_STATUS_OK
Close 12634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12636 NT_STATUS_OK
ReadX 12636 0 4096 4096 NT_STATUS_OK
Close 12636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12637 NT_STATUS_OK
ReadX 12637 0 4096 4096 NT_STATUS_OK
Close 12637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12638 NT_STATUS_OK
ReadX 12638 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12638 1004 NT_STATUS_OK
WriteX 12638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12639 NT_STATUS_OK
Close 12639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12635 NT_STATUS_OK
Close 12638 NT_STATUS_OK
Close 12628 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12641 NT_STATUS_OK
Close 12641 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12644 NT_STATUS_OK
WriteX 12644 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12644 258 NT_STATUS_OK
WriteX 12644 0 65536 65536 NT_STATUS_OK
WriteX 12644 65536 17654 17654 NT_STATUS_OK
Close 12644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12645 NT_STATUS_OK
ReadX 12645 0 4096 4096 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
QUERY_FILE_INFORMATION 12645 1004 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
SET_FILE_INFORMATION 12645 1004 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
Close 12645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12646 NT_STATUS_OK
SET_FILE_INFORMATION 12646 1004 NT_STATUS_OK
Close 12646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12647 NT_STATUS_OK
ReadX 12647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12648 NT_STATUS_OK
Close 12648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12650 NT_STATUS_OK
ReadX 12650 0 4096 4096 NT_STATUS_OK
ReadX 12650 4096 4096 4096 NT_STATUS_OK
ReadX 12650 8192 4096 4096 NT_STATUS_OK
ReadX 12650 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12650 16384 4096 4096 NT_STATUS_OK
ReadX 12650 20480 4096 4096 NT_STATUS_OK
ReadX 12650 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12651 NT_STATUS_OK
ReadX 12651 0 4096 4096 NT_STATUS_OK
Close 12651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12652 NT_STATUS_OK
ReadX 12652 0 4096 4096 NT_STATUS_OK
Close 12652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12653 NT_STATUS_OK
ReadX 12653 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12653 1004 NT_STATUS_OK
WriteX 12653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12654 NT_STATUS_OK
Close 12654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12653 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12656 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12659 NT_STATUS_OK
WriteX 12659 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12659 258 NT_STATUS_OK
WriteX 12659 0 65536 65536 NT_STATUS_OK
WriteX 12659 65536 19490 19490 NT_STATUS_OK
Close 12659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12660 NT_STATUS_OK
ReadX 12660 0 4096 4096 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
Flush 12660 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
Flush 12660 NT_STATUS_OK
QUERY_FILE_INFORMATION 12660 1004 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
Flush 12660 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
Flush 12660 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
Flush 12660 NT_STATUS_OK
SET_FILE_INFORMATION 12660 1004 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
Flush 12660 NT_STATUS_OK
Close 12660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12661 NT_STATUS_OK
SET_FILE_INFORMATION 12661 1004 NT_STATUS_OK
Close 12661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12662 NT_STATUS_OK
ReadX 12662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12663 NT_STATUS_OK
Close 12663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12665 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12665 0 4096 4096 NT_STATUS_OK
Close 12665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12666 NT_STATUS_OK
ReadX 12666 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12667 NT_STATUS_OK
ReadX 12667 0 4096 4096 NT_STATUS_OK
ReadX 12667 4096 4096 4096 NT_STATUS_OK
ReadX 12667 8192 4096 4096 NT_STATUS_OK
ReadX 12667 12288 4096 4096 NT_STATUS_OK
ReadX 12667 16384 4096 4096 NT_STATUS_OK
ReadX 12667 20480 4096 4096 NT_STATUS_OK
ReadX 12667 24576 4096 4096 NT_STATUS_OK
ReadX 12667 28672 4096 4096 NT_STATUS_OK
ReadX 12667 32768 4096 4096 NT_STATUS_OK
ReadX 12667 36864 4096 4096 NT_STATUS_OK
ReadX 12667 40960 4096 4096 NT_STATUS_OK
ReadX 12667 45056 4096 4096 NT_STATUS_OK
ReadX 12667 49152 4096 4096 NT_STATUS_OK
ReadX 12667 53248 4096 4096 NT_STATUS_OK
ReadX 12667 57344 4096 4096 NT_STATUS_OK
ReadX 12667 61440 4096 4096 NT_STATUS_OK
ReadX 12667 65536 4096 4096 NT_STATUS_OK
ReadX 12667 69632 4096 4096 NT_STATUS_OK
ReadX 12667 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12667 1004 NT_STATUS_OK
WriteX 12667 0 4096 4096 NT_STATUS_OK
Close 12667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12668 NT_STATUS_OK
SET_FILE_INFORMATION 12668 1004 NT_STATUS_OK
Close 12668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12669 NT_STATUS_OK
ReadX 12669 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12670 NT_STATUS_OK
Close 12670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12662 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12673 NT_STATUS_OK
WriteX 12673 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12673 258 NT_STATUS_OK
WriteX 12673 0 65536 65536 NT_STATUS_OK
WriteX 12673 65536 8866 8866 NT_STATUS_OK
Close 12673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12674 NT_STATUS_OK
ReadX 12674 0 4096 4096 NT_STATUS_OK
WriteX 12674 0 4096 4096 NT_STATUS_OK
Flush 12674 NT_STATUS_OK
SET_FILE_INFORMATION 12674 1004 NT_STATUS_OK
WriteX 12674 0 4096 4096 NT_STATUS_OK
Flush 12674 NT_STATUS_OK
Close 12674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12675 NT_STATUS_OK
ReadX 12675 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12676 NT_STATUS_OK
ReadX 12676 0 4096 4096 NT_STATUS_OK
Close 12676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12677 NT_STATUS_OK
ReadX 12677 0 4096 4096 NT_STATUS_OK
Close 12677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12678 NT_STATUS_OK
ReadX 12678 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12678 1004 NT_STATUS_OK
WriteX 12678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12679 NT_STATUS_OK
Close 12679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12678 NT_STATUS_OK
Close 12669 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12681 NT_STATUS_OK
Close 12681 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12684 NT_STATUS_OK
WriteX 12684 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12684 258 NT_STATUS_OK
WriteX 12684 0 65536 65536 NT_STATUS_OK
WriteX 12684 65536 9298 9298 NT_STATUS_OK
Close 12684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12685 NT_STATUS_OK
ReadX 12685 0 4096 4096 NT_STATUS_OK
WriteX 12685 0 4096 4096 NT_STATUS_OK
Flush 12685 NT_STATUS_OK
SET_FILE_INFORMATION 12685 1004 NT_STATUS_OK
WriteX 12685 0 4096 4096 NT_STATUS_OK
Flush 12685 NT_STATUS_OK
Close 12685 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12686 NT_STATUS_OK
SET_FILE_INFORMATION 12686 1004 NT_STATUS_OK
Close 12686 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12687 NT_STATUS_OK
ReadX 12687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12688 NT_STATUS_OK
Close 12688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12691 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12691 0 4096 4096 NT_STATUS_OK
Close 12691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12692 NT_STATUS_OK
ReadX 12692 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12692 4096 4096 4096 NT_STATUS_OK
ReadX 12692 8192 4096 4096 NT_STATUS_OK
ReadX 12692 12288 4096 4096 NT_STATUS_OK
ReadX 12692 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12687 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12693 NT_STATUS_OK
ReadX 12693 0 4096 4096 NT_STATUS_OK
Close 12693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12694 NT_STATUS_OK
ReadX 12694 0 4096 4096 NT_STATUS_OK
Close 12694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12695 NT_STATUS_OK
ReadX 12695 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12695 1004 NT_STATUS_OK
WriteX 12695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12696 NT_STATUS_OK
Close 12696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12692 NT_STATUS_OK
Close 12695 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12698 NT_STATUS_OK
Close 12698 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12701 NT_STATUS_OK
WriteX 12701 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12701 258 NT_STATUS_OK
WriteX 12701 0 65536 65536 NT_STATUS_OK
WriteX 12701 65536 11540 11540 NT_STATUS_OK
Close 12701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12702 NT_STATUS_OK
ReadX 12702 0 4096 4096 NT_STATUS_OK
WriteX 12702 0 4096 4096 NT_STATUS_OK
Flush 12702 NT_STATUS_OK
SET_FILE_INFORMATION 12702 1004 NT_STATUS_OK
WriteX 12702 0 4096 4096 NT_STATUS_OK
Flush 12702 NT_STATUS_OK
Close 12702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12703 NT_STATUS_OK
SET_FILE_INFORMATION 12703 1004 NT_STATUS_OK
Close 12703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12704 NT_STATUS_OK
ReadX 12704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12705 NT_STATUS_OK
Close 12705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12707 NT_STATUS_OK
ReadX 12707 61440 4096 4096 NT_STATUS_OK
ReadX 12707 126976 4096 4096 NT_STATUS_OK
WriteX 12707 0 65536 65536 NT_STATUS_OK
WriteX 12707 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12708 NT_STATUS_OK
ReadX 12708 61440 4096 4096 NT_STATUS_OK
ReadX 12708 126976 4096 4096 NT_STATUS_OK
ReadX 12708 192512 4096 4096 NT_STATUS_OK
ReadX 12708 258048 4096 4096 NT_STATUS_OK
WriteX 12708 0 65536 65536 NT_STATUS_OK
WriteX 12708 65536 65536 65536 NT_STATUS_OK
WriteX 12708 131072 65536 65536 NT_STATUS_OK
WriteX 12708 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12709 NT_STATUS_OK
ReadX 12709 61440 4096 4096 NT_STATUS_OK
ReadX 12709 126976 4096 4096 NT_STATUS_OK
ReadX 12709 192512 4096 4096 NT_STATUS_OK
ReadX 12709 258048 4096 4096 NT_STATUS_OK
ReadX 12709 323584 4096 4096 NT_STATUS_OK
ReadX 12709 389120 4096 4096 NT_STATUS_OK
ReadX 12709 454656 4096 4096 NT_STATUS_OK
ReadX 12709 520192 4096 4096 NT_STATUS_OK
WriteX 12709 0 65536 65536 NT_STATUS_OK
WriteX 12709 65536 65536 65536 NT_STATUS_OK
WriteX 12709 131072 65536 65536 NT_STATUS_OK
WriteX 12709 196608 65536 65536 NT_STATUS_OK
WriteX 12709 262144 65536 65536 NT_STATUS_OK
WriteX 12709 327680 65536 65536 NT_STATUS_OK
WriteX 12709 393216 65536 65536 NT_STATUS_OK
WriteX 12709 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12710 NT_STATUS_OK
ReadX 12710 0 4096 4096 NT_STATUS_OK
ReadX 12710 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12711 NT_STATUS_OK
WriteX 12711 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12711 258 NT_STATUS_OK
WriteX 12711 0 53 53 NT_STATUS_OK
Close 12711 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12712 NT_STATUS_OK
Close 12712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12704 NT_STATUS_OK
Close 12650 NT_STATUS_OK
Close 12707 NT_STATUS_OK
Close 12708 NT_STATUS_OK
Close 12709 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12710 8192 4096 4096 NT_STATUS_OK
ReadX 12710 12288 4096 4096 NT_STATUS_OK
WriteX 12714 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12714 258 NT_STATUS_OK
ReadX 12710 16384 4096 4096 NT_STATUS_OK
ReadX 12710 20480 4096 4096 NT_STATUS_OK
WriteX 12714 0 15360 15360 NT_STATUS_OK
Close 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12715 NT_STATUS_OK
ReadX 12715 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12715 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12715 1004 NT_STATUS_OK
WriteX 12715 0 4096 4096 NT_STATUS_OK
Close 12715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12716 NT_STATUS_OK
Close 12716 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12718 NT_STATUS_OK
ReadX 12718 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12719 NT_STATUS_OK
Close 12719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12718 4096 4096 4096 NT_STATUS_OK
ReadX 12718 8192 4096 4096 NT_STATUS_OK
ReadX 12718 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12721 NT_STATUS_OK
ReadX 12721 0 4096 4096 NT_STATUS_OK
ReadX 12721 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12722 NT_STATUS_OK
ReadX 12722 0 4096 4096 NT_STATUS_OK
ReadX 12722 4096 4096 4096 NT_STATUS_OK
ReadX 12722 8192 4096 4096 NT_STATUS_OK
Close 12721 NT_STATUS_OK
Close 12722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12723 NT_STATUS_OK
WriteX 12723 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12723 258 NT_STATUS_OK
WriteX 12723 0 15360 15360 NT_STATUS_OK
Close 12723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12724 NT_STATUS_OK
ReadX 12724 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12724 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12724 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12725 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12727 NT_STATUS_OK
ReadX 12727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12728 NT_STATUS_OK
SET_FILE_INFORMATION 12728 1004 NT_STATUS_OK
Close 12728 NT_STATUS_OK
WriteX 12724 0 4096 4096 NT_STATUS_OK
Close 12724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12729 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12731 NT_STATUS_OK
ReadX 12731 0 4096 4096 NT_STATUS_OK
ReadX 12731 4096 4096 4096 NT_STATUS_OK
ReadX 12731 8192 4096 4096 NT_STATUS_OK
ReadX 12731 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12731 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12731 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12732 NT_STATUS_OK
ReadX 12732 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12733 NT_STATUS_OK
WriteX 12733 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12733 258 NT_STATUS_OK
WriteX 12733 0 53 53 NT_STATUS_OK
Close 12733 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12734 NT_STATUS_OK
Close 12734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12732 4096 4096 4096 NT_STATUS_OK
ReadX 12732 8192 4096 4096 NT_STATUS_OK
ReadX 12732 12288 4096 4096 NT_STATUS_OK
WriteX 12736 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12736 258 NT_STATUS_OK
WriteX 12736 0 12006 12006 NT_STATUS_OK
Close 12736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12737 NT_STATUS_OK
ReadX 12737 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12737 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12737 1004 NT_STATUS_OK
WriteX 12737 0 4096 4096 NT_STATUS_OK
Close 12737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12738 NT_STATUS_OK
Close 12738 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12740 NT_STATUS_OK
ReadX 12740 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12741 NT_STATUS_OK
Close 12741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12740 4096 4096 4096 NT_STATUS_OK
ReadX 12740 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12743 NT_STATUS_OK
WriteX 12743 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12743 258 NT_STATUS_OK
WriteX 12743 0 11991 11991 NT_STATUS_OK
Close 12743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12744 NT_STATUS_OK
ReadX 12744 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12744 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12744 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12745 NT_STATUS_OK
Close 12745 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12747 NT_STATUS_OK
ReadX 12747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12748 NT_STATUS_OK
SET_FILE_INFORMATION 12748 1004 NT_STATUS_OK
Close 12748 NT_STATUS_OK
WriteX 12744 0 4096 4096 NT_STATUS_OK
Close 12744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12749 NT_STATUS_OK
Close 12749 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12751 NT_STATUS_OK
ReadX 12751 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12752 NT_STATUS_OK
Close 12752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12751 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12751 1004 NT_STATUS_OK
ReadX 12751 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12751 1004 NT_STATUS_OK
WriteX 12751 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12751 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12751 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12751 1004 NT_STATUS_OK
Close 12727 NT_STATUS_OK
WriteX 12731 0 19054 19054 NT_STATUS_OK
WriteX 12751 0 12288 12288 NT_STATUS_OK
Close 12747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12754 NT_STATUS_OK
Close 12754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12731 NT_STATUS_OK
Close 12751 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12756 NT_STATUS_OK
Close 12756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12758 NT_STATUS_OK
ReadX 12758 0 61440 61440 NT_STATUS_OK
ReadX 12758 61440 4096 4096 NT_STATUS_OK
ReadX 12758 65536 61440 61440 NT_STATUS_OK
ReadX 12758 126976 4096 4096 NT_STATUS_OK
ReadX 12758 131072 61440 61440 NT_STATUS_OK
ReadX 12758 192512 4096 4096 NT_STATUS_OK
ReadX 12758 196608 61440 61440 NT_STATUS_OK
ReadX 12758 258048 4096 4096 NT_STATUS_OK
ReadX 12758 262144 61440 61440 NT_STATUS_OK
ReadX 12758 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12759 NT_STATUS_OK
ReadX 12759 0 61440 61440 NT_STATUS_OK
ReadX 12759 61440 4096 4096 NT_STATUS_OK
ReadX 12759 65536 61440 61440 NT_STATUS_OK
ReadX 12759 126976 4096 4096 NT_STATUS_OK
ReadX 12759 131072 61440 61440 NT_STATUS_OK
ReadX 12759 192512 4096 4096 NT_STATUS_OK
ReadX 12759 196608 61440 61440 NT_STATUS_OK
ReadX 12759 258048 4096 4096 NT_STATUS_OK
ReadX 12759 262144 61440 61440 NT_STATUS_OK
ReadX 12759 323584 4096 4096 NT_STATUS_OK
ReadX 12759 327680 61440 61440 NT_STATUS_OK
ReadX 12759 389120 4096 4096 NT_STATUS_OK
ReadX 12759 393216 61440 61440 NT_STATUS_OK
ReadX 12759 454656 4096 4096 NT_STATUS_OK
ReadX 12759 458752 61440 61440 NT_STATUS_OK
ReadX 12759 520192 4096 4096 NT_STATUS_OK
ReadX 12759 524288 61440 61440 NT_STATUS_OK
ReadX 12759 585728 4096 4096 NT_STATUS_OK
ReadX 12759 589824 61440 61440 NT_STATUS_OK
ReadX 12759 651264 4096 4096 NT_STATUS_OK
ReadX 12759 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12760 NT_STATUS_OK
ReadX 12760 0 61440 61440 NT_STATUS_OK
ReadX 12760 61440 4096 4096 NT_STATUS_OK
ReadX 12760 65536 61440 61440 NT_STATUS_OK
ReadX 12760 126976 4096 4096 NT_STATUS_OK
ReadX 12760 131072 61440 61440 NT_STATUS_OK
ReadX 12760 192512 4096 4096 NT_STATUS_OK
ReadX 12760 196608 61440 61440 NT_STATUS_OK
ReadX 12760 258048 4096 4096 NT_STATUS_OK
ReadX 12760 262144 61440 61440 NT_STATUS_OK
ReadX 12760 323584 4096 4096 NT_STATUS_OK
ReadX 12760 327680 61440 61440 NT_STATUS_OK
ReadX 12760 389120 4096 4096 NT_STATUS_OK
ReadX 12760 393216 61440 61440 NT_STATUS_OK
ReadX 12760 454656 4096 4096 NT_STATUS_OK
ReadX 12760 458752 61440 61440 NT_STATUS_OK
ReadX 12760 520192 4096 4096 NT_STATUS_OK
ReadX 12760 524288 61440 61440 NT_STATUS_OK
ReadX 12760 585728 4096 4096 NT_STATUS_OK
ReadX 12760 589824 61440 61440 NT_STATUS_OK
ReadX 12760 651264 4096 4096 NT_STATUS_OK
ReadX 12760 655360 61440 61440 NT_STATUS_OK
ReadX 12760 716800 4096 4096 NT_STATUS_OK
ReadX 12760 720896 61440 61440 NT_STATUS_OK
ReadX 12760 782336 4096 4096 NT_STATUS_OK
ReadX 12760 786432 61440 61440 NT_STATUS_OK
ReadX 12760 847872 4096 4096 NT_STATUS_OK
ReadX 12760 851968 61440 61440 NT_STATUS_OK
ReadX 12760 913408 4096 4096 NT_STATUS_OK
ReadX 12760 917504 61440 61440 NT_STATUS_OK
ReadX 12760 978944 4096 4096 NT_STATUS_OK
ReadX 12760 983040 61440 61440 NT_STATUS_OK
ReadX 12760 1044480 4096 4096 NT_STATUS_OK
ReadX 12760 1048576 61440 61440 NT_STATUS_OK
ReadX 12760 1110016 4096 4096 NT_STATUS_OK
ReadX 12760 1114112 61440 61440 NT_STATUS_OK
ReadX 12760 1175552 4096 4096 NT_STATUS_OK
ReadX 12760 1179648 61440 61440 NT_STATUS_OK
ReadX 12760 1241088 4096 4096 NT_STATUS_OK
ReadX 12760 1245184 61440 61440 NT_STATUS_OK
ReadX 12760 1306624 4096 4096 NT_STATUS_OK
ReadX 12760 1310720 61440 61440 NT_STATUS_OK
ReadX 12760 1372160 4096 4096 NT_STATUS_OK
ReadX 12760 1376256 61440 61440 NT_STATUS_OK
ReadX 12760 1437696 4096 4096 NT_STATUS_OK
ReadX 12760 1441792 61440 61440 NT_STATUS_OK
ReadX 12760 1503232 4096 4096 NT_STATUS_OK
ReadX 12760 1507328 61440 61440 NT_STATUS_OK
ReadX 12760 1568768 4096 4096 NT_STATUS_OK
ReadX 12760 1572864 61440 61440 NT_STATUS_OK
ReadX 12760 1634304 4096 4096 NT_STATUS_OK
ReadX 12760 1638400 61440 61440 NT_STATUS_OK
ReadX 12760 1699840 4096 4096 NT_STATUS_OK
ReadX 12760 1703936 61440 61440 NT_STATUS_OK
ReadX 12760 1765376 4096 4096 NT_STATUS_OK
ReadX 12760 1769472 61440 61440 NT_STATUS_OK
ReadX 12760 1830912 4096 4096 NT_STATUS_OK
ReadX 12760 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12761 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12762 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12763 NT_STATUS_OK
ReadX 12763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12764 NT_STATUS_OK
ReadX 12764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12765 NT_STATUS_OK
ReadX 12765 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12766 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12767 NT_STATUS_OK
QUERY_FILE_INFORMATION 12767 1004 NT_STATUS_OK
WriteX 12767 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12767 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12768 NT_STATUS_OK
Close 12768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12769 NT_STATUS_OK
WriteX 12769 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12769 258 NT_STATUS_OK
WriteX 12769 0 491 491 NT_STATUS_OK
Close 12769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12770 NT_STATUS_OK
ReadX 12770 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12767 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12772 NT_STATUS_OK
Close 12772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12773 NT_STATUS_OK
WriteX 12773 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12773 258 NT_STATUS_OK
WriteX 12773 0 543 543 NT_STATUS_OK
Close 12773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12774 NT_STATUS_OK
ReadX 12774 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12758 NT_STATUS_OK
Close 12759 NT_STATUS_OK
Close 12760 NT_STATUS_OK
Close 12774 NT_STATUS_OK
Close 12762 NT_STATUS_OK
Close 12763 NT_STATUS_OK
Close 12764 NT_STATUS_OK
Close 12765 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12767 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12777 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12778 NT_STATUS_OK
ReadX 12778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12779 NT_STATUS_OK
ReadX 12779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12780 NT_STATUS_OK
ReadX 12780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12781 NT_STATUS_OK
ReadX 12781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12782 NT_STATUS_OK
ReadX 12782 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12786 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12787 NT_STATUS_OK
QUERY_FILE_INFORMATION 12787 1004 NT_STATUS_OK
WriteX 12787 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12787 258 NT_STATUS_OK
WriteX 12787 0 2048 2048 NT_STATUS_OK
Close 12787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12788 NT_STATUS_OK
ReadX 12788 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12788 0 4096 4096 NT_STATUS_OK
Flush 12788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12788 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12792 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12793 NT_STATUS_OK
WriteX 12793 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12793 258 NT_STATUS_OK
WriteX 12793 0 2048 2048 NT_STATUS_OK
Close 12793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12794 NT_STATUS_OK
ReadX 12794 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12798 NT_STATUS_OK
Close 12798 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12799 NT_STATUS_OK
WriteX 12799 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12799 258 NT_STATUS_OK
WriteX 12799 0 2048 2048 NT_STATUS_OK
Close 12799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12800 NT_STATUS_OK
ReadX 12800 0 2048 2048 NT_STATUS_OK
ReadX 12778 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12782 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12794 0 4096 4096 NT_STATUS_OK
WriteX 12778 0 8192 8192 NT_STATUS_OK
WriteX 12779 0 4096 4096 NT_STATUS_OK
WriteX 12780 0 4096 4096 NT_STATUS_OK
ReadX 12794 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12803 NT_STATUS_OK
ReadX 12803 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12804 NT_STATUS_OK
QUERY_FILE_INFORMATION 12804 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12803 NT_STATUS_OK
Close 12779 NT_STATUS_OK
Close 12780 NT_STATUS_OK
Close 12781 NT_STATUS_OK
Close 12794 NT_STATUS_OK
Close 12778 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12807 NT_STATUS_OK
ReadX 12807 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12808 NT_STATUS_OK
ReadX 12808 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12809 NT_STATUS_OK
ReadX 12809 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12810 NT_STATUS_OK
ReadX 12810 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12811 NT_STATUS_OK
ReadX 12811 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12812 NT_STATUS_OK
ReadX 12812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12813 NT_STATUS_OK
ReadX 12813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12814 NT_STATUS_OK
ReadX 12814 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12815 NT_STATUS_OK
ReadX 12815 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12816 NT_STATUS_OK
ReadX 12816 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12817 NT_STATUS_OK
ReadX 12817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12818 NT_STATUS_OK
ReadX 12818 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12819 NT_STATUS_OK
ReadX 12819 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12823 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12823 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12824 NT_STATUS_OK
QUERY_FILE_INFORMATION 12824 1004 NT_STATUS_OK
WriteX 12824 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12824 258 NT_STATUS_OK
WriteX 12824 0 2048 2048 NT_STATUS_OK
Close 12824 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12825 NT_STATUS_OK
ReadX 12825 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12826 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12827 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12827 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12831 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12832 NT_STATUS_OK
QUERY_FILE_INFORMATION 12832 1004 NT_STATUS_OK
WriteX 12832 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12832 258 NT_STATUS_OK
WriteX 12832 0 2048 2048 NT_STATUS_OK
Close 12832 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12833 NT_STATUS_OK
ReadX 12833 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12825 0 4096 4096 NT_STATUS_OK
Flush 12825 NT_STATUS_OK
WriteX 12833 0 4096 4096 NT_STATUS_OK
Flush 12833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12825 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12833 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12827 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12834 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12834 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12835 NT_STATUS_OK
WriteX 12835 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12835 258 NT_STATUS_OK
WriteX 12835 0 4096 4096 NT_STATUS_OK
Close 12835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12836 NT_STATUS_OK
ReadX 12836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12837 NT_STATUS_OK
Close 12837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12838 NT_STATUS_OK
WriteX 12838 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12838 258 NT_STATUS_OK
WriteX 12838 0 4096 4096 NT_STATUS_OK
Close 12838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12839 NT_STATUS_OK
ReadX 12839 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12839 0 4096 4096 NT_STATUS_OK
Close 12836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12819 NT_STATUS_OK
Close 12813 NT_STATUS_OK
Close 12827 NT_STATUS_OK
Close 12816 NT_STATUS_OK
Close 12817 NT_STATUS_OK
Close 12818 NT_STATUS_OK
Close 12814 NT_STATUS_OK
Close 12807 NT_STATUS_OK
Close 12808 NT_STATUS_OK
Close 12811 NT_STATUS_OK
Close 12812 NT_STATUS_OK
Close 12809 NT_STATUS_OK
Close 12810 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12842 NT_STATUS_OK
Close 12842 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12844 NT_STATUS_OK
ReadX 12844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12845 NT_STATUS_OK
Close 12845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12846 NT_STATUS_OK
WriteX 12846 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12846 258 NT_STATUS_OK
WriteX 12846 0 2048 2048 NT_STATUS_OK
Close 12846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12847 NT_STATUS_OK
ReadX 12847 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12848 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12848 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12849 NT_STATUS_OK
ReadX 12849 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12850 NT_STATUS_OK
ReadX 12850 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12851 NT_STATUS_OK
ReadX 12851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12852 NT_STATUS_OK
ReadX 12852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12853 NT_STATUS_OK
ReadX 12853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12854 NT_STATUS_OK
ReadX 12854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12855 NT_STATUS_OK
ReadX 12855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12856 NT_STATUS_OK
ReadX 12856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12857 NT_STATUS_OK
ReadX 12857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12858 NT_STATUS_OK
ReadX 12858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12859 NT_STATUS_OK
ReadX 12859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12860 NT_STATUS_OK
ReadX 12860 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12861 NT_STATUS_OK
QUERY_FILE_INFORMATION 12861 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12844 NT_STATUS_OK
Close 12847 NT_STATUS_OK
Close 12859 NT_STATUS_OK
Close 12854 NT_STATUS_OK
Close 12855 NT_STATUS_OK
Close 12856 NT_STATUS_OK
Close 12857 NT_STATUS_OK
Close 12858 NT_STATUS_OK
Close 12860 NT_STATUS_OK
Close 12848 NT_STATUS_OK
Close 12849 NT_STATUS_OK
Close 12852 NT_STATUS_OK
Close 12853 NT_STATUS_OK
Close 12850 NT_STATUS_OK
Close 12851 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12863 NT_STATUS_OK
QUERY_FILE_INFORMATION 12863 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12865 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12866 NT_STATUS_OK
ReadX 12866 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12867 NT_STATUS_OK
ReadX 12867 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12868 NT_STATUS_OK
ReadX 12868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12869 NT_STATUS_OK
ReadX 12869 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12870 NT_STATUS_OK
ReadX 12870 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12871 NT_STATUS_OK
ReadX 12871 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12872 NT_STATUS_OK
ReadX 12872 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12873 NT_STATUS_OK
ReadX 12873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12874 NT_STATUS_OK
ReadX 12874 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12875 NT_STATUS_OK
ReadX 12875 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12876 NT_STATUS_OK
ReadX 12876 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12877 NT_STATUS_OK
ReadX 12877 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12878 NT_STATUS_OK
ReadX 12878 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12882 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12883 NT_STATUS_OK
QUERY_FILE_INFORMATION 12883 1004 NT_STATUS_OK
WriteX 12883 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12883 258 NT_STATUS_OK
WriteX 12883 0 2048 2048 NT_STATUS_OK
Close 12883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12884 NT_STATUS_OK
ReadX 12884 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12885 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12886 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12887 NT_STATUS_OK
ReadX 12887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12888 NT_STATUS_OK
ReadX 12888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12889 NT_STATUS_OK
ReadX 12889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12890 NT_STATUS_OK
ReadX 12890 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12895 NT_STATUS_OK
QUERY_FILE_INFORMATION 12895 1004 NT_STATUS_OK
WriteX 12895 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12895 258 NT_STATUS_OK
WriteX 12895 0 2048 2048 NT_STATUS_OK
Close 12895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12896 NT_STATUS_OK
ReadX 12896 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12897 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12898 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12898 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12902 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12903 NT_STATUS_OK
QUERY_FILE_INFORMATION 12903 1004 NT_STATUS_OK
WriteX 12903 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12903 258 NT_STATUS_OK
WriteX 12903 0 2048 2048 NT_STATUS_OK
Close 12903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12904 NT_STATUS_OK
ReadX 12904 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12884 0 4096 4096 NT_STATUS_OK
Flush 12884 NT_STATUS_OK
WriteX 12896 0 4096 4096 NT_STATUS_OK
Flush 12896 NT_STATUS_OK
WriteX 12904 0 4096 4096 NT_STATUS_OK
Flush 12904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12884 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12896 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12904 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12886 4096 16384 16384 NT_STATUS_OK
ReadX 12866 4096 16384 16384 NT_STATUS_OK
ReadX 12898 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12905 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12906 NT_STATUS_OK
ReadX 12906 0 2048 2048 NT_STATUS_OK
WriteX 12906 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12907 NT_STATUS_OK
QUERY_FILE_INFORMATION 12907 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12906 NT_STATUS_OK
Close 12890 NT_STATUS_OK
Close 12878 NT_STATUS_OK
Close 12870 NT_STATUS_OK
Close 12886 NT_STATUS_OK
Close 12887 NT_STATUS_OK
Close 12888 NT_STATUS_OK
Close 12889 NT_STATUS_OK
Close 12877 NT_STATUS_OK
Close 12898 NT_STATUS_OK
Close 12872 NT_STATUS_OK
Close 12875 NT_STATUS_OK
Close 12876 NT_STATUS_OK
Close 12873 NT_STATUS_OK
Close 12874 NT_STATUS_OK
Close 12866 NT_STATUS_OK
Close 12867 NT_STATUS_OK
Close 12868 NT_STATUS_OK
Close 12869 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12909 NT_STATUS_OK
QUERY_FILE_INFORMATION 12909 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12911 NT_STATUS_OK
QUERY_FILE_INFORMATION 12911 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12913 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12914 NT_STATUS_OK
ReadX 12914 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12915 NT_STATUS_OK
ReadX 12915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12916 NT_STATUS_OK
ReadX 12916 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12917 NT_STATUS_OK
ReadX 12917 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12918 NT_STATUS_OK
ReadX 12918 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12914 4096 16384 16384 NT_STATUS_OK
WriteX 12914 0 4096 4096 NT_STATUS_OK
WriteX 12915 0 4096 4096 NT_STATUS_OK
WriteX 12916 0 4096 4096 NT_STATUS_OK
WriteX 12917 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12919 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12920 NT_STATUS_OK
ReadX 12920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12921 NT_STATUS_OK
ReadX 12921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12922 NT_STATUS_OK
ReadX 12922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12923 NT_STATUS_OK
ReadX 12923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12924 NT_STATUS_OK
ReadX 12924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12925 NT_STATUS_OK
ReadX 12925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12926 NT_STATUS_OK
ReadX 12926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12927 NT_STATUS_OK
ReadX 12927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12928 NT_STATUS_OK
ReadX 12928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12929 NT_STATUS_OK
ReadX 12929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12930 NT_STATUS_OK
ReadX 12930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12931 NT_STATUS_OK
ReadX 12931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12932 NT_STATUS_OK
ReadX 12932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12933 NT_STATUS_OK
ReadX 12933 0 8192 8192 NT_STATUS_OK
ReadX 12920 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12934 0 4096 4096 NT_STATUS_OK
ReadX 12934 4096 4096 4096 NT_STATUS_OK
ReadX 12934 8192 4096 4096 NT_STATUS_OK
WriteX 12920 0 4096 4096 NT_STATUS_OK
WriteX 12921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12935 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12935 0 4096 4096 NT_STATUS_OK
ReadX 12935 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12914 0 4096 4096 NT_STATUS_OK
WriteX 12915 0 4096 4096 NT_STATUS_OK
WriteX 12916 0 4096 4096 NT_STATUS_OK
WriteX 12917 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12939 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12940 NT_STATUS_OK
QUERY_FILE_INFORMATION 12940 1004 NT_STATUS_OK
WriteX 12940 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12940 258 NT_STATUS_OK
WriteX 12940 0 2048 2048 NT_STATUS_OK
Close 12940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12941 NT_STATUS_OK
ReadX 12941 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12941 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12941 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12942 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12943 NT_STATUS_OK
ReadX 12943 0 4096 4096 NT_STATUS_OK
ReadX 12943 4096 4096 4096 NT_STATUS_OK
WriteX 12943 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12941 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12944 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12945 NT_STATUS_OK
ReadX 12945 0 4096 4096 NT_STATUS_OK
ReadX 12945 4096 4096 4096 NT_STATUS_OK
WriteX 12945 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12946 NT_STATUS_OK
QUERY_FILE_INFORMATION 12946 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12933 NT_STATUS_OK
Close 12918 NT_STATUS_OK
Close 12914 NT_STATUS_OK
Close 12915 NT_STATUS_OK
Close 12916 NT_STATUS_OK
Close 12917 NT_STATUS_OK
Close 12926 NT_STATUS_OK
Close 12931 NT_STATUS_OK
Close 12927 NT_STATUS_OK
Close 12928 NT_STATUS_OK
Close 12929 NT_STATUS_OK
Close 12930 NT_STATUS_OK
Close 12932 NT_STATUS_OK
Close 12920 NT_STATUS_OK
Close 12921 NT_STATUS_OK
Close 12924 NT_STATUS_OK
Close 12925 NT_STATUS_OK
Close 12922 NT_STATUS_OK
Close 12923 NT_STATUS_OK
Close 12945 NT_STATUS_OK
Close 12934 NT_STATUS_OK
Close 12935 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12948 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12948 0 4096 4096 NT_STATUS_OK
ReadX 12948 4096 4096 4096 NT_STATUS_OK
ReadX 12948 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12949 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12950 NT_STATUS_OK
ReadX 12950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12951 NT_STATUS_OK
ReadX 12951 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12952 NT_STATUS_OK
ReadX 12952 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12953 NT_STATUS_OK
ReadX 12953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12954 NT_STATUS_OK
ReadX 12954 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12955 NT_STATUS_OK
ReadX 12955 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12956 NT_STATUS_OK
ReadX 12956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12957 NT_STATUS_OK
ReadX 12957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12958 NT_STATUS_OK
ReadX 12958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12959 NT_STATUS_OK
ReadX 12959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12960 NT_STATUS_OK
ReadX 12960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12961 NT_STATUS_OK
ReadX 12961 0 4096 4096 NT_STATUS_OK
ReadX 12949 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12965 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12965 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12966 NT_STATUS_OK
QUERY_FILE_INFORMATION 12966 1004 NT_STATUS_OK
WriteX 12966 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12966 258 NT_STATUS_OK
WriteX 12966 0 2048 2048 NT_STATUS_OK
Close 12966 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12967 NT_STATUS_OK
ReadX 12967 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12967 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12971 NT_STATUS_OK
Close 12971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12972 NT_STATUS_OK
QUERY_FILE_INFORMATION 12972 1004 NT_STATUS_OK
WriteX 12972 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12972 258 NT_STATUS_OK
WriteX 12972 0 2048 2048 NT_STATUS_OK
Close 12972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12973 NT_STATUS_OK
ReadX 12973 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12973 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12956 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12974 NT_STATUS_OK
QUERY_FILE_INFORMATION 12974 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12960 NT_STATUS_OK
Close 12955 NT_STATUS_OK
Close 12961 NT_STATUS_OK
Close 12949 NT_STATUS_OK
Close 12950 NT_STATUS_OK
Close 12953 NT_STATUS_OK
Close 12954 NT_STATUS_OK
Close 12951 NT_STATUS_OK
Close 12952 NT_STATUS_OK
Close 12956 NT_STATUS_OK
Close 12957 NT_STATUS_OK
Close 12958 NT_STATUS_OK
Close 12959 NT_STATUS_OK
Close 12948 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12976 NT_STATUS_OK
QUERY_FILE_INFORMATION 12976 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12978 NT_STATUS_OK
ReadX 12978 61440 4096 4096 NT_STATUS_OK
ReadX 12978 126976 4096 4096 NT_STATUS_OK
WriteX 12978 0 65536 65536 NT_STATUS_OK
WriteX 12978 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12979 NT_STATUS_OK
ReadX 12979 61440 4096 4096 NT_STATUS_OK
ReadX 12979 126976 4096 4096 NT_STATUS_OK
ReadX 12979 192512 4096 4096 NT_STATUS_OK
ReadX 12979 258048 4096 4096 NT_STATUS_OK
WriteX 12979 0 65536 65536 NT_STATUS_OK
WriteX 12979 65536 65536 65536 NT_STATUS_OK
WriteX 12979 131072 65536 65536 NT_STATUS_OK
WriteX 12979 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12980 NT_STATUS_OK
ReadX 12980 61440 4096 4096 NT_STATUS_OK
ReadX 12980 126976 4096 4096 NT_STATUS_OK
ReadX 12980 192512 4096 4096 NT_STATUS_OK
ReadX 12980 258048 4096 4096 NT_STATUS_OK
ReadX 12980 323584 4096 4096 NT_STATUS_OK
ReadX 12980 389120 4096 4096 NT_STATUS_OK
ReadX 12980 454656 4096 4096 NT_STATUS_OK
ReadX 12980 520192 4096 4096 NT_STATUS_OK
WriteX 12980 0 65536 65536 NT_STATUS_OK
WriteX 12980 65536 65536 65536 NT_STATUS_OK
WriteX 12980 131072 65536 65536 NT_STATUS_OK
WriteX 12980 196608 65536 65536 NT_STATUS_OK
WriteX 12980 262144 65536 65536 NT_STATUS_OK
WriteX 12980 327680 65536 65536 NT_STATUS_OK
WriteX 12980 393216 65536 65536 NT_STATUS_OK
WriteX 12980 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12981 NT_STATUS_OK
ReadX 12981 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12981 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12981 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12981 8192 4096 4096 NT_STATUS_OK
ReadX 12981 12288 4096 4096 NT_STATUS_OK
ReadX 12981 16384 4096 4096 NT_STATUS_OK
ReadX 12981 20480 4096 4096 NT_STATUS_OK
ReadX 12981 24576 4096 4096 NT_STATUS_OK
ReadX 12981 28672 4096 4096 NT_STATUS_OK
ReadX 12981 32768 4096 4096 NT_STATUS_OK
ReadX 12981 36864 4096 4096 NT_STATUS_OK
ReadX 12981 40960 4096 4096 NT_STATUS_OK
ReadX 12981 45056 4096 4096 NT_STATUS_OK
ReadX 12981 49152 4096 4096 NT_STATUS_OK
ReadX 12981 53248 4096 4096 NT_STATUS_OK
ReadX 12981 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12981 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12982 NT_STATUS_OK
Close 12982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12978 NT_STATUS_OK
Close 12979 NT_STATUS_OK
Close 12980 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12984 NT_STATUS_OK
WriteX 12984 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12984 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12984 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12984 1004 NT_STATUS_OK
WriteX 12984 0 57088 57088 NT_STATUS_OK
WriteX 12984 0 4096 4096 NT_STATUS_OK
Flush 12984 NT_STATUS_OK
Close 12981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12985 NT_STATUS_OK
SET_FILE_INFORMATION 12985 1004 NT_STATUS_OK
Close 12985 NT_STATUS_OK
SET_FILE_INFORMATION 12984 1004 NT_STATUS_OK
WriteX 12984 0 4096 4096 NT_STATUS_OK
Close 12984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12986 NT_STATUS_OK
Close 12986 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12988 NT_STATUS_OK
ReadX 12988 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12988 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12989 NT_STATUS_OK
WriteX 12989 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12989 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12989 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12989 1004 NT_STATUS_OK
WriteX 12989 0 51456 51456 NT_STATUS_OK
WriteX 12989 0 4096 4096 NT_STATUS_OK
Flush 12989 NT_STATUS_OK
SET_FILE_INFORMATION 12989 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12989 1004 NT_STATUS_OK
WriteX 12989 0 4096 4096 NT_STATUS_OK
Close 12989 NT_STATUS_OK
Close 12988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12991 NT_STATUS_OK
Close 12991 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12993 NT_STATUS_OK
ReadX 12993 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12993 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12995 NT_STATUS_OK
Close 12995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12998 NT_STATUS_OK
WriteX 12998 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12998 258 NT_STATUS_OK
WriteX 12998 0 53077 53077 NT_STATUS_OK
Close 12998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12999 NT_STATUS_OK
WriteX 12999 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12999 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12999 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12999 1004 NT_STATUS_OK
WriteX 12999 0 65536 65536 NT_STATUS_OK
WriteX 12999 65536 1856 1856 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
SET_FILE_INFORMATION 12999 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12999 1004 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Close 12999 NT_STATUS_OK
Close 12993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13001 NT_STATUS_OK
Close 13001 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13003 NT_STATUS_OK
ReadX 13003 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13005 NT_STATUS_OK
Close 13005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13008 NT_STATUS_OK
WriteX 13008 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13008 258 NT_STATUS_OK
WriteX 13008 0 7983 7983 NT_STATUS_OK
Close 13008 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13010 NT_STATUS_OK
Close 13010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13013 NT_STATUS_OK
WriteX 13013 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13013 258 NT_STATUS_OK
WriteX 13013 0 65536 65536 NT_STATUS_OK
WriteX 13013 65536 65536 65536 NT_STATUS_OK
WriteX 13013 131072 65536 65536 NT_STATUS_OK
WriteX 13013 196608 65536 65536 NT_STATUS_OK
WriteX 13013 262144 65536 65536 NT_STATUS_OK
WriteX 13013 327680 65536 65536 NT_STATUS_OK
WriteX 13013 393216 65536 65536 NT_STATUS_OK
WriteX 13013 458752 46731 46731 NT_STATUS_OK
Close 13013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13014 NT_STATUS_OK
WriteX 13014 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13014 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13003 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13014 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13014 1004 NT_STATUS_OK
WriteX 13014 0 65536 65536 NT_STATUS_OK
WriteX 13014 65536 22848 22848 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
SET_FILE_INFORMATION 13014 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13014 1004 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Close 13014 NT_STATUS_OK
Close 13003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13016 NT_STATUS_OK
Close 13016 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13018 NT_STATUS_OK
ReadX 13018 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13018 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13019 NT_STATUS_OK
ReadX 13019 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13019 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13019 1004 NT_STATUS_OK
ReadX 13019 8192 4096 4096 NT_STATUS_OK
ReadX 13019 12288 4096 4096 NT_STATUS_OK
ReadX 13019 16384 4096 4096 NT_STATUS_OK
ReadX 13019 20480 4096 4096 NT_STATUS_OK
ReadX 13019 24576 4096 4096 NT_STATUS_OK
ReadX 13019 28672 4096 4096 NT_STATUS_OK
ReadX 13019 32768 4096 4096 NT_STATUS_OK
ReadX 13019 36864 4096 4096 NT_STATUS_OK
ReadX 13019 40960 4096 4096 NT_STATUS_OK
ReadX 13019 45056 4096 4096 NT_STATUS_OK
ReadX 13019 49152 4096 4096 NT_STATUS_OK
ReadX 13019 53248 4096 4096 NT_STATUS_OK
ReadX 13019 57344 4096 4096 NT_STATUS_OK
ReadX 13019 61440 4096 4096 NT_STATUS_OK
ReadX 13019 65536 4096 4096 NT_STATUS_OK
ReadX 13019 69632 4096 4096 NT_STATUS_OK
ReadX 13019 73728 4096 4096 NT_STATUS_OK
ReadX 13019 77824 4096 4096 NT_STATUS_OK
ReadX 13019 81920 4096 4096 NT_STATUS_OK
ReadX 13019 86016 4096 4096 NT_STATUS_OK
ReadX 13019 90112 4096 4096 NT_STATUS_OK
ReadX 13019 94208 4096 4096 NT_STATUS_OK
ReadX 13019 98304 4096 4096 NT_STATUS_OK
ReadX 13019 102400 4096 4096 NT_STATUS_OK
ReadX 13019 106496 4096 4096 NT_STATUS_OK
ReadX 13019 110592 4096 4096 NT_STATUS_OK
ReadX 13019 114688 4096 4096 NT_STATUS_OK
ReadX 13019 118784 4096 4096 NT_STATUS_OK
ReadX 13019 122880 4096 4096 NT_STATUS_OK
ReadX 13019 126976 4096 4096 NT_STATUS_OK
ReadX 13019 131072 4096 4096 NT_STATUS_OK
ReadX 13019 135168 4096 4096 NT_STATUS_OK
ReadX 13019 139264 4096 4096 NT_STATUS_OK
ReadX 13019 143360 4096 4096 NT_STATUS_OK
ReadX 13019 147456 4096 4096 NT_STATUS_OK
ReadX 13019 151552 4096 4096 NT_STATUS_OK
ReadX 13019 155648 4096 4096 NT_STATUS_OK
ReadX 13019 159744 4096 4096 NT_STATUS_OK
ReadX 13019 163840 4096 4096 NT_STATUS_OK
ReadX 13019 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13019 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13020 NT_STATUS_OK
Close 13020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13018 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13022 NT_STATUS_OK
WriteX 13022 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13022 258 NT_STATUS_OK
Close 13019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13023 NT_STATUS_OK
SET_FILE_INFORMATION 13023 1004 NT_STATUS_OK
Close 13023 NT_STATUS_OK
WriteX 13022 0 42388 42388 NT_STATUS_OK
Close 13022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13024 NT_STATUS_OK
Close 13024 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13026 NT_STATUS_OK
ReadX 13026 0 4096 4096 NT_STATUS_OK
ReadX 13026 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13027 NT_STATUS_OK
WriteX 13027 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13027 258 NT_STATUS_OK
SET_FILE_INFORMATION 13027 1004 NT_STATUS_OK
WriteX 13027 0 42652 42652 NT_STATUS_OK
Close 13027 NT_STATUS_OK
Close 13026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13029 NT_STATUS_OK
Close 13029 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13031 NT_STATUS_OK
ReadX 13031 0 4096 4096 NT_STATUS_OK
ReadX 13031 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13033 NT_STATUS_OK
Close 13033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13036 NT_STATUS_OK
WriteX 13036 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13036 258 NT_STATUS_OK
WriteX 13036 0 65536 65536 NT_STATUS_OK
WriteX 13036 65536 49 49 NT_STATUS_OK
Close 13036 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13037 NT_STATUS_OK
ReadX 13037 0 61440 61440 NT_STATUS_OK
ReadX 13037 61440 4096 4096 NT_STATUS_OK
ReadX 13037 65536 61440 61440 NT_STATUS_OK
ReadX 13037 126976 4096 4096 NT_STATUS_OK
ReadX 13037 131072 61440 61440 NT_STATUS_OK
ReadX 13037 192512 4096 4096 NT_STATUS_OK
ReadX 13037 196608 61440 61440 NT_STATUS_OK
ReadX 13037 258048 4096 4096 NT_STATUS_OK
ReadX 13037 262144 61440 61440 NT_STATUS_OK
ReadX 13037 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13038 NT_STATUS_OK
ReadX 13038 0 61440 61440 NT_STATUS_OK
ReadX 13038 61440 4096 4096 NT_STATUS_OK
ReadX 13038 65536 61440 61440 NT_STATUS_OK
ReadX 13038 126976 4096 4096 NT_STATUS_OK
ReadX 13038 131072 61440 61440 NT_STATUS_OK
ReadX 13038 192512 4096 4096 NT_STATUS_OK
ReadX 13038 196608 61440 61440 NT_STATUS_OK
ReadX 13038 258048 4096 4096 NT_STATUS_OK
ReadX 13038 262144 61440 61440 NT_STATUS_OK
ReadX 13038 323584 4096 4096 NT_STATUS_OK
ReadX 13038 327680 61440 61440 NT_STATUS_OK
ReadX 13038 389120 4096 4096 NT_STATUS_OK
ReadX 13038 393216 61440 61440 NT_STATUS_OK
ReadX 13038 454656 4096 4096 NT_STATUS_OK
ReadX 13038 458752 61440 61440 NT_STATUS_OK
ReadX 13038 520192 4096 4096 NT_STATUS_OK
ReadX 13038 524288 61440 61440 NT_STATUS_OK
ReadX 13038 585728 4096 4096 NT_STATUS_OK
ReadX 13038 589824 61440 61440 NT_STATUS_OK
ReadX 13038 651264 4096 4096 NT_STATUS_OK
ReadX 13038 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13039 NT_STATUS_OK
ReadX 13039 0 61440 61440 NT_STATUS_OK
ReadX 13039 61440 4096 4096 NT_STATUS_OK
ReadX 13039 65536 61440 61440 NT_STATUS_OK
ReadX 13039 126976 4096 4096 NT_STATUS_OK
ReadX 13039 131072 61440 61440 NT_STATUS_OK
ReadX 13039 192512 4096 4096 NT_STATUS_OK
ReadX 13039 196608 61440 61440 NT_STATUS_OK
ReadX 13039 258048 4096 4096 NT_STATUS_OK
ReadX 13039 262144 61440 61440 NT_STATUS_OK
ReadX 13039 323584 4096 4096 NT_STATUS_OK
ReadX 13039 327680 61440 61440 NT_STATUS_OK
ReadX 13039 389120 4096 4096 NT_STATUS_OK
ReadX 13039 393216 61440 61440 NT_STATUS_OK
ReadX 13039 454656 4096 4096 NT_STATUS_OK
ReadX 13039 458752 61440 61440 NT_STATUS_OK
ReadX 13039 520192 4096 4096 NT_STATUS_OK
ReadX 13039 524288 61440 61440 NT_STATUS_OK
ReadX 13039 585728 4096 4096 NT_STATUS_OK
ReadX 13039 589824 61440 61440 NT_STATUS_OK
ReadX 13039 651264 4096 4096 NT_STATUS_OK
ReadX 13039 655360 61440 61440 NT_STATUS_OK
ReadX 13039 716800 4096 4096 NT_STATUS_OK
ReadX 13039 720896 61440 61440 NT_STATUS_OK
ReadX 13039 782336 4096 4096 NT_STATUS_OK
ReadX 13039 786432 61440 61440 NT_STATUS_OK
ReadX 13039 847872 4096 4096 NT_STATUS_OK
ReadX 13039 851968 61440 61440 NT_STATUS_OK
ReadX 13039 913408 4096 4096 NT_STATUS_OK
ReadX 13039 917504 61440 61440 NT_STATUS_OK
ReadX 13039 978944 4096 4096 NT_STATUS_OK
ReadX 13039 983040 61440 61440 NT_STATUS_OK
ReadX 13039 1044480 4096 4096 NT_STATUS_OK
ReadX 13039 1048576 61440 61440 NT_STATUS_OK
ReadX 13039 1110016 4096 4096 NT_STATUS_OK
ReadX 13039 1114112 61440 61440 NT_STATUS_OK
ReadX 13039 1175552 4096 4096 NT_STATUS_OK
ReadX 13039 1179648 61440 61440 NT_STATUS_OK
ReadX 13039 1241088 4096 4096 NT_STATUS_OK
ReadX 13039 1245184 61440 61440 NT_STATUS_OK
ReadX 13039 1306624 4096 4096 NT_STATUS_OK
ReadX 13039 1310720 61440 61440 NT_STATUS_OK
ReadX 13039 1372160 4096 4096 NT_STATUS_OK
ReadX 13039 1376256 61440 61440 NT_STATUS_OK
ReadX 13039 1437696 4096 4096 NT_STATUS_OK
ReadX 13039 1441792 61440 61440 NT_STATUS_OK
ReadX 13039 1503232 4096 4096 NT_STATUS_OK
ReadX 13039 1507328 61440 61440 NT_STATUS_OK
ReadX 13039 1568768 4096 4096 NT_STATUS_OK
ReadX 13039 1572864 61440 61440 NT_STATUS_OK
ReadX 13039 1634304 4096 4096 NT_STATUS_OK
ReadX 13039 1638400 61440 61440 NT_STATUS_OK
ReadX 13039 1699840 4096 4096 NT_STATUS_OK
ReadX 13039 1703936 61440 61440 NT_STATUS_OK
ReadX 13039 1765376 4096 4096 NT_STATUS_OK
ReadX 13039 1769472 61440 61440 NT_STATUS_OK
ReadX 13039 1830912 4096 4096 NT_STATUS_OK
ReadX 13039 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13040 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13041 NT_STATUS_OK
QUERY_FILE_INFORMATION 13041 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13041 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13041 1005 NT_STATUS_OK
ReadX 13041 2156 24 24 NT_STATUS_OK
ReadX 13041 2139 276 276 NT_STATUS_OK
ReadX 13041 2136 14 14 NT_STATUS_OK
ReadX 13041 2136 7 7 NT_STATUS_OK
ReadX 13041 2138 12 12 NT_STATUS_OK
ReadX 13041 2137 8 8 NT_STATUS_OK
ReadX 13041 2135 15 15 NT_STATUS_OK
ReadX 13041 0 16 16 NT_STATUS_OK
ReadX 13041 16 2048 2048 NT_STATUS_OK
ReadX 13041 2064 2048 2048 NT_STATUS_OK
ReadX 13041 257 2048 2048 NT_STATUS_OK
ReadX 13041 385 2048 2048 NT_STATUS_OK
ReadX 13041 513 2048 2048 NT_STATUS_OK
ReadX 13041 641 2048 2048 NT_STATUS_OK
ReadX 13041 769 2048 2048 NT_STATUS_OK
ReadX 13041 897 2048 2048 NT_STATUS_OK
ReadX 13041 1025 2048 2048 NT_STATUS_OK
ReadX 13041 1153 2048 2048 NT_STATUS_OK
ReadX 13041 1281 2048 2048 NT_STATUS_OK
ReadX 13041 1409 2048 2048 NT_STATUS_OK
ReadX 13041 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13043 NT_STATUS_OK
Close 13043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13037 NT_STATUS_OK
Close 13038 NT_STATUS_OK
Close 13039 NT_STATUS_OK
Close 13031 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13046 NT_STATUS_OK
WriteX 13046 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13046 258 NT_STATUS_OK
WriteX 13046 0 10575 10575 NT_STATUS_OK
Flush 13046 NT_STATUS_OK
Close 13046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13047 NT_STATUS_OK
Close 13047 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13049 NT_STATUS_OK
ReadX 13049 0 4096 4096 NT_STATUS_OK
Close 13041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13051 NT_STATUS_OK
LockX 13051 2147483538 1 NT_STATUS_OK
UnlockX 13051 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13051 1005 NT_STATUS_OK
ReadX 13051 0 512 512 NT_STATUS_OK
ReadX 13051 512 512 512 NT_STATUS_OK
ReadX 13051 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13051 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13051 1004 NT_STATUS_OK
Close 13051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13052 NT_STATUS_OK
QUERY_FILE_INFORMATION 13052 1005 NT_STATUS_OK
ReadX 13052 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13053 NT_STATUS_OK
LockX 13053 2147483538 1 NT_STATUS_OK
UnlockX 13053 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13053 1005 NT_STATUS_OK
ReadX 13053 0 512 512 NT_STATUS_OK
ReadX 13053 512 512 512 NT_STATUS_OK
ReadX 13053 1024 512 512 NT_STATUS_OK
ReadX 13053 288 20 20 NT_STATUS_OK
ReadX 13053 308 2084 2084 NT_STATUS_OK
ReadX 13053 388 2084 2084 NT_STATUS_OK
ReadX 13053 388 2084 2084 NT_STATUS_OK
ReadX 13040 2157 1386 1386 NT_STATUS_OK
ReadX 13053 2472 399 399 NT_STATUS_OK
ReadX 13053 3072 1536 1536 NT_STATUS_OK
ReadX 13053 544 149 149 NT_STATUS_OK
ReadX 13053 693 485 485 NT_STATUS_OK
Close 13053 NT_STATUS_OK
ReadX 13040 2157 4096 4096 NT_STATUS_OK
ReadX 13040 6253 4096 4096 NT_STATUS_OK
ReadX 13040 10349 4096 4096 NT_STATUS_OK
ReadX 13040 14445 4096 4096 NT_STATUS_OK
ReadX 13040 18541 4096 4096 NT_STATUS_OK
ReadX 13040 22637 256 256 NT_STATUS_OK
ReadX 13040 22893 4096 4096 NT_STATUS_OK
ReadX 13040 26989 4096 4096 NT_STATUS_OK
ReadX 13040 31085 4096 4096 NT_STATUS_OK
ReadX 13040 35181 4096 4096 NT_STATUS_OK
ReadX 13040 39277 4096 4096 NT_STATUS_OK
ReadX 13040 43373 4096 4096 NT_STATUS_OK
ReadX 13040 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13040 2157 1024 1024 NT_STATUS_OK
ReadX 13040 1667 4688 4688 NT_STATUS_OK
ReadX 13040 6355 3516 3516 NT_STATUS_OK
ReadX 13040 9871 16384 16384 NT_STATUS_OK
ReadX 13040 26255 3771 3771 NT_STATUS_OK
ReadX 13040 30026 2048 2048 NT_STATUS_OK
ReadX 13040 32074 1024 1024 NT_STATUS_OK
ReadX 13040 33098 6652 6652 NT_STATUS_OK
ReadX 13040 39750 16384 16384 NT_STATUS_OK
ReadX 13040 56134 10496 10496 NT_STATUS_OK
ReadX 13040 66630 1784 1784 NT_STATUS_OK
ReadX 13040 68414 90 90 NT_STATUS_OK
ReadX 13040 68504 273 273 NT_STATUS_OK
ReadX 13040 68777 1600 1600 NT_STATUS_OK
ReadX 13040 70377 640 640 NT_STATUS_OK
ReadX 13040 71017 1280 1280 NT_STATUS_OK
ReadX 13040 72297 8464 8464 NT_STATUS_OK
ReadX 13040 80761 158 158 NT_STATUS_OK
ReadX 13040 80919 912 912 NT_STATUS_OK
ReadX 13040 81831 1980 1980 NT_STATUS_OK
ReadX 13040 83811 2256 2256 NT_STATUS_OK
ReadX 13040 86067 400 400 NT_STATUS_OK
ReadX 13040 86467 252 252 NT_STATUS_OK
ReadX 13040 86719 42 42 NT_STATUS_OK
ReadX 13040 86761 725 725 NT_STATUS_OK
ReadX 13040 2009 512 512 NT_STATUS_OK
ReadX 13040 3895 9 9 NT_STATUS_OK
ReadX 13040 3781 46 46 NT_STATUS_OK
ReadX 13040 4059 92 92 NT_STATUS_OK
ReadX 13040 3781 92 92 NT_STATUS_OK
ReadX 13040 3986 184 184 NT_STATUS_OK
ReadX 13040 3987 16384 16384 NT_STATUS_OK
ReadX 13040 3902 16384 16384 NT_STATUS_OK
ReadX 13040 3781 10240 10240 NT_STATUS_OK
ReadX 13040 3821 16384 16384 NT_STATUS_OK
ReadX 13040 3891 935 935 NT_STATUS_OK
ReadX 13040 4060 10240 10240 NT_STATUS_OK
ReadX 13040 4059 184 184 NT_STATUS_OK
ReadX 13040 256 184 184 NT_STATUS_OK
ReadX 13040 256 1026 1026 NT_STATUS_OK
ReadX 13040 3901 326 326 NT_STATUS_OK
ReadX 13040 3899 652 652 NT_STATUS_OK
ReadX 13040 256 2 2 NT_STATUS_OK
ReadX 13040 258 4948 4948 NT_STATUS_OK
Close 13040 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13055 NT_STATUS_OK
Close 13055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13058 NT_STATUS_OK
WriteX 13058 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13058 258 NT_STATUS_OK
WriteX 13058 0 65536 65536 NT_STATUS_OK
WriteX 13058 65536 65536 65536 NT_STATUS_OK
WriteX 13058 131072 65536 65536 NT_STATUS_OK
WriteX 13058 196608 65536 65536 NT_STATUS_OK
WriteX 13058 262144 65536 65536 NT_STATUS_OK
WriteX 13058 327680 65536 65536 NT_STATUS_OK
WriteX 13058 393216 65536 65536 NT_STATUS_OK
WriteX 13058 458752 65536 65536 NT_STATUS_OK
WriteX 13058 524288 65536 65536 NT_STATUS_OK
WriteX 13058 589824 35257 35257 NT_STATUS_OK
Close 13058 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13060 NT_STATUS_OK
Close 13060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13063 NT_STATUS_OK
WriteX 13063 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13063 258 NT_STATUS_OK
WriteX 13063 0 65536 65536 NT_STATUS_OK
WriteX 13063 65536 65536 65536 NT_STATUS_OK
WriteX 13063 131072 65536 65536 NT_STATUS_OK
WriteX 13063 196608 65536 65536 NT_STATUS_OK
WriteX 13063 262144 65536 65536 NT_STATUS_OK
WriteX 13063 327680 65536 65536 NT_STATUS_OK
WriteX 13063 393216 65536 65536 NT_STATUS_OK
WriteX 13063 458752 65536 65536 NT_STATUS_OK
WriteX 13063 524288 65536 65536 NT_STATUS_OK
WriteX 13063 589824 57598 57598 NT_STATUS_OK
Close 13063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13065 NT_STATUS_OK
WriteX 13065 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13065 258 NT_STATUS_OK
WriteX 13065 0 12543 12543 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
Close 13065 NT_STATUS_OK
Close 13049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13067 NT_STATUS_OK
Close 13067 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13069 NT_STATUS_OK
ReadX 13069 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13070 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13071 NT_STATUS_OK
QUERY_FILE_INFORMATION 13071 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13071 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13071 1005 NT_STATUS_OK
ReadX 13071 1938 24 24 NT_STATUS_OK
ReadX 13071 1920 276 276 NT_STATUS_OK
ReadX 13071 1918 14 14 NT_STATUS_OK
ReadX 13071 1918 7 7 NT_STATUS_OK
ReadX 13071 1919 12 12 NT_STATUS_OK
ReadX 13071 1919 8 8 NT_STATUS_OK
ReadX 13071 1917 15 15 NT_STATUS_OK
ReadX 13071 0 16 16 NT_STATUS_OK
ReadX 13071 16 2048 2048 NT_STATUS_OK
ReadX 13071 2064 2048 2048 NT_STATUS_OK
ReadX 13071 257 2048 2048 NT_STATUS_OK
ReadX 13071 385 2048 2048 NT_STATUS_OK
ReadX 13071 513 2048 2048 NT_STATUS_OK
ReadX 13071 641 2048 2048 NT_STATUS_OK
ReadX 13071 769 2048 2048 NT_STATUS_OK
ReadX 13071 897 2048 2048 NT_STATUS_OK
ReadX 13071 1025 2048 2048 NT_STATUS_OK
ReadX 13071 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13073 NT_STATUS_OK
Close 13073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13076 NT_STATUS_OK
WriteX 13076 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13076 258 NT_STATUS_OK
WriteX 13076 0 11588 11588 NT_STATUS_OK
Flush 13076 NT_STATUS_OK
Close 13076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13077 NT_STATUS_OK
Close 13077 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13079 NT_STATUS_OK
ReadX 13079 0 4096 4096 NT_STATUS_OK
Close 13071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13081 NT_STATUS_OK
WriteX 13081 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13081 258 NT_STATUS_OK
WriteX 13081 0 11615 11615 NT_STATUS_OK
Flush 13081 NT_STATUS_OK
Close 13081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13083 NT_STATUS_OK
Close 13083 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13085 NT_STATUS_OK
ReadX 13085 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13087 NT_STATUS_OK
Close 13087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13090 NT_STATUS_OK
WriteX 13090 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13090 258 NT_STATUS_OK
WriteX 13090 0 65536 65536 NT_STATUS_OK
WriteX 13090 65536 16050 16050 NT_STATUS_OK
Close 13090 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13070 1939 64 64 NT_STATUS_OK
ReadX 13070 128 248 248 NT_STATUS_OK
ReadX 13070 128 568 568 NT_STATUS_OK
ReadX 13070 3872 1536 1536 NT_STATUS_OK
ReadX 13070 3456 2560 2560 NT_STATUS_OK
ReadX 13070 3136 512 512 NT_STATUS_OK
ReadX 13070 2880 4096 4096 NT_STATUS_OK
ReadX 13070 3264 3072 3072 NT_STATUS_OK
ReadX 13070 320 4096 4096 NT_STATUS_OK
ReadX 13070 1024 4096 4096 NT_STATUS_OK
ReadX 13070 3616 4096 4096 NT_STATUS_OK
ReadX 13070 1939 64 64 NT_STATUS_OK
ReadX 13070 128 248 248 NT_STATUS_OK
ReadX 13070 128 608 608 NT_STATUS_OK
ReadX 13070 2858 1024 1024 NT_STATUS_OK
ReadX 13070 2810 4096 4096 NT_STATUS_OK
ReadX 13070 2826 4096 4096 NT_STATUS_OK
ReadX 13070 2580 2048 2048 NT_STATUS_OK
ReadX 13070 2800 2560 2560 NT_STATUS_OK
ReadX 13070 2100 4096 4096 NT_STATUS_OK
ReadX 13070 2084 4096 4096 NT_STATUS_OK
ReadX 13070 868 4096 4096 NT_STATUS_OK
ReadX 13070 2324 4096 4096 NT_STATUS_OK
ReadX 13070 884 4096 4096 NT_STATUS_OK
ReadX 13070 2604 1024 1024 NT_STATUS_OK
ReadX 13070 580 4096 4096 NT_STATUS_OK
ReadX 13070 596 4096 4096 NT_STATUS_OK
ReadX 13070 2752 4096 4096 NT_STATUS_OK
ReadX 13070 2842 1024 1024 NT_STATUS_OK
ReadX 13070 660 4096 4096 NT_STATUS_OK
ReadX 13070 2720 4096 4096 NT_STATUS_OK
ReadX 13070 2736 4096 4096 NT_STATUS_OK
ReadX 13070 628 4096 4096 NT_STATUS_OK
ReadX 13070 2704 4096 4096 NT_STATUS_OK
ReadX 13070 1556 4096 4096 NT_STATUS_OK
ReadX 13070 576 4096 4096 NT_STATUS_OK
ReadX 13070 3168 1536 1536 NT_STATUS_OK
ReadX 13070 832 4096 4096 NT_STATUS_OK
ReadX 13070 1088 4096 4096 NT_STATUS_OK
ReadX 13070 1344 4096 4096 NT_STATUS_OK
ReadX 13070 1600 4096 4096 NT_STATUS_OK
ReadX 13070 1856 4096 4096 NT_STATUS_OK
ReadX 13070 2112 4096 4096 NT_STATUS_OK
ReadX 13070 1892 4096 4096 NT_STATUS_OK
ReadX 13070 820 4096 4096 NT_STATUS_OK
ReadX 13070 788 4096 4096 NT_STATUS_OK
ReadX 13070 1604 4096 4096 NT_STATUS_OK
ReadX 13070 3648 4096 4096 NT_STATUS_OK
ReadX 13070 2608 4096 4096 NT_STATUS_OK
ReadX 13070 548 4096 4096 NT_STATUS_OK
ReadX 13070 740 4096 4096 NT_STATUS_OK
ReadX 13070 1344 4096 4096 NT_STATUS_OK
ReadX 13070 3392 4096 4096 NT_STATUS_OK
ReadX 13070 3904 4096 4096 NT_STATUS_OK
ReadX 13070 644 4096 4096 NT_STATUS_OK
ReadX 13070 676 4096 4096 NT_STATUS_OK
ReadX 13070 2688 4096 4096 NT_STATUS_OK
ReadX 13070 320 4096 4096 NT_STATUS_OK
ReadX 13070 900 4096 4096 NT_STATUS_OK
ReadX 13070 1908 4096 4096 NT_STATUS_OK
ReadX 13070 852 4096 4096 NT_STATUS_OK
ReadX 13070 724 4096 4096 NT_STATUS_OK
ReadX 13070 2292 4096 4096 NT_STATUS_OK
ReadX 13070 612 4096 4096 NT_STATUS_OK
ReadX 13070 388 4096 4096 NT_STATUS_OK
ReadX 13070 2368 4096 4096 NT_STATUS_OK
ReadX 13070 2624 4096 4096 NT_STATUS_OK
ReadX 13070 500 4096 4096 NT_STATUS_OK
ReadX 13070 356 4096 4096 NT_STATUS_OK
ReadX 13070 1024 4096 4096 NT_STATUS_OK
ReadX 13070 576 4096 4096 NT_STATUS_OK
ReadX 13070 340 4096 4096 NT_STATUS_OK
ReadX 13070 420 4096 4096 NT_STATUS_OK
ReadX 13070 1600 4096 4096 NT_STATUS_OK
ReadX 13070 404 4096 4096 NT_STATUS_OK
ReadX 13070 1428 4096 4096 NT_STATUS_OK
ReadX 13070 2656 4096 4096 NT_STATUS_OK
ReadX 13070 2624 4096 4096 NT_STATUS_OK
ReadX 13070 452 4096 4096 NT_STATUS_OK
ReadX 13070 692 4096 4096 NT_STATUS_OK
ReadX 13070 564 4096 4096 NT_STATUS_OK
ReadX 13070 372 4096 4096 NT_STATUS_OK
ReadX 13070 468 4096 4096 NT_STATUS_OK
ReadX 13070 484 4096 4096 NT_STATUS_OK
ReadX 13070 1088 4096 4096 NT_STATUS_OK
ReadX 13070 1924 4096 4096 NT_STATUS_OK
ReadX 13070 2768 4096 4096 NT_STATUS_OK
ReadX 13070 832 4096 4096 NT_STATUS_OK
ReadX 13070 836 4096 4096 NT_STATUS_OK
ReadX 13070 1856 4096 4096 NT_STATUS_OK
ReadX 13070 2640 4096 4096 NT_STATUS_OK
ReadX 13070 436 4096 4096 NT_STATUS_OK
ReadX 13070 1828 4096 4096 NT_STATUS_OK
ReadX 13070 804 4096 4096 NT_STATUS_OK
ReadX 13070 1860 4096 4096 NT_STATUS_OK
ReadX 13070 1812 4096 4096 NT_STATUS_OK
ReadX 13070 756 4096 4096 NT_STATUS_OK
ReadX 13070 1636 4096 4096 NT_STATUS_OK
ReadX 13070 772 4096 4096 NT_STATUS_OK
ReadX 13070 2036 4096 4096 NT_STATUS_OK
ReadX 13070 1220 4096 4096 NT_STATUS_OK
ReadX 13070 1652 4096 4096 NT_STATUS_OK
ReadX 13070 2588 4096 4096 NT_STATUS_OK
ReadX 13070 916 4096 4096 NT_STATUS_OK
ReadX 13070 260 4096 4096 NT_STATUS_OK
ReadX 13070 932 4096 4096 NT_STATUS_OK
ReadX 13070 2624 4096 4096 NT_STATUS_OK
ReadX 13070 308 4096 4096 NT_STATUS_OK
ReadX 13070 292 4096 4096 NT_STATUS_OK
ReadX 13070 1140 4096 4096 NT_STATUS_OK
ReadX 13070 276 4096 4096 NT_STATUS_OK
ReadX 13070 2020 4096 4096 NT_STATUS_OK
ReadX 13070 2880 4096 4096 NT_STATUS_OK
ReadX 13070 516 4096 4096 NT_STATUS_OK
ReadX 13070 1844 4096 4096 NT_STATUS_OK
ReadX 13070 1124 4096 4096 NT_STATUS_OK
ReadX 13070 3136 4096 4096 NT_STATUS_OK
ReadX 13070 324 4096 4096 NT_STATUS_OK
ReadX 13070 1156 4096 4096 NT_STATUS_OK
ReadX 13070 1172 4096 4096 NT_STATUS_OK
ReadX 13070 2112 4096 4096 NT_STATUS_OK
ReadX 13070 2368 4096 4096 NT_STATUS_OK
ReadX 13070 964 4096 4096 NT_STATUS_OK
ReadX 13070 980 4096 4096 NT_STATUS_OK
ReadX 13070 1012 4096 4096 NT_STATUS_OK
ReadX 13070 532 4096 4096 NT_STATUS_OK
ReadX 13070 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13070 1620 4096 4096 NT_STATUS_OK
ReadX 13070 1604 4096 4096 NT_STATUS_OK
ReadX 13070 2116 4096 4096 NT_STATUS_OK
ReadX 13070 2132 4096 4096 NT_STATUS_OK
ReadX 13070 2148 4096 4096 NT_STATUS_OK
ReadX 13070 2276 4096 4096 NT_STATUS_OK
ReadX 13070 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13092 NT_STATUS_OK
Close 13092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13095 NT_STATUS_OK
QUERY_FILE_INFORMATION 13050 1004 NT_STATUS_OK
Close 13050 NT_STATUS_OK
WriteX 13095 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13095 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13052 1004 NT_STATUS_OK
Close 13052 NT_STATUS_OK
WriteX 13095 0 65536 65536 NT_STATUS_OK
WriteX 13095 65536 64850 64850 NT_STATUS_OK
Close 13095 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13097 NT_STATUS_OK
WriteX 13097 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13097 258 NT_STATUS_OK
ReadX 13070 2068 4096 4096 NT_STATUS_OK
ReadX 13070 1588 4096 4096 NT_STATUS_OK
ReadX 13070 1572 4096 4096 NT_STATUS_OK
WriteX 13097 0 18630 18630 NT_STATUS_OK
Flush 13097 NT_STATUS_OK
Close 13097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13099 NT_STATUS_OK
Close 13099 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13101 NT_STATUS_OK
ReadX 13101 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13070 612 4096 4096 NT_STATUS_OK
ReadX 13070 564 4096 4096 NT_STATUS_OK
ReadX 13070 1876 4096 4096 NT_STATUS_OK
ReadX 13070 628 4096 4096 NT_STATUS_OK
ReadX 13070 740 4096 4096 NT_STATUS_OK
ReadX 13070 724 4096 4096 NT_STATUS_OK
ReadX 13070 644 4096 4096 NT_STATUS_OK
ReadX 13070 2324 4096 4096 NT_STATUS_OK
ReadX 13070 660 4096 4096 NT_STATUS_OK
ReadX 13070 852 4096 4096 NT_STATUS_OK
ReadX 13070 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13070 2368 4096 4096 NT_STATUS_OK
ReadX 13070 1024 4096 4096 NT_STATUS_OK
ReadX 13070 320 4096 4096 NT_STATUS_OK
ReadX 13070 580 4096 4096 NT_STATUS_OK
ReadX 13070 3136 512 512 NT_STATUS_OK
ReadX 13070 2880 4096 4096 NT_STATUS_OK
Close 13070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13102 NT_STATUS_OK
ReadX 13102 61440 4096 4096 NT_STATUS_OK
ReadX 13102 126976 4096 4096 NT_STATUS_OK
WriteX 13102 0 65536 65536 NT_STATUS_OK
WriteX 13102 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13103 NT_STATUS_OK
ReadX 13103 61440 4096 4096 NT_STATUS_OK
ReadX 13103 126976 4096 4096 NT_STATUS_OK
ReadX 13103 192512 4096 4096 NT_STATUS_OK
ReadX 13103 258048 4096 4096 NT_STATUS_OK
WriteX 13103 0 65536 65536 NT_STATUS_OK
WriteX 13103 65536 65536 65536 NT_STATUS_OK
WriteX 13103 131072 65536 65536 NT_STATUS_OK
WriteX 13103 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13104 NT_STATUS_OK
ReadX 13104 61440 4096 4096 NT_STATUS_OK
ReadX 13104 126976 4096 4096 NT_STATUS_OK
ReadX 13104 192512 4096 4096 NT_STATUS_OK
ReadX 13104 258048 4096 4096 NT_STATUS_OK
ReadX 13104 323584 4096 4096 NT_STATUS_OK
ReadX 13104 389120 4096 4096 NT_STATUS_OK
ReadX 13104 454656 4096 4096 NT_STATUS_OK
ReadX 13104 520192 4096 4096 NT_STATUS_OK
WriteX 13104 0 65536 65536 NT_STATUS_OK
WriteX 13104 65536 65536 65536 NT_STATUS_OK
WriteX 13104 131072 65536 65536 NT_STATUS_OK
WriteX 13104 196608 65536 65536 NT_STATUS_OK
WriteX 13104 262144 65536 65536 NT_STATUS_OK
WriteX 13104 327680 65536 65536 NT_STATUS_OK
WriteX 13104 393216 65536 65536 NT_STATUS_OK
WriteX 13104 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13105 NT_STATUS_OK
ReadX 13105 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13106 NT_STATUS_OK
Close 13106 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13107 NT_STATUS_OK
WriteX 13107 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13107 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13105 0 8192 8192 NT_STATUS_OK
Flush 13105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13105 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13101 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13069 NT_STATUS_OK
Close 13102 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13103 NT_STATUS_OK
Close 13104 NT_STATUS_OK
WriteX 13105 0 8192 8192 NT_STATUS_OK
Flush 13105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13105 0 8192 8192 NT_STATUS_OK
Flush 13105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13105 0 8192 8192 NT_STATUS_OK
Flush 13105 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13109 NT_STATUS_OK
Close 13109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13112 NT_STATUS_OK
WriteX 13112 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13112 258 NT_STATUS_OK
WriteX 13112 0 62591 62591 NT_STATUS_OK
Close 13112 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13114 NT_STATUS_OK
Close 13114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13117 NT_STATUS_OK
WriteX 13117 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13117 258 NT_STATUS_OK
WriteX 13117 0 10845 10845 NT_STATUS_OK
Close 13117 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13119 NT_STATUS_OK
Close 13119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13122 NT_STATUS_OK
WriteX 13122 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13122 258 NT_STATUS_OK
WriteX 13122 0 30118 30118 NT_STATUS_OK
Close 13122 NT_STATUS_OK
WriteX 13105 0 4096 4096 NT_STATUS_OK
WriteX 13107 0 64 64 NT_STATUS_OK
Close 13107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13105 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13124 NT_STATUS_OK
ReadX 13124 0 61440 61440 NT_STATUS_OK
ReadX 13124 61440 4096 4096 NT_STATUS_OK
ReadX 13124 65536 61440 61440 NT_STATUS_OK
ReadX 13124 126976 4096 4096 NT_STATUS_OK
ReadX 13124 131072 61440 61440 NT_STATUS_OK
ReadX 13124 192512 4096 4096 NT_STATUS_OK
ReadX 13124 196608 61440 61440 NT_STATUS_OK
ReadX 13124 258048 4096 4096 NT_STATUS_OK
ReadX 13124 262144 61440 61440 NT_STATUS_OK
ReadX 13124 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13125 NT_STATUS_OK
ReadX 13125 0 61440 61440 NT_STATUS_OK
ReadX 13125 61440 4096 4096 NT_STATUS_OK
ReadX 13125 65536 61440 61440 NT_STATUS_OK
ReadX 13125 126976 4096 4096 NT_STATUS_OK
ReadX 13125 131072 61440 61440 NT_STATUS_OK
ReadX 13125 192512 4096 4096 NT_STATUS_OK
ReadX 13125 196608 61440 61440 NT_STATUS_OK
ReadX 13125 258048 4096 4096 NT_STATUS_OK
ReadX 13125 262144 61440 61440 NT_STATUS_OK
ReadX 13125 323584 4096 4096 NT_STATUS_OK
ReadX 13125 327680 61440 61440 NT_STATUS_OK
ReadX 13125 389120 4096 4096 NT_STATUS_OK
ReadX 13125 393216 61440 61440 NT_STATUS_OK
ReadX 13125 454656 4096 4096 NT_STATUS_OK
ReadX 13125 458752 61440 61440 NT_STATUS_OK
ReadX 13125 520192 4096 4096 NT_STATUS_OK
ReadX 13125 524288 61440 61440 NT_STATUS_OK
ReadX 13125 585728 4096 4096 NT_STATUS_OK
ReadX 13125 589824 61440 61440 NT_STATUS_OK
ReadX 13125 651264 4096 4096 NT_STATUS_OK
ReadX 13125 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13126 NT_STATUS_OK
ReadX 13126 0 61440 61440 NT_STATUS_OK
ReadX 13126 61440 4096 4096 NT_STATUS_OK
ReadX 13126 65536 61440 61440 NT_STATUS_OK
ReadX 13126 126976 4096 4096 NT_STATUS_OK
ReadX 13126 131072 61440 61440 NT_STATUS_OK
ReadX 13126 192512 4096 4096 NT_STATUS_OK
ReadX 13126 196608 61440 61440 NT_STATUS_OK
ReadX 13126 258048 4096 4096 NT_STATUS_OK
ReadX 13126 262144 61440 61440 NT_STATUS_OK
ReadX 13126 323584 4096 4096 NT_STATUS_OK
ReadX 13126 327680 61440 61440 NT_STATUS_OK
ReadX 13126 389120 4096 4096 NT_STATUS_OK
ReadX 13126 393216 61440 61440 NT_STATUS_OK
ReadX 13126 454656 4096 4096 NT_STATUS_OK
ReadX 13126 458752 61440 61440 NT_STATUS_OK
ReadX 13126 520192 4096 4096 NT_STATUS_OK
ReadX 13126 524288 61440 61440 NT_STATUS_OK
ReadX 13126 585728 4096 4096 NT_STATUS_OK
ReadX 13126 589824 61440 61440 NT_STATUS_OK
ReadX 13126 651264 4096 4096 NT_STATUS_OK
ReadX 13126 655360 61440 61440 NT_STATUS_OK
ReadX 13126 716800 4096 4096 NT_STATUS_OK
ReadX 13126 720896 61440 61440 NT_STATUS_OK
ReadX 13126 782336 4096 4096 NT_STATUS_OK
ReadX 13126 786432 61440 61440 NT_STATUS_OK
ReadX 13126 847872 4096 4096 NT_STATUS_OK
ReadX 13126 851968 61440 61440 NT_STATUS_OK
ReadX 13126 913408 4096 4096 NT_STATUS_OK
ReadX 13126 917504 61440 61440 NT_STATUS_OK
ReadX 13126 978944 4096 4096 NT_STATUS_OK
ReadX 13126 983040 61440 61440 NT_STATUS_OK
ReadX 13126 1044480 4096 4096 NT_STATUS_OK
ReadX 13126 1048576 61440 61440 NT_STATUS_OK
ReadX 13126 1110016 4096 4096 NT_STATUS_OK
ReadX 13126 1114112 61440 61440 NT_STATUS_OK
ReadX 13126 1175552 4096 4096 NT_STATUS_OK
ReadX 13126 1179648 61440 61440 NT_STATUS_OK
ReadX 13126 1241088 4096 4096 NT_STATUS_OK
ReadX 13126 1245184 61440 61440 NT_STATUS_OK
ReadX 13126 1306624 4096 4096 NT_STATUS_OK
ReadX 13126 1310720 61440 61440 NT_STATUS_OK
ReadX 13126 1372160 4096 4096 NT_STATUS_OK
ReadX 13126 1376256 61440 61440 NT_STATUS_OK
ReadX 13126 1437696 4096 4096 NT_STATUS_OK
ReadX 13126 1441792 61440 61440 NT_STATUS_OK
ReadX 13126 1503232 4096 4096 NT_STATUS_OK
ReadX 13126 1507328 61440 61440 NT_STATUS_OK
ReadX 13126 1568768 4096 4096 NT_STATUS_OK
ReadX 13126 1572864 61440 61440 NT_STATUS_OK
ReadX 13126 1634304 4096 4096 NT_STATUS_OK
ReadX 13126 1638400 61440 61440 NT_STATUS_OK
ReadX 13126 1699840 4096 4096 NT_STATUS_OK
ReadX 13126 1703936 61440 61440 NT_STATUS_OK
ReadX 13126 1765376 4096 4096 NT_STATUS_OK
ReadX 13126 1769472 61440 61440 NT_STATUS_OK
ReadX 13126 1830912 4096 4096 NT_STATUS_OK
ReadX 13126 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13127 NT_STATUS_OK
Close 13127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13124 NT_STATUS_OK
Close 13125 NT_STATUS_OK
Close 13126 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13129 NT_STATUS_OK
ReadX 13129 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13130 NT_STATUS_OK
ReadX 13130 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13131 NT_STATUS_OK
ReadX 13131 0 4096 4096 NT_STATUS_OK
ReadX 13131 4096 4096 4096 NT_STATUS_OK
ReadX 13131 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13132 NT_STATUS_OK
Close 13132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13129 NT_STATUS_OK
Close 13130 NT_STATUS_OK
Close 13131 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13134 NT_STATUS_OK
ReadX 13134 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13135 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13135 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13136 NT_STATUS_OK
Close 13136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13134 NT_STATUS_OK
Close 13135 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13138 NT_STATUS_OK
ReadX 13138 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13139 NT_STATUS_OK
ReadX 13139 0 8192 8192 NT_STATUS_OK
ReadX 13139 8192 8192 8192 NT_STATUS_OK
ReadX 13139 16384 8192 8192 NT_STATUS_OK
ReadX 13139 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13141 NT_STATUS_OK
Close 13141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13139 NT_STATUS_OK
Close 13138 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13144 NT_STATUS_OK
WriteX 13144 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13144 258 NT_STATUS_OK
WriteX 13144 0 10438 10438 NT_STATUS_OK
Close 13144 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13145 NT_STATUS_OK
Close 13145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13146 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13147 NT_STATUS_OK
Close 13147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13148 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13149 NT_STATUS_OK
Close 13149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13150 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13151 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13152 NT_STATUS_OK
Close 13152 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13153 NT_STATUS_OK
ReadX 13153 0 4096 4096 NT_STATUS_OK
ReadX 13153 4096 4096 4096 NT_STATUS_OK
ReadX 13153 8192 4096 4096 NT_STATUS_OK
ReadX 13153 12288 8192 8192 NT_STATUS_OK
ReadX 13153 20480 8192 8192 NT_STATUS_OK
ReadX 13153 28672 8192 8192 NT_STATUS_OK
ReadX 13153 36864 8192 8192 NT_STATUS_OK
ReadX 13153 45056 8192 8192 NT_STATUS_OK
ReadX 13153 53248 8192 8192 NT_STATUS_OK
ReadX 13153 61440 8192 8192 NT_STATUS_OK
ReadX 13153 69632 8192 8192 NT_STATUS_OK
ReadX 13153 77824 8192 8192 NT_STATUS_OK
ReadX 13153 86016 8192 8192 NT_STATUS_OK
ReadX 13153 94208 8192 8192 NT_STATUS_OK
ReadX 13153 102400 8192 8192 NT_STATUS_OK
ReadX 13153 110592 8192 8192 NT_STATUS_OK
ReadX 13153 118784 8192 8192 NT_STATUS_OK
ReadX 13153 126976 8192 8192 NT_STATUS_OK
ReadX 13153 135168 8192 8192 NT_STATUS_OK
ReadX 13153 143360 8192 8192 NT_STATUS_OK
ReadX 13153 151552 8192 8192 NT_STATUS_OK
ReadX 13153 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13153 NT_STATUS_OK
Close 13146 NT_STATUS_OK
Close 13148 NT_STATUS_OK
Close 13150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13155 NT_STATUS_OK
Close 13155 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13158 NT_STATUS_OK
WriteX 13158 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13158 258 NT_STATUS_OK
WriteX 13158 0 28489 28489 NT_STATUS_OK
Close 13158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13159 NT_STATUS_OK
Close 13159 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13161 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13161 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13162 NT_STATUS_OK
Close 13162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13161 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13164 NT_STATUS_OK
ReadX 13164 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13165 NT_STATUS_OK
ReadX 13165 0 8192 8192 NT_STATUS_OK
ReadX 13165 8192 8192 8192 NT_STATUS_OK
ReadX 13165 16384 8192 8192 NT_STATUS_OK
ReadX 13165 24576 8192 8192 NT_STATUS_OK
ReadX 13165 32768 16384 16384 NT_STATUS_OK
ReadX 13165 49152 8192 8192 NT_STATUS_OK
ReadX 13165 57344 8192 8192 NT_STATUS_OK
ReadX 13165 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13167 NT_STATUS_OK
Close 13167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13165 NT_STATUS_OK
Close 13164 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13170 NT_STATUS_OK
WriteX 13170 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13170 258 NT_STATUS_OK
WriteX 13170 0 29253 29253 NT_STATUS_OK
Close 13170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13171 NT_STATUS_OK
Close 13171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13172 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13174 NT_STATUS_OK
Close 13174 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13177 NT_STATUS_OK
WriteX 13177 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13177 258 NT_STATUS_OK
WriteX 13177 0 30183 30183 NT_STATUS_OK
Close 13177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13178 NT_STATUS_OK
Close 13178 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13180 NT_STATUS_OK
WriteX 13180 0 510 510 NT_STATUS_OK
WriteX 13180 510 512 512 NT_STATUS_OK
WriteX 13180 1022 510 510 NT_STATUS_OK
WriteX 13180 1532 510 510 NT_STATUS_OK
WriteX 13180 2042 168 168 NT_STATUS_OK
Close 13180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13181 NT_STATUS_OK
Close 13181 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13183 NT_STATUS_OK
ReadX 13183 0 4096 4096 NT_STATUS_OK
WriteX 13183 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13184 NT_STATUS_OK
ReadX 13184 61440 4096 4096 NT_STATUS_OK
ReadX 13184 126976 4096 4096 NT_STATUS_OK
WriteX 13184 0 65536 65536 NT_STATUS_OK
WriteX 13184 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13185 NT_STATUS_OK
ReadX 13185 61440 4096 4096 NT_STATUS_OK
ReadX 13185 126976 4096 4096 NT_STATUS_OK
ReadX 13185 192512 4096 4096 NT_STATUS_OK
ReadX 13185 258048 4096 4096 NT_STATUS_OK
WriteX 13185 0 65536 65536 NT_STATUS_OK
WriteX 13185 65536 65536 65536 NT_STATUS_OK
WriteX 13185 131072 65536 65536 NT_STATUS_OK
WriteX 13185 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13186 NT_STATUS_OK
ReadX 13186 61440 4096 4096 NT_STATUS_OK
ReadX 13186 126976 4096 4096 NT_STATUS_OK
ReadX 13186 192512 4096 4096 NT_STATUS_OK
ReadX 13186 258048 4096 4096 NT_STATUS_OK
ReadX 13186 323584 4096 4096 NT_STATUS_OK
ReadX 13186 389120 4096 4096 NT_STATUS_OK
ReadX 13186 454656 4096 4096 NT_STATUS_OK
ReadX 13186 520192 4096 4096 NT_STATUS_OK
WriteX 13186 0 65536 65536 NT_STATUS_OK
WriteX 13186 65536 65536 65536 NT_STATUS_OK
WriteX 13186 131072 65536 65536 NT_STATUS_OK
WriteX 13186 196608 65536 65536 NT_STATUS_OK
WriteX 13186 262144 65536 65536 NT_STATUS_OK
WriteX 13186 327680 65536 65536 NT_STATUS_OK
WriteX 13186 393216 65536 65536 NT_STATUS_OK
WriteX 13186 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13187 NT_STATUS_OK
Close 13187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13183 NT_STATUS_OK
Close 13184 NT_STATUS_OK
Close 13185 NT_STATUS_OK
Close 13186 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13189 NT_STATUS_OK
Close 13189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13193 NT_STATUS_OK
Close 13193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13196 NT_STATUS_OK
Close 13196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13198 NT_STATUS_OK
Close 13198 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13202 NT_STATUS_OK
Close 13202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13205 NT_STATUS_OK
Close 13205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13207 NT_STATUS_OK
Close 13207 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13211 NT_STATUS_OK
Close 13211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13216 NT_STATUS_OK
Close 13216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13221 NT_STATUS_OK
Close 13221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13226 NT_STATUS_OK
Close 13226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13231 NT_STATUS_OK
Close 13231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13236 NT_STATUS_OK
Close 13236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13241 NT_STATUS_OK
Close 13241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13246 NT_STATUS_OK
Close 13246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13249 NT_STATUS_OK
Close 13249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13252 NT_STATUS_OK
Close 13252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13255 NT_STATUS_OK
WriteX 13255 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13255 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13255 0 65536 65536 NT_STATUS_OK
WriteX 13255 65536 65536 65536 NT_STATUS_OK
WriteX 13255 131072 65536 65536 NT_STATUS_OK
WriteX 13255 196608 65536 65536 NT_STATUS_OK
WriteX 13255 262144 26634 26634 NT_STATUS_OK
Close 13255 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13260 NT_STATUS_OK
Close 13260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13261 NT_STATUS_OK
Close 13261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13262 NT_STATUS_OK
ReadX 13262 0 4096 4096 NT_STATUS_OK
Close 13262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13263 NT_STATUS_OK
ReadX 13263 0 4096 4096 NT_STATUS_OK
ReadX 13263 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13264 NT_STATUS_OK
Close 13264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13263 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13268 NT_STATUS_OK
Close 13268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13271 NT_STATUS_OK
Close 13271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13273 NT_STATUS_OK
Close 13273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13277 NT_STATUS_OK
Close 13277 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13280 NT_STATUS_OK
Close 13280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13282 NT_STATUS_OK
Close 13282 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13286 NT_STATUS_OK
Close 13286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13291 NT_STATUS_OK
Close 13291 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13296 NT_STATUS_OK
Close 13296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13301 NT_STATUS_OK
Close 13301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13306 NT_STATUS_OK
Close 13306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13311 NT_STATUS_OK
Close 13311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13315 NT_STATUS_OK
Close 13315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13320 NT_STATUS_OK
Close 13320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13325 NT_STATUS_OK
Close 13325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13328 NT_STATUS_OK
Close 13328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13330 NT_STATUS_OK
Close 13330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13340 NT_STATUS_OK
Close 13340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13341 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 0 4096 4096 NT_STATUS_OK
Close 13342 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13343 NT_STATUS_OK
ReadX 13343 0 4096 4096 NT_STATUS_OK
Close 13343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13344 NT_STATUS_OK
ReadX 13344 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13354 NT_STATUS_OK
Close 13354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13355 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13355 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13356 NT_STATUS_OK
ReadX 13356 0 4096 4096 NT_STATUS_OK
Close 13356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13357 NT_STATUS_OK
ReadX 13357 0 4096 4096 NT_STATUS_OK
Close 13357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13358 NT_STATUS_OK
ReadX 13358 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13344 NT_STATUS_OK
Close 13358 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13387 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13387 0 4096 4096 NT_STATUS_OK
Close 13387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13388 NT_STATUS_OK
ReadX 13388 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13389 NT_STATUS_OK
ReadX 13389 0 4096 4096 NT_STATUS_OK
ReadX 13389 4096 4096 4096 NT_STATUS_OK
ReadX 13389 8192 4096 4096 NT_STATUS_OK
ReadX 13389 12288 4096 4096 NT_STATUS_OK
ReadX 13389 16384 4096 4096 NT_STATUS_OK
ReadX 13389 20480 4096 4096 NT_STATUS_OK
ReadX 13389 24576 4096 4096 NT_STATUS_OK
ReadX 13389 28672 4096 4096 NT_STATUS_OK
ReadX 13389 32768 4096 4096 NT_STATUS_OK
ReadX 13389 36864 4096 4096 NT_STATUS_OK
ReadX 13389 40960 4096 4096 NT_STATUS_OK
ReadX 13389 45056 4096 4096 NT_STATUS_OK
ReadX 13389 49152 4096 4096 NT_STATUS_OK
ReadX 13389 53248 4096 4096 NT_STATUS_OK
ReadX 13389 57344 4096 4096 NT_STATUS_OK
ReadX 13389 61440 4096 4096 NT_STATUS_OK
ReadX 13389 65536 4096 4096 NT_STATUS_OK
ReadX 13389 69632 4096 4096 NT_STATUS_OK
ReadX 13389 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13389 1004 NT_STATUS_OK
WriteX 13389 0 4096 4096 NT_STATUS_OK
Close 13389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13390 NT_STATUS_OK
SET_FILE_INFORMATION 13390 1004 NT_STATUS_OK
Close 13390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13392 NT_STATUS_OK
Close 13392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13395 NT_STATUS_OK
WriteX 13395 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13395 258 NT_STATUS_OK
WriteX 13395 0 65536 65536 NT_STATUS_OK
WriteX 13395 65536 19979 19979 NT_STATUS_OK
Close 13395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13396 NT_STATUS_OK
ReadX 13396 0 4096 4096 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
Flush 13396 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
Flush 13396 NT_STATUS_OK
QUERY_FILE_INFORMATION 13396 1004 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
Flush 13396 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
Flush 13396 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
Flush 13396 NT_STATUS_OK
SET_FILE_INFORMATION 13396 1004 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
Flush 13396 NT_STATUS_OK
Close 13396 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13397 NT_STATUS_OK
ReadX 13397 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13398 NT_STATUS_OK
ReadX 13398 0 4096 4096 NT_STATUS_OK
Close 13397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13399 NT_STATUS_OK
ReadX 13399 0 4096 4096 NT_STATUS_OK
Close 13399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13400 NT_STATUS_OK
ReadX 13400 0 4096 4096 NT_STATUS_OK
Close 13400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13401 NT_STATUS_OK
ReadX 13401 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13401 1004 NT_STATUS_OK
WriteX 13401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13402 NT_STATUS_OK
Close 13402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13398 NT_STATUS_OK
Close 13401 NT_STATUS_OK
Close 13391 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13404 NT_STATUS_OK
Close 13404 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13407 NT_STATUS_OK
WriteX 13407 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13407 258 NT_STATUS_OK
WriteX 13407 0 65536 65536 NT_STATUS_OK
WriteX 13407 65536 17654 17654 NT_STATUS_OK
Close 13407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13408 NT_STATUS_OK
ReadX 13408 0 4096 4096 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
QUERY_FILE_INFORMATION 13408 1004 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
SET_FILE_INFORMATION 13408 1004 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
Close 13408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13409 NT_STATUS_OK
SET_FILE_INFORMATION 13409 1004 NT_STATUS_OK
Close 13409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13410 NT_STATUS_OK
ReadX 13410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13411 NT_STATUS_OK
Close 13411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13413 NT_STATUS_OK
ReadX 13413 0 4096 4096 NT_STATUS_OK
ReadX 13413 4096 4096 4096 NT_STATUS_OK
ReadX 13413 8192 4096 4096 NT_STATUS_OK
ReadX 13413 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13413 16384 4096 4096 NT_STATUS_OK
ReadX 13413 20480 4096 4096 NT_STATUS_OK
ReadX 13413 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13414 NT_STATUS_OK
ReadX 13414 0 4096 4096 NT_STATUS_OK
Close 13414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13415 NT_STATUS_OK
ReadX 13415 0 4096 4096 NT_STATUS_OK
Close 13415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13416 NT_STATUS_OK
ReadX 13416 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13416 1004 NT_STATUS_OK
WriteX 13416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13417 NT_STATUS_OK
Close 13417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13416 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13419 NT_STATUS_OK
Close 13419 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13422 NT_STATUS_OK
WriteX 13422 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13422 258 NT_STATUS_OK
WriteX 13422 0 65536 65536 NT_STATUS_OK
WriteX 13422 65536 19490 19490 NT_STATUS_OK
Close 13422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13423 NT_STATUS_OK
ReadX 13423 0 4096 4096 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
Flush 13423 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
Flush 13423 NT_STATUS_OK
QUERY_FILE_INFORMATION 13423 1004 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
Flush 13423 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
Flush 13423 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
Flush 13423 NT_STATUS_OK
SET_FILE_INFORMATION 13423 1004 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
Flush 13423 NT_STATUS_OK
Close 13423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13424 NT_STATUS_OK
SET_FILE_INFORMATION 13424 1004 NT_STATUS_OK
Close 13424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13425 NT_STATUS_OK
ReadX 13425 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13426 NT_STATUS_OK
Close 13426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13428 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13428 0 4096 4096 NT_STATUS_OK
Close 13428 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13429 NT_STATUS_OK
ReadX 13429 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13430 NT_STATUS_OK
ReadX 13430 0 4096 4096 NT_STATUS_OK
ReadX 13430 4096 4096 4096 NT_STATUS_OK
ReadX 13430 8192 4096 4096 NT_STATUS_OK
ReadX 13430 12288 4096 4096 NT_STATUS_OK
ReadX 13430 16384 4096 4096 NT_STATUS_OK
ReadX 13430 20480 4096 4096 NT_STATUS_OK
ReadX 13430 24576 4096 4096 NT_STATUS_OK
ReadX 13430 28672 4096 4096 NT_STATUS_OK
ReadX 13430 32768 4096 4096 NT_STATUS_OK
ReadX 13430 36864 4096 4096 NT_STATUS_OK
ReadX 13430 40960 4096 4096 NT_STATUS_OK
ReadX 13430 45056 4096 4096 NT_STATUS_OK
ReadX 13430 49152 4096 4096 NT_STATUS_OK
ReadX 13430 53248 4096 4096 NT_STATUS_OK
ReadX 13430 57344 4096 4096 NT_STATUS_OK
ReadX 13430 61440 4096 4096 NT_STATUS_OK
ReadX 13430 65536 4096 4096 NT_STATUS_OK
ReadX 13430 69632 4096 4096 NT_STATUS_OK
ReadX 13430 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13430 1004 NT_STATUS_OK
WriteX 13430 0 4096 4096 NT_STATUS_OK
Close 13430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13431 NT_STATUS_OK
SET_FILE_INFORMATION 13431 1004 NT_STATUS_OK
Close 13431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13432 NT_STATUS_OK
ReadX 13432 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13433 NT_STATUS_OK
Close 13433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13425 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13436 NT_STATUS_OK
WriteX 13436 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13436 258 NT_STATUS_OK
WriteX 13436 0 65536 65536 NT_STATUS_OK
WriteX 13436 65536 8866 8866 NT_STATUS_OK
Close 13436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13437 NT_STATUS_OK
ReadX 13437 0 4096 4096 NT_STATUS_OK
WriteX 13437 0 4096 4096 NT_STATUS_OK
Flush 13437 NT_STATUS_OK
SET_FILE_INFORMATION 13437 1004 NT_STATUS_OK
WriteX 13437 0 4096 4096 NT_STATUS_OK
Flush 13437 NT_STATUS_OK
Close 13437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13438 NT_STATUS_OK
ReadX 13438 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13439 NT_STATUS_OK
ReadX 13439 0 4096 4096 NT_STATUS_OK
Close 13439 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13440 NT_STATUS_OK
ReadX 13440 0 4096 4096 NT_STATUS_OK
Close 13440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13441 NT_STATUS_OK
ReadX 13441 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13441 1004 NT_STATUS_OK
WriteX 13441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13442 NT_STATUS_OK
Close 13442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13441 NT_STATUS_OK
Close 13432 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13444 NT_STATUS_OK
Close 13444 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13447 NT_STATUS_OK
WriteX 13447 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13447 258 NT_STATUS_OK
WriteX 13447 0 65536 65536 NT_STATUS_OK
WriteX 13447 65536 9298 9298 NT_STATUS_OK
Close 13447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13448 NT_STATUS_OK
ReadX 13448 0 4096 4096 NT_STATUS_OK
WriteX 13448 0 4096 4096 NT_STATUS_OK
Flush 13448 NT_STATUS_OK
SET_FILE_INFORMATION 13448 1004 NT_STATUS_OK
WriteX 13448 0 4096 4096 NT_STATUS_OK
Flush 13448 NT_STATUS_OK
Close 13448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13449 NT_STATUS_OK
SET_FILE_INFORMATION 13449 1004 NT_STATUS_OK
Close 13449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13450 NT_STATUS_OK
ReadX 13450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13451 NT_STATUS_OK
Close 13451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13454 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13454 0 4096 4096 NT_STATUS_OK
Close 13454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13455 NT_STATUS_OK
ReadX 13455 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13455 4096 4096 4096 NT_STATUS_OK
ReadX 13455 8192 4096 4096 NT_STATUS_OK
ReadX 13455 12288 4096 4096 NT_STATUS_OK
ReadX 13455 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13450 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13456 NT_STATUS_OK
ReadX 13456 0 4096 4096 NT_STATUS_OK
Close 13456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13457 NT_STATUS_OK
ReadX 13457 0 4096 4096 NT_STATUS_OK
Close 13457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13458 NT_STATUS_OK
ReadX 13458 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13458 1004 NT_STATUS_OK
WriteX 13458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13459 NT_STATUS_OK
Close 13459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13455 NT_STATUS_OK
Close 13458 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13461 NT_STATUS_OK
Close 13461 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13464 NT_STATUS_OK
WriteX 13464 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13464 258 NT_STATUS_OK
WriteX 13464 0 65536 65536 NT_STATUS_OK
WriteX 13464 65536 11540 11540 NT_STATUS_OK
Close 13464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13465 NT_STATUS_OK
ReadX 13465 0 4096 4096 NT_STATUS_OK
WriteX 13465 0 4096 4096 NT_STATUS_OK
Flush 13465 NT_STATUS_OK
SET_FILE_INFORMATION 13465 1004 NT_STATUS_OK
WriteX 13465 0 4096 4096 NT_STATUS_OK
Flush 13465 NT_STATUS_OK
Close 13465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13466 NT_STATUS_OK
SET_FILE_INFORMATION 13466 1004 NT_STATUS_OK
Close 13466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13467 NT_STATUS_OK
ReadX 13467 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13468 NT_STATUS_OK
Close 13468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13470 NT_STATUS_OK
ReadX 13470 61440 4096 4096 NT_STATUS_OK
ReadX 13470 126976 4096 4096 NT_STATUS_OK
WriteX 13470 0 65536 65536 NT_STATUS_OK
WriteX 13470 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13471 NT_STATUS_OK
ReadX 13471 61440 4096 4096 NT_STATUS_OK
ReadX 13471 126976 4096 4096 NT_STATUS_OK
ReadX 13471 192512 4096 4096 NT_STATUS_OK
ReadX 13471 258048 4096 4096 NT_STATUS_OK
WriteX 13471 0 65536 65536 NT_STATUS_OK
WriteX 13471 65536 65536 65536 NT_STATUS_OK
WriteX 13471 131072 65536 65536 NT_STATUS_OK
WriteX 13471 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13472 NT_STATUS_OK
ReadX 13472 61440 4096 4096 NT_STATUS_OK
ReadX 13472 126976 4096 4096 NT_STATUS_OK
ReadX 13472 192512 4096 4096 NT_STATUS_OK
ReadX 13472 258048 4096 4096 NT_STATUS_OK
ReadX 13472 323584 4096 4096 NT_STATUS_OK
ReadX 13472 389120 4096 4096 NT_STATUS_OK
ReadX 13472 454656 4096 4096 NT_STATUS_OK
ReadX 13472 520192 4096 4096 NT_STATUS_OK
WriteX 13472 0 65536 65536 NT_STATUS_OK
WriteX 13472 65536 65536 65536 NT_STATUS_OK
WriteX 13472 131072 65536 65536 NT_STATUS_OK
WriteX 13472 196608 65536 65536 NT_STATUS_OK
WriteX 13472 262144 65536 65536 NT_STATUS_OK
WriteX 13472 327680 65536 65536 NT_STATUS_OK
WriteX 13472 393216 65536 65536 NT_STATUS_OK
WriteX 13472 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13473 NT_STATUS_OK
ReadX 13473 0 4096 4096 NT_STATUS_OK
ReadX 13473 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13474 NT_STATUS_OK
WriteX 13474 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13474 258 NT_STATUS_OK
WriteX 13474 0 53 53 NT_STATUS_OK
Close 13474 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13475 NT_STATUS_OK
Close 13475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13467 NT_STATUS_OK
Close 13413 NT_STATUS_OK
Close 13470 NT_STATUS_OK
Close 13471 NT_STATUS_OK
Close 13472 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13473 8192 4096 4096 NT_STATUS_OK
ReadX 13473 12288 4096 4096 NT_STATUS_OK
WriteX 13477 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13477 258 NT_STATUS_OK
ReadX 13473 16384 4096 4096 NT_STATUS_OK
ReadX 13473 20480 4096 4096 NT_STATUS_OK
WriteX 13477 0 15360 15360 NT_STATUS_OK
Close 13477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13478 NT_STATUS_OK
ReadX 13478 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13478 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13478 1004 NT_STATUS_OK
WriteX 13478 0 4096 4096 NT_STATUS_OK
Close 13478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13479 NT_STATUS_OK
Close 13479 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13481 NT_STATUS_OK
ReadX 13481 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13482 NT_STATUS_OK
Close 13482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13481 4096 4096 4096 NT_STATUS_OK
ReadX 13481 8192 4096 4096 NT_STATUS_OK
ReadX 13481 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13484 NT_STATUS_OK
ReadX 13484 0 4096 4096 NT_STATUS_OK
ReadX 13484 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13485 NT_STATUS_OK
ReadX 13485 0 4096 4096 NT_STATUS_OK
ReadX 13485 4096 4096 4096 NT_STATUS_OK
ReadX 13485 8192 4096 4096 NT_STATUS_OK
Close 13484 NT_STATUS_OK
Close 13485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13486 NT_STATUS_OK
WriteX 13486 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13486 258 NT_STATUS_OK
WriteX 13486 0 15360 15360 NT_STATUS_OK
Close 13486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13487 NT_STATUS_OK
ReadX 13487 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13487 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13487 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13488 NT_STATUS_OK
Close 13488 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13490 NT_STATUS_OK
ReadX 13490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13491 NT_STATUS_OK
SET_FILE_INFORMATION 13491 1004 NT_STATUS_OK
Close 13491 NT_STATUS_OK
WriteX 13487 0 4096 4096 NT_STATUS_OK
Close 13487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13492 NT_STATUS_OK
Close 13492 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13494 NT_STATUS_OK
ReadX 13494 0 4096 4096 NT_STATUS_OK
ReadX 13494 4096 4096 4096 NT_STATUS_OK
ReadX 13494 8192 4096 4096 NT_STATUS_OK
ReadX 13494 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13494 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13494 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13495 NT_STATUS_OK
ReadX 13495 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13496 NT_STATUS_OK
WriteX 13496 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13496 258 NT_STATUS_OK
WriteX 13496 0 53 53 NT_STATUS_OK
Close 13496 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13497 NT_STATUS_OK
Close 13497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13495 4096 4096 4096 NT_STATUS_OK
ReadX 13495 8192 4096 4096 NT_STATUS_OK
ReadX 13495 12288 4096 4096 NT_STATUS_OK
WriteX 13499 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13499 258 NT_STATUS_OK
WriteX 13499 0 12006 12006 NT_STATUS_OK
Close 13499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13500 NT_STATUS_OK
ReadX 13500 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13500 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13500 1004 NT_STATUS_OK
WriteX 13500 0 4096 4096 NT_STATUS_OK
Close 13500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13501 NT_STATUS_OK
Close 13501 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13503 NT_STATUS_OK
ReadX 13503 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13504 NT_STATUS_OK
Close 13504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13503 4096 4096 4096 NT_STATUS_OK
ReadX 13503 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13506 NT_STATUS_OK
WriteX 13506 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13506 258 NT_STATUS_OK
WriteX 13506 0 11991 11991 NT_STATUS_OK
Close 13506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13507 NT_STATUS_OK
ReadX 13507 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13507 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13507 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13508 NT_STATUS_OK
Close 13508 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13510 NT_STATUS_OK
ReadX 13510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13511 NT_STATUS_OK
SET_FILE_INFORMATION 13511 1004 NT_STATUS_OK
Close 13511 NT_STATUS_OK
WriteX 13507 0 4096 4096 NT_STATUS_OK
Close 13507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13512 NT_STATUS_OK
Close 13512 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13514 NT_STATUS_OK
ReadX 13514 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13515 NT_STATUS_OK
Close 13515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13514 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13514 1004 NT_STATUS_OK
ReadX 13514 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13514 1004 NT_STATUS_OK
WriteX 13514 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13514 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13514 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13514 1004 NT_STATUS_OK
Close 13490 NT_STATUS_OK
WriteX 13494 0 19054 19054 NT_STATUS_OK
WriteX 13514 0 12288 12288 NT_STATUS_OK
Close 13510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13517 NT_STATUS_OK
Close 13517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13494 NT_STATUS_OK
Close 13514 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13519 NT_STATUS_OK
Close 13519 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13521 NT_STATUS_OK
ReadX 13521 0 61440 61440 NT_STATUS_OK
ReadX 13521 61440 4096 4096 NT_STATUS_OK
ReadX 13521 65536 61440 61440 NT_STATUS_OK
ReadX 13521 126976 4096 4096 NT_STATUS_OK
ReadX 13521 131072 61440 61440 NT_STATUS_OK
ReadX 13521 192512 4096 4096 NT_STATUS_OK
ReadX 13521 196608 61440 61440 NT_STATUS_OK
ReadX 13521 258048 4096 4096 NT_STATUS_OK
ReadX 13521 262144 61440 61440 NT_STATUS_OK
ReadX 13521 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13522 NT_STATUS_OK
ReadX 13522 0 61440 61440 NT_STATUS_OK
ReadX 13522 61440 4096 4096 NT_STATUS_OK
ReadX 13522 65536 61440 61440 NT_STATUS_OK
ReadX 13522 126976 4096 4096 NT_STATUS_OK
ReadX 13522 131072 61440 61440 NT_STATUS_OK
ReadX 13522 192512 4096 4096 NT_STATUS_OK
ReadX 13522 196608 61440 61440 NT_STATUS_OK
ReadX 13522 258048 4096 4096 NT_STATUS_OK
ReadX 13522 262144 61440 61440 NT_STATUS_OK
ReadX 13522 323584 4096 4096 NT_STATUS_OK
ReadX 13522 327680 61440 61440 NT_STATUS_OK
ReadX 13522 389120 4096 4096 NT_STATUS_OK
ReadX 13522 393216 61440 61440 NT_STATUS_OK
ReadX 13522 454656 4096 4096 NT_STATUS_OK
ReadX 13522 458752 61440 61440 NT_STATUS_OK
ReadX 13522 520192 4096 4096 NT_STATUS_OK
ReadX 13522 524288 61440 61440 NT_STATUS_OK
ReadX 13522 585728 4096 4096 NT_STATUS_OK
ReadX 13522 589824 61440 61440 NT_STATUS_OK
ReadX 13522 651264 4096 4096 NT_STATUS_OK
ReadX 13522 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13523 NT_STATUS_OK
ReadX 13523 0 61440 61440 NT_STATUS_OK
ReadX 13523 61440 4096 4096 NT_STATUS_OK
ReadX 13523 65536 61440 61440 NT_STATUS_OK
ReadX 13523 126976 4096 4096 NT_STATUS_OK
ReadX 13523 131072 61440 61440 NT_STATUS_OK
ReadX 13523 192512 4096 4096 NT_STATUS_OK
ReadX 13523 196608 61440 61440 NT_STATUS_OK
ReadX 13523 258048 4096 4096 NT_STATUS_OK
ReadX 13523 262144 61440 61440 NT_STATUS_OK
ReadX 13523 323584 4096 4096 NT_STATUS_OK
ReadX 13523 327680 61440 61440 NT_STATUS_OK
ReadX 13523 389120 4096 4096 NT_STATUS_OK
ReadX 13523 393216 61440 61440 NT_STATUS_OK
ReadX 13523 454656 4096 4096 NT_STATUS_OK
ReadX 13523 458752 61440 61440 NT_STATUS_OK
ReadX 13523 520192 4096 4096 NT_STATUS_OK
ReadX 13523 524288 61440 61440 NT_STATUS_OK
ReadX 13523 585728 4096 4096 NT_STATUS_OK
ReadX 13523 589824 61440 61440 NT_STATUS_OK
ReadX 13523 651264 4096 4096 NT_STATUS_OK
ReadX 13523 655360 61440 61440 NT_STATUS_OK
ReadX 13523 716800 4096 4096 NT_STATUS_OK
ReadX 13523 720896 61440 61440 NT_STATUS_OK
ReadX 13523 782336 4096 4096 NT_STATUS_OK
ReadX 13523 786432 61440 61440 NT_STATUS_OK
ReadX 13523 847872 4096 4096 NT_STATUS_OK
ReadX 13523 851968 61440 61440 NT_STATUS_OK
ReadX 13523 913408 4096 4096 NT_STATUS_OK
ReadX 13523 917504 61440 61440 NT_STATUS_OK
ReadX 13523 978944 4096 4096 NT_STATUS_OK
ReadX 13523 983040 61440 61440 NT_STATUS_OK
ReadX 13523 1044480 4096 4096 NT_STATUS_OK
ReadX 13523 1048576 61440 61440 NT_STATUS_OK
ReadX 13523 1110016 4096 4096 NT_STATUS_OK
ReadX 13523 1114112 61440 61440 NT_STATUS_OK
ReadX 13523 1175552 4096 4096 NT_STATUS_OK
ReadX 13523 1179648 61440 61440 NT_STATUS_OK
ReadX 13523 1241088 4096 4096 NT_STATUS_OK
ReadX 13523 1245184 61440 61440 NT_STATUS_OK
ReadX 13523 1306624 4096 4096 NT_STATUS_OK
ReadX 13523 1310720 61440 61440 NT_STATUS_OK
ReadX 13523 1372160 4096 4096 NT_STATUS_OK
ReadX 13523 1376256 61440 61440 NT_STATUS_OK
ReadX 13523 1437696 4096 4096 NT_STATUS_OK
ReadX 13523 1441792 61440 61440 NT_STATUS_OK
ReadX 13523 1503232 4096 4096 NT_STATUS_OK
ReadX 13523 1507328 61440 61440 NT_STATUS_OK
ReadX 13523 1568768 4096 4096 NT_STATUS_OK
ReadX 13523 1572864 61440 61440 NT_STATUS_OK
ReadX 13523 1634304 4096 4096 NT_STATUS_OK
ReadX 13523 1638400 61440 61440 NT_STATUS_OK
ReadX 13523 1699840 4096 4096 NT_STATUS_OK
ReadX 13523 1703936 61440 61440 NT_STATUS_OK
ReadX 13523 1765376 4096 4096 NT_STATUS_OK
ReadX 13523 1769472 61440 61440 NT_STATUS_OK
ReadX 13523 1830912 4096 4096 NT_STATUS_OK
ReadX 13523 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13524 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13525 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13526 NT_STATUS_OK
ReadX 13526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13527 NT_STATUS_OK
ReadX 13527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13528 NT_STATUS_OK
ReadX 13528 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13529 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13530 NT_STATUS_OK
QUERY_FILE_INFORMATION 13530 1004 NT_STATUS_OK
WriteX 13530 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13530 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13531 NT_STATUS_OK
Close 13531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13532 NT_STATUS_OK
WriteX 13532 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13532 258 NT_STATUS_OK
WriteX 13532 0 491 491 NT_STATUS_OK
Close 13532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13533 NT_STATUS_OK
ReadX 13533 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13530 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13535 NT_STATUS_OK
Close 13535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13536 NT_STATUS_OK
WriteX 13536 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13536 258 NT_STATUS_OK
WriteX 13536 0 543 543 NT_STATUS_OK
Close 13536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13537 NT_STATUS_OK
ReadX 13537 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13521 NT_STATUS_OK
Close 13522 NT_STATUS_OK
Close 13523 NT_STATUS_OK
Close 13537 NT_STATUS_OK
Close 13525 NT_STATUS_OK
Close 13526 NT_STATUS_OK
Close 13527 NT_STATUS_OK
Close 13528 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13541 NT_STATUS_OK
ReadX 13541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13542 NT_STATUS_OK
ReadX 13542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13543 NT_STATUS_OK
ReadX 13543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13544 NT_STATUS_OK
ReadX 13544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13545 NT_STATUS_OK
ReadX 13545 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13549 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13550 NT_STATUS_OK
QUERY_FILE_INFORMATION 13550 1004 NT_STATUS_OK
WriteX 13550 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13550 258 NT_STATUS_OK
WriteX 13550 0 2048 2048 NT_STATUS_OK
Close 13550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13551 NT_STATUS_OK
ReadX 13551 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13551 0 4096 4096 NT_STATUS_OK
Flush 13551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13551 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13555 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13556 NT_STATUS_OK
WriteX 13556 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13556 258 NT_STATUS_OK
WriteX 13556 0 2048 2048 NT_STATUS_OK
Close 13556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13557 NT_STATUS_OK
ReadX 13557 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13561 NT_STATUS_OK
Close 13561 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13562 NT_STATUS_OK
WriteX 13562 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13562 258 NT_STATUS_OK
WriteX 13562 0 2048 2048 NT_STATUS_OK
Close 13562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13563 NT_STATUS_OK
ReadX 13563 0 2048 2048 NT_STATUS_OK
ReadX 13541 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13545 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13557 0 4096 4096 NT_STATUS_OK
WriteX 13541 0 8192 8192 NT_STATUS_OK
WriteX 13542 0 4096 4096 NT_STATUS_OK
WriteX 13543 0 4096 4096 NT_STATUS_OK
ReadX 13557 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13566 NT_STATUS_OK
ReadX 13566 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13551 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13567 NT_STATUS_OK
QUERY_FILE_INFORMATION 13567 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13566 NT_STATUS_OK
Close 13542 NT_STATUS_OK
Close 13543 NT_STATUS_OK
Close 13544 NT_STATUS_OK
Close 13557 NT_STATUS_OK
Close 13541 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13570 NT_STATUS_OK
ReadX 13570 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13571 NT_STATUS_OK
ReadX 13571 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13572 NT_STATUS_OK
ReadX 13572 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13573 NT_STATUS_OK
ReadX 13573 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13574 NT_STATUS_OK
ReadX 13574 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13575 NT_STATUS_OK
ReadX 13575 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13576 NT_STATUS_OK
ReadX 13576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13577 NT_STATUS_OK
ReadX 13577 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13578 NT_STATUS_OK
ReadX 13578 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13579 NT_STATUS_OK
ReadX 13579 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13580 NT_STATUS_OK
ReadX 13580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13581 NT_STATUS_OK
ReadX 13581 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13582 NT_STATUS_OK
ReadX 13582 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13586 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13586 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13587 NT_STATUS_OK
QUERY_FILE_INFORMATION 13587 1004 NT_STATUS_OK
WriteX 13587 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13587 258 NT_STATUS_OK
WriteX 13587 0 2048 2048 NT_STATUS_OK
Close 13587 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13588 NT_STATUS_OK
ReadX 13588 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13589 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13590 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13590 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13594 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13595 NT_STATUS_OK
QUERY_FILE_INFORMATION 13595 1004 NT_STATUS_OK
WriteX 13595 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13595 258 NT_STATUS_OK
WriteX 13595 0 2048 2048 NT_STATUS_OK
Close 13595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13596 NT_STATUS_OK
ReadX 13596 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13588 0 4096 4096 NT_STATUS_OK
Flush 13588 NT_STATUS_OK
WriteX 13596 0 4096 4096 NT_STATUS_OK
Flush 13596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13588 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13596 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13590 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13597 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13598 NT_STATUS_OK
WriteX 13598 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13598 258 NT_STATUS_OK
WriteX 13598 0 4096 4096 NT_STATUS_OK
Close 13598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13599 NT_STATUS_OK
ReadX 13599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13600 NT_STATUS_OK
Close 13600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13601 NT_STATUS_OK
WriteX 13601 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13601 258 NT_STATUS_OK
WriteX 13601 0 4096 4096 NT_STATUS_OK
Close 13601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13602 NT_STATUS_OK
ReadX 13602 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13602 0 4096 4096 NT_STATUS_OK
Close 13599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13582 NT_STATUS_OK
Close 13576 NT_STATUS_OK
Close 13590 NT_STATUS_OK
Close 13579 NT_STATUS_OK
Close 13580 NT_STATUS_OK
Close 13581 NT_STATUS_OK
Close 13577 NT_STATUS_OK
Close 13570 NT_STATUS_OK
Close 13571 NT_STATUS_OK
Close 13574 NT_STATUS_OK
Close 13575 NT_STATUS_OK
Close 13572 NT_STATUS_OK
Close 13573 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13605 NT_STATUS_OK
Close 13605 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13607 NT_STATUS_OK
ReadX 13607 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13608 NT_STATUS_OK
Close 13608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13609 NT_STATUS_OK
WriteX 13609 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13609 258 NT_STATUS_OK
WriteX 13609 0 2048 2048 NT_STATUS_OK
Close 13609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13610 NT_STATUS_OK
ReadX 13610 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13611 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13611 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13612 NT_STATUS_OK
ReadX 13612 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13613 NT_STATUS_OK
ReadX 13613 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13614 NT_STATUS_OK
ReadX 13614 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13615 NT_STATUS_OK
ReadX 13615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13616 NT_STATUS_OK
ReadX 13616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13617 NT_STATUS_OK
ReadX 13617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13618 NT_STATUS_OK
ReadX 13618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13619 NT_STATUS_OK
ReadX 13619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13620 NT_STATUS_OK
ReadX 13620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13621 NT_STATUS_OK
ReadX 13621 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13622 NT_STATUS_OK
ReadX 13622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13623 NT_STATUS_OK
ReadX 13623 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13624 NT_STATUS_OK
QUERY_FILE_INFORMATION 13624 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13607 NT_STATUS_OK
Close 13610 NT_STATUS_OK
Close 13622 NT_STATUS_OK
Close 13617 NT_STATUS_OK
Close 13618 NT_STATUS_OK
Close 13619 NT_STATUS_OK
Close 13620 NT_STATUS_OK
Close 13621 NT_STATUS_OK
Close 13623 NT_STATUS_OK
Close 13611 NT_STATUS_OK
Close 13612 NT_STATUS_OK
Close 13615 NT_STATUS_OK
Close 13616 NT_STATUS_OK
Close 13613 NT_STATUS_OK
Close 13614 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13626 NT_STATUS_OK
QUERY_FILE_INFORMATION 13626 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13628 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13629 NT_STATUS_OK
ReadX 13629 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13630 NT_STATUS_OK
ReadX 13630 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13631 NT_STATUS_OK
ReadX 13631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13632 NT_STATUS_OK
ReadX 13632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13633 NT_STATUS_OK
ReadX 13633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13634 NT_STATUS_OK
ReadX 13634 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13635 NT_STATUS_OK
ReadX 13635 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13636 NT_STATUS_OK
ReadX 13636 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13637 NT_STATUS_OK
ReadX 13637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13638 NT_STATUS_OK
ReadX 13638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13639 NT_STATUS_OK
ReadX 13639 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13640 NT_STATUS_OK
ReadX 13640 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13641 NT_STATUS_OK
ReadX 13641 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13646 NT_STATUS_OK
QUERY_FILE_INFORMATION 13646 1004 NT_STATUS_OK
WriteX 13646 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13646 258 NT_STATUS_OK
WriteX 13646 0 2048 2048 NT_STATUS_OK
Close 13646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13647 NT_STATUS_OK
ReadX 13647 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13648 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13648 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13649 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13650 NT_STATUS_OK
ReadX 13650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13651 NT_STATUS_OK
ReadX 13651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13652 NT_STATUS_OK
ReadX 13652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13653 NT_STATUS_OK
ReadX 13653 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13657 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13658 NT_STATUS_OK
QUERY_FILE_INFORMATION 13658 1004 NT_STATUS_OK
WriteX 13658 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13658 258 NT_STATUS_OK
WriteX 13658 0 2048 2048 NT_STATUS_OK
Close 13658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13659 NT_STATUS_OK
ReadX 13659 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13660 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13661 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13661 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13665 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13666 NT_STATUS_OK
QUERY_FILE_INFORMATION 13666 1004 NT_STATUS_OK
WriteX 13666 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13666 258 NT_STATUS_OK
WriteX 13666 0 2048 2048 NT_STATUS_OK
Close 13666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13667 NT_STATUS_OK
ReadX 13667 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13647 0 4096 4096 NT_STATUS_OK
Flush 13647 NT_STATUS_OK
WriteX 13659 0 4096 4096 NT_STATUS_OK
Flush 13659 NT_STATUS_OK
WriteX 13667 0 4096 4096 NT_STATUS_OK
Flush 13667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13647 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13659 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13667 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13649 4096 16384 16384 NT_STATUS_OK
ReadX 13629 4096 16384 16384 NT_STATUS_OK
ReadX 13661 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13668 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13669 NT_STATUS_OK
ReadX 13669 0 2048 2048 NT_STATUS_OK
WriteX 13669 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13670 NT_STATUS_OK
QUERY_FILE_INFORMATION 13670 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13669 NT_STATUS_OK
Close 13653 NT_STATUS_OK
Close 13641 NT_STATUS_OK
Close 13633 NT_STATUS_OK
Close 13649 NT_STATUS_OK
Close 13650 NT_STATUS_OK
Close 13651 NT_STATUS_OK
Close 13652 NT_STATUS_OK
Close 13640 NT_STATUS_OK
Close 13661 NT_STATUS_OK
Close 13635 NT_STATUS_OK
Close 13638 NT_STATUS_OK
Close 13639 NT_STATUS_OK
Close 13636 NT_STATUS_OK
Close 13637 NT_STATUS_OK
Close 13629 NT_STATUS_OK
Close 13630 NT_STATUS_OK
Close 13631 NT_STATUS_OK
Close 13632 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13672 NT_STATUS_OK
QUERY_FILE_INFORMATION 13672 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13674 NT_STATUS_OK
QUERY_FILE_INFORMATION 13674 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13676 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13677 NT_STATUS_OK
ReadX 13677 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13678 NT_STATUS_OK
ReadX 13678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13679 NT_STATUS_OK
ReadX 13679 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13680 NT_STATUS_OK
ReadX 13680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13681 NT_STATUS_OK
ReadX 13681 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13677 4096 16384 16384 NT_STATUS_OK
WriteX 13677 0 4096 4096 NT_STATUS_OK
WriteX 13678 0 4096 4096 NT_STATUS_OK
WriteX 13679 0 4096 4096 NT_STATUS_OK
WriteX 13680 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13682 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13683 NT_STATUS_OK
ReadX 13683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13684 NT_STATUS_OK
ReadX 13684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13685 NT_STATUS_OK
ReadX 13685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13686 NT_STATUS_OK
ReadX 13686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13687 NT_STATUS_OK
ReadX 13687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13688 NT_STATUS_OK
ReadX 13688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13689 NT_STATUS_OK
ReadX 13689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13690 NT_STATUS_OK
ReadX 13690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13691 NT_STATUS_OK
ReadX 13691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13692 NT_STATUS_OK
ReadX 13692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13693 NT_STATUS_OK
ReadX 13693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13694 NT_STATUS_OK
ReadX 13694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13695 NT_STATUS_OK
ReadX 13695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13696 NT_STATUS_OK
ReadX 13696 0 8192 8192 NT_STATUS_OK
ReadX 13683 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13697 0 4096 4096 NT_STATUS_OK
ReadX 13697 4096 4096 4096 NT_STATUS_OK
ReadX 13697 8192 4096 4096 NT_STATUS_OK
WriteX 13683 0 4096 4096 NT_STATUS_OK
WriteX 13684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13698 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13698 0 4096 4096 NT_STATUS_OK
ReadX 13698 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13677 0 4096 4096 NT_STATUS_OK
WriteX 13678 0 4096 4096 NT_STATUS_OK
WriteX 13679 0 4096 4096 NT_STATUS_OK
WriteX 13680 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13702 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13703 NT_STATUS_OK
QUERY_FILE_INFORMATION 13703 1004 NT_STATUS_OK
WriteX 13703 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13703 258 NT_STATUS_OK
WriteX 13703 0 2048 2048 NT_STATUS_OK
Close 13703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13704 NT_STATUS_OK
ReadX 13704 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13704 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13704 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13706 NT_STATUS_OK
ReadX 13706 0 4096 4096 NT_STATUS_OK
ReadX 13706 4096 4096 4096 NT_STATUS_OK
WriteX 13706 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13704 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13707 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13707 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13708 NT_STATUS_OK
ReadX 13708 0 4096 4096 NT_STATUS_OK
ReadX 13708 4096 4096 4096 NT_STATUS_OK
WriteX 13708 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13709 NT_STATUS_OK
QUERY_FILE_INFORMATION 13709 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13696 NT_STATUS_OK
Close 13681 NT_STATUS_OK
Close 13677 NT_STATUS_OK
Close 13678 NT_STATUS_OK
Close 13679 NT_STATUS_OK
Close 13680 NT_STATUS_OK
Close 13689 NT_STATUS_OK
Close 13694 NT_STATUS_OK
Close 13690 NT_STATUS_OK
Close 13691 NT_STATUS_OK
Close 13692 NT_STATUS_OK
Close 13693 NT_STATUS_OK
Close 13695 NT_STATUS_OK
Close 13683 NT_STATUS_OK
Close 13684 NT_STATUS_OK
Close 13687 NT_STATUS_OK
Close 13688 NT_STATUS_OK
Close 13685 NT_STATUS_OK
Close 13686 NT_STATUS_OK
Close 13708 NT_STATUS_OK
Close 13697 NT_STATUS_OK
Close 13698 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13711 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13711 0 4096 4096 NT_STATUS_OK
ReadX 13711 4096 4096 4096 NT_STATUS_OK
ReadX 13711 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13712 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13713 NT_STATUS_OK
ReadX 13713 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13714 NT_STATUS_OK
ReadX 13714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13715 NT_STATUS_OK
ReadX 13715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13716 NT_STATUS_OK
ReadX 13716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13717 NT_STATUS_OK
ReadX 13717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13718 NT_STATUS_OK
ReadX 13718 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13719 NT_STATUS_OK
ReadX 13719 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13720 NT_STATUS_OK
ReadX 13720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13721 NT_STATUS_OK
ReadX 13721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13722 NT_STATUS_OK
ReadX 13722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13723 NT_STATUS_OK
ReadX 13723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13724 NT_STATUS_OK
ReadX 13724 0 4096 4096 NT_STATUS_OK
ReadX 13712 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13728 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13728 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13729 NT_STATUS_OK
QUERY_FILE_INFORMATION 13729 1004 NT_STATUS_OK
WriteX 13729 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13729 258 NT_STATUS_OK
WriteX 13729 0 2048 2048 NT_STATUS_OK
Close 13729 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13730 NT_STATUS_OK
ReadX 13730 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13730 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13734 NT_STATUS_OK
Close 13734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13735 NT_STATUS_OK
QUERY_FILE_INFORMATION 13735 1004 NT_STATUS_OK
WriteX 13735 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13735 258 NT_STATUS_OK
WriteX 13735 0 2048 2048 NT_STATUS_OK
Close 13735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13736 NT_STATUS_OK
ReadX 13736 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13736 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13719 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13737 NT_STATUS_OK
QUERY_FILE_INFORMATION 13737 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13723 NT_STATUS_OK
Close 13718 NT_STATUS_OK
Close 13724 NT_STATUS_OK
Close 13712 NT_STATUS_OK
Close 13713 NT_STATUS_OK
Close 13716 NT_STATUS_OK
Close 13717 NT_STATUS_OK
Close 13714 NT_STATUS_OK
Close 13715 NT_STATUS_OK
Close 13719 NT_STATUS_OK
Close 13720 NT_STATUS_OK
Close 13721 NT_STATUS_OK
Close 13722 NT_STATUS_OK
Close 13711 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13739 NT_STATUS_OK
QUERY_FILE_INFORMATION 13739 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13741 NT_STATUS_OK
ReadX 13741 61440 4096 4096 NT_STATUS_OK
ReadX 13741 126976 4096 4096 NT_STATUS_OK
WriteX 13741 0 65536 65536 NT_STATUS_OK
WriteX 13741 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13742 NT_STATUS_OK
ReadX 13742 61440 4096 4096 NT_STATUS_OK
ReadX 13742 126976 4096 4096 NT_STATUS_OK
ReadX 13742 192512 4096 4096 NT_STATUS_OK
ReadX 13742 258048 4096 4096 NT_STATUS_OK
WriteX 13742 0 65536 65536 NT_STATUS_OK
WriteX 13742 65536 65536 65536 NT_STATUS_OK
WriteX 13742 131072 65536 65536 NT_STATUS_OK
WriteX 13742 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13743 NT_STATUS_OK
ReadX 13743 61440 4096 4096 NT_STATUS_OK
ReadX 13743 126976 4096 4096 NT_STATUS_OK
ReadX 13743 192512 4096 4096 NT_STATUS_OK
ReadX 13743 258048 4096 4096 NT_STATUS_OK
ReadX 13743 323584 4096 4096 NT_STATUS_OK
ReadX 13743 389120 4096 4096 NT_STATUS_OK
ReadX 13743 454656 4096 4096 NT_STATUS_OK
ReadX 13743 520192 4096 4096 NT_STATUS_OK
WriteX 13743 0 65536 65536 NT_STATUS_OK
WriteX 13743 65536 65536 65536 NT_STATUS_OK
WriteX 13743 131072 65536 65536 NT_STATUS_OK
WriteX 13743 196608 65536 65536 NT_STATUS_OK
WriteX 13743 262144 65536 65536 NT_STATUS_OK
WriteX 13743 327680 65536 65536 NT_STATUS_OK
WriteX 13743 393216 65536 65536 NT_STATUS_OK
WriteX 13743 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13744 NT_STATUS_OK
ReadX 13744 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13744 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13744 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13744 8192 4096 4096 NT_STATUS_OK
ReadX 13744 12288 4096 4096 NT_STATUS_OK
ReadX 13744 16384 4096 4096 NT_STATUS_OK
ReadX 13744 20480 4096 4096 NT_STATUS_OK
ReadX 13744 24576 4096 4096 NT_STATUS_OK
ReadX 13744 28672 4096 4096 NT_STATUS_OK
ReadX 13744 32768 4096 4096 NT_STATUS_OK
ReadX 13744 36864 4096 4096 NT_STATUS_OK
ReadX 13744 40960 4096 4096 NT_STATUS_OK
ReadX 13744 45056 4096 4096 NT_STATUS_OK
ReadX 13744 49152 4096 4096 NT_STATUS_OK
ReadX 13744 53248 4096 4096 NT_STATUS_OK
ReadX 13744 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13744 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13745 NT_STATUS_OK
Close 13745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13741 NT_STATUS_OK
Close 13742 NT_STATUS_OK
Close 13743 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13747 NT_STATUS_OK
WriteX 13747 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13747 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13747 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13747 1004 NT_STATUS_OK
WriteX 13747 0 57088 57088 NT_STATUS_OK
WriteX 13747 0 4096 4096 NT_STATUS_OK
Flush 13747 NT_STATUS_OK
Close 13744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13748 NT_STATUS_OK
SET_FILE_INFORMATION 13748 1004 NT_STATUS_OK
Close 13748 NT_STATUS_OK
SET_FILE_INFORMATION 13747 1004 NT_STATUS_OK
WriteX 13747 0 4096 4096 NT_STATUS_OK
Close 13747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13749 NT_STATUS_OK
Close 13749 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13751 NT_STATUS_OK
ReadX 13751 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13751 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13752 NT_STATUS_OK
WriteX 13752 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13752 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13752 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13752 1004 NT_STATUS_OK
WriteX 13752 0 51456 51456 NT_STATUS_OK
WriteX 13752 0 4096 4096 NT_STATUS_OK
Flush 13752 NT_STATUS_OK
SET_FILE_INFORMATION 13752 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13752 1004 NT_STATUS_OK
WriteX 13752 0 4096 4096 NT_STATUS_OK
Close 13752 NT_STATUS_OK
Close 13751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13754 NT_STATUS_OK
Close 13754 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13756 NT_STATUS_OK
ReadX 13756 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13756 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13758 NT_STATUS_OK
Close 13758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13761 NT_STATUS_OK
WriteX 13761 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13761 258 NT_STATUS_OK
WriteX 13761 0 53077 53077 NT_STATUS_OK
Close 13761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13762 NT_STATUS_OK
WriteX 13762 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13762 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13762 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13762 1004 NT_STATUS_OK
WriteX 13762 0 65536 65536 NT_STATUS_OK
WriteX 13762 65536 1856 1856 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
SET_FILE_INFORMATION 13762 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13762 1004 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Close 13762 NT_STATUS_OK
Close 13756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13764 NT_STATUS_OK
Close 13764 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13766 NT_STATUS_OK
ReadX 13766 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13768 NT_STATUS_OK
Close 13768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13771 NT_STATUS_OK
WriteX 13771 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13771 258 NT_STATUS_OK
WriteX 13771 0 7983 7983 NT_STATUS_OK
Close 13771 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13773 NT_STATUS_OK
Close 13773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13776 NT_STATUS_OK
WriteX 13776 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13776 258 NT_STATUS_OK
WriteX 13776 0 65536 65536 NT_STATUS_OK
WriteX 13776 65536 65536 65536 NT_STATUS_OK
WriteX 13776 131072 65536 65536 NT_STATUS_OK
WriteX 13776 196608 65536 65536 NT_STATUS_OK
WriteX 13776 262144 65536 65536 NT_STATUS_OK
WriteX 13776 327680 65536 65536 NT_STATUS_OK
WriteX 13776 393216 65536 65536 NT_STATUS_OK
WriteX 13776 458752 46731 46731 NT_STATUS_OK
Close 13776 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13777 NT_STATUS_OK
WriteX 13777 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13777 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13766 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13777 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13777 1004 NT_STATUS_OK
WriteX 13777 0 65536 65536 NT_STATUS_OK
WriteX 13777 65536 22848 22848 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
SET_FILE_INFORMATION 13777 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13777 1004 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Close 13777 NT_STATUS_OK
Close 13766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13779 NT_STATUS_OK
Close 13779 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13781 NT_STATUS_OK
ReadX 13781 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13781 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13782 NT_STATUS_OK
ReadX 13782 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13782 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13782 1004 NT_STATUS_OK
ReadX 13782 8192 4096 4096 NT_STATUS_OK
ReadX 13782 12288 4096 4096 NT_STATUS_OK
ReadX 13782 16384 4096 4096 NT_STATUS_OK
ReadX 13782 20480 4096 4096 NT_STATUS_OK
ReadX 13782 24576 4096 4096 NT_STATUS_OK
ReadX 13782 28672 4096 4096 NT_STATUS_OK
ReadX 13782 32768 4096 4096 NT_STATUS_OK
ReadX 13782 36864 4096 4096 NT_STATUS_OK
ReadX 13782 40960 4096 4096 NT_STATUS_OK
ReadX 13782 45056 4096 4096 NT_STATUS_OK
ReadX 13782 49152 4096 4096 NT_STATUS_OK
ReadX 13782 53248 4096 4096 NT_STATUS_OK
ReadX 13782 57344 4096 4096 NT_STATUS_OK
ReadX 13782 61440 4096 4096 NT_STATUS_OK
ReadX 13782 65536 4096 4096 NT_STATUS_OK
ReadX 13782 69632 4096 4096 NT_STATUS_OK
ReadX 13782 73728 4096 4096 NT_STATUS_OK
ReadX 13782 77824 4096 4096 NT_STATUS_OK
ReadX 13782 81920 4096 4096 NT_STATUS_OK
ReadX 13782 86016 4096 4096 NT_STATUS_OK
ReadX 13782 90112 4096 4096 NT_STATUS_OK
ReadX 13782 94208 4096 4096 NT_STATUS_OK
ReadX 13782 98304 4096 4096 NT_STATUS_OK
ReadX 13782 102400 4096 4096 NT_STATUS_OK
ReadX 13782 106496 4096 4096 NT_STATUS_OK
ReadX 13782 110592 4096 4096 NT_STATUS_OK
ReadX 13782 114688 4096 4096 NT_STATUS_OK
ReadX 13782 118784 4096 4096 NT_STATUS_OK
ReadX 13782 122880 4096 4096 NT_STATUS_OK
ReadX 13782 126976 4096 4096 NT_STATUS_OK
ReadX 13782 131072 4096 4096 NT_STATUS_OK
ReadX 13782 135168 4096 4096 NT_STATUS_OK
ReadX 13782 139264 4096 4096 NT_STATUS_OK
ReadX 13782 143360 4096 4096 NT_STATUS_OK
ReadX 13782 147456 4096 4096 NT_STATUS_OK
ReadX 13782 151552 4096 4096 NT_STATUS_OK
ReadX 13782 155648 4096 4096 NT_STATUS_OK
ReadX 13782 159744 4096 4096 NT_STATUS_OK
ReadX 13782 163840 4096 4096 NT_STATUS_OK
ReadX 13782 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13782 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13783 NT_STATUS_OK
Close 13783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13781 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13785 NT_STATUS_OK
WriteX 13785 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13785 258 NT_STATUS_OK
Close 13782 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13786 NT_STATUS_OK
SET_FILE_INFORMATION 13786 1004 NT_STATUS_OK
Close 13786 NT_STATUS_OK
WriteX 13785 0 42388 42388 NT_STATUS_OK
Close 13785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13787 NT_STATUS_OK
Close 13787 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13789 NT_STATUS_OK
ReadX 13789 0 4096 4096 NT_STATUS_OK
ReadX 13789 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13790 NT_STATUS_OK
WriteX 13790 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13790 258 NT_STATUS_OK
SET_FILE_INFORMATION 13790 1004 NT_STATUS_OK
WriteX 13790 0 42652 42652 NT_STATUS_OK
Close 13790 NT_STATUS_OK
Close 13789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13792 NT_STATUS_OK
Close 13792 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13794 NT_STATUS_OK
ReadX 13794 0 4096 4096 NT_STATUS_OK
ReadX 13794 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13796 NT_STATUS_OK
Close 13796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13799 NT_STATUS_OK
WriteX 13799 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13799 258 NT_STATUS_OK
WriteX 13799 0 65536 65536 NT_STATUS_OK
WriteX 13799 65536 49 49 NT_STATUS_OK
Close 13799 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13800 NT_STATUS_OK
ReadX 13800 0 61440 61440 NT_STATUS_OK
ReadX 13800 61440 4096 4096 NT_STATUS_OK
ReadX 13800 65536 61440 61440 NT_STATUS_OK
ReadX 13800 126976 4096 4096 NT_STATUS_OK
ReadX 13800 131072 61440 61440 NT_STATUS_OK
ReadX 13800 192512 4096 4096 NT_STATUS_OK
ReadX 13800 196608 61440 61440 NT_STATUS_OK
ReadX 13800 258048 4096 4096 NT_STATUS_OK
ReadX 13800 262144 61440 61440 NT_STATUS_OK
ReadX 13800 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13801 NT_STATUS_OK
ReadX 13801 0 61440 61440 NT_STATUS_OK
ReadX 13801 61440 4096 4096 NT_STATUS_OK
ReadX 13801 65536 61440 61440 NT_STATUS_OK
ReadX 13801 126976 4096 4096 NT_STATUS_OK
ReadX 13801 131072 61440 61440 NT_STATUS_OK
ReadX 13801 192512 4096 4096 NT_STATUS_OK
ReadX 13801 196608 61440 61440 NT_STATUS_OK
ReadX 13801 258048 4096 4096 NT_STATUS_OK
ReadX 13801 262144 61440 61440 NT_STATUS_OK
ReadX 13801 323584 4096 4096 NT_STATUS_OK
ReadX 13801 327680 61440 61440 NT_STATUS_OK
ReadX 13801 389120 4096 4096 NT_STATUS_OK
ReadX 13801 393216 61440 61440 NT_STATUS_OK
ReadX 13801 454656 4096 4096 NT_STATUS_OK
ReadX 13801 458752 61440 61440 NT_STATUS_OK
ReadX 13801 520192 4096 4096 NT_STATUS_OK
ReadX 13801 524288 61440 61440 NT_STATUS_OK
ReadX 13801 585728 4096 4096 NT_STATUS_OK
ReadX 13801 589824 61440 61440 NT_STATUS_OK
ReadX 13801 651264 4096 4096 NT_STATUS_OK
ReadX 13801 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13802 NT_STATUS_OK
ReadX 13802 0 61440 61440 NT_STATUS_OK
ReadX 13802 61440 4096 4096 NT_STATUS_OK
ReadX 13802 65536 61440 61440 NT_STATUS_OK
ReadX 13802 126976 4096 4096 NT_STATUS_OK
ReadX 13802 131072 61440 61440 NT_STATUS_OK
ReadX 13802 192512 4096 4096 NT_STATUS_OK
ReadX 13802 196608 61440 61440 NT_STATUS_OK
ReadX 13802 258048 4096 4096 NT_STATUS_OK
ReadX 13802 262144 61440 61440 NT_STATUS_OK
ReadX 13802 323584 4096 4096 NT_STATUS_OK
ReadX 13802 327680 61440 61440 NT_STATUS_OK
ReadX 13802 389120 4096 4096 NT_STATUS_OK
ReadX 13802 393216 61440 61440 NT_STATUS_OK
ReadX 13802 454656 4096 4096 NT_STATUS_OK
ReadX 13802 458752 61440 61440 NT_STATUS_OK
ReadX 13802 520192 4096 4096 NT_STATUS_OK
ReadX 13802 524288 61440 61440 NT_STATUS_OK
ReadX 13802 585728 4096 4096 NT_STATUS_OK
ReadX 13802 589824 61440 61440 NT_STATUS_OK
ReadX 13802 651264 4096 4096 NT_STATUS_OK
ReadX 13802 655360 61440 61440 NT_STATUS_OK
ReadX 13802 716800 4096 4096 NT_STATUS_OK
ReadX 13802 720896 61440 61440 NT_STATUS_OK
ReadX 13802 782336 4096 4096 NT_STATUS_OK
ReadX 13802 786432 61440 61440 NT_STATUS_OK
ReadX 13802 847872 4096 4096 NT_STATUS_OK
ReadX 13802 851968 61440 61440 NT_STATUS_OK
ReadX 13802 913408 4096 4096 NT_STATUS_OK
ReadX 13802 917504 61440 61440 NT_STATUS_OK
ReadX 13802 978944 4096 4096 NT_STATUS_OK
ReadX 13802 983040 61440 61440 NT_STATUS_OK
ReadX 13802 1044480 4096 4096 NT_STATUS_OK
ReadX 13802 1048576 61440 61440 NT_STATUS_OK
ReadX 13802 1110016 4096 4096 NT_STATUS_OK
ReadX 13802 1114112 61440 61440 NT_STATUS_OK
ReadX 13802 1175552 4096 4096 NT_STATUS_OK
ReadX 13802 1179648 61440 61440 NT_STATUS_OK
ReadX 13802 1241088 4096 4096 NT_STATUS_OK
ReadX 13802 1245184 61440 61440 NT_STATUS_OK
ReadX 13802 1306624 4096 4096 NT_STATUS_OK
ReadX 13802 1310720 61440 61440 NT_STATUS_OK
ReadX 13802 1372160 4096 4096 NT_STATUS_OK
ReadX 13802 1376256 61440 61440 NT_STATUS_OK
ReadX 13802 1437696 4096 4096 NT_STATUS_OK
ReadX 13802 1441792 61440 61440 NT_STATUS_OK
ReadX 13802 1503232 4096 4096 NT_STATUS_OK
ReadX 13802 1507328 61440 61440 NT_STATUS_OK
ReadX 13802 1568768 4096 4096 NT_STATUS_OK
ReadX 13802 1572864 61440 61440 NT_STATUS_OK
ReadX 13802 1634304 4096 4096 NT_STATUS_OK
ReadX 13802 1638400 61440 61440 NT_STATUS_OK
ReadX 13802 1699840 4096 4096 NT_STATUS_OK
ReadX 13802 1703936 61440 61440 NT_STATUS_OK
ReadX 13802 1765376 4096 4096 NT_STATUS_OK
ReadX 13802 1769472 61440 61440 NT_STATUS_OK
ReadX 13802 1830912 4096 4096 NT_STATUS_OK
ReadX 13802 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13803 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13804 NT_STATUS_OK
QUERY_FILE_INFORMATION 13804 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13804 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13804 1005 NT_STATUS_OK
ReadX 13804 2156 24 24 NT_STATUS_OK
ReadX 13804 2139 276 276 NT_STATUS_OK
ReadX 13804 2136 14 14 NT_STATUS_OK
ReadX 13804 2136 7 7 NT_STATUS_OK
ReadX 13804 2138 12 12 NT_STATUS_OK
ReadX 13804 2137 8 8 NT_STATUS_OK
ReadX 13804 2135 15 15 NT_STATUS_OK
ReadX 13804 0 16 16 NT_STATUS_OK
ReadX 13804 16 2048 2048 NT_STATUS_OK
ReadX 13804 2064 2048 2048 NT_STATUS_OK
ReadX 13804 257 2048 2048 NT_STATUS_OK
ReadX 13804 385 2048 2048 NT_STATUS_OK
ReadX 13804 513 2048 2048 NT_STATUS_OK
ReadX 13804 641 2048 2048 NT_STATUS_OK
ReadX 13804 769 2048 2048 NT_STATUS_OK
ReadX 13804 897 2048 2048 NT_STATUS_OK
ReadX 13804 1025 2048 2048 NT_STATUS_OK
ReadX 13804 1153 2048 2048 NT_STATUS_OK
ReadX 13804 1281 2048 2048 NT_STATUS_OK
ReadX 13804 1409 2048 2048 NT_STATUS_OK
ReadX 13804 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13806 NT_STATUS_OK
Close 13806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13800 NT_STATUS_OK
Close 13801 NT_STATUS_OK
Close 13802 NT_STATUS_OK
Close 13794 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13809 NT_STATUS_OK
WriteX 13809 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13809 258 NT_STATUS_OK
WriteX 13809 0 10575 10575 NT_STATUS_OK
Flush 13809 NT_STATUS_OK
Close 13809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13810 NT_STATUS_OK
Close 13810 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13812 NT_STATUS_OK
ReadX 13812 0 4096 4096 NT_STATUS_OK
Close 13804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13814 NT_STATUS_OK
LockX 13814 2147483538 1 NT_STATUS_OK
UnlockX 13814 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13814 1005 NT_STATUS_OK
ReadX 13814 0 512 512 NT_STATUS_OK
ReadX 13814 512 512 512 NT_STATUS_OK
ReadX 13814 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13814 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13814 1004 NT_STATUS_OK
Close 13814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13815 NT_STATUS_OK
QUERY_FILE_INFORMATION 13815 1005 NT_STATUS_OK
ReadX 13815 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13816 NT_STATUS_OK
LockX 13816 2147483538 1 NT_STATUS_OK
UnlockX 13816 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13816 1005 NT_STATUS_OK
ReadX 13816 0 512 512 NT_STATUS_OK
ReadX 13816 512 512 512 NT_STATUS_OK
ReadX 13816 1024 512 512 NT_STATUS_OK
ReadX 13816 288 20 20 NT_STATUS_OK
ReadX 13816 308 2084 2084 NT_STATUS_OK
ReadX 13816 388 2084 2084 NT_STATUS_OK
ReadX 13816 388 2084 2084 NT_STATUS_OK
ReadX 13803 2157 1386 1386 NT_STATUS_OK
ReadX 13816 2472 399 399 NT_STATUS_OK
ReadX 13816 3072 1536 1536 NT_STATUS_OK
ReadX 13816 544 149 149 NT_STATUS_OK
ReadX 13816 693 485 485 NT_STATUS_OK
Close 13816 NT_STATUS_OK
ReadX 13803 2157 4096 4096 NT_STATUS_OK
ReadX 13803 6253 4096 4096 NT_STATUS_OK
ReadX 13803 10349 4096 4096 NT_STATUS_OK
ReadX 13803 14445 4096 4096 NT_STATUS_OK
ReadX 13803 18541 4096 4096 NT_STATUS_OK
ReadX 13803 22637 256 256 NT_STATUS_OK
ReadX 13803 22893 4096 4096 NT_STATUS_OK
ReadX 13803 26989 4096 4096 NT_STATUS_OK
ReadX 13803 31085 4096 4096 NT_STATUS_OK
ReadX 13803 35181 4096 4096 NT_STATUS_OK
ReadX 13803 39277 4096 4096 NT_STATUS_OK
ReadX 13803 43373 4096 4096 NT_STATUS_OK
ReadX 13803 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13803 2157 1024 1024 NT_STATUS_OK
ReadX 13803 1667 4688 4688 NT_STATUS_OK
ReadX 13803 6355 3516 3516 NT_STATUS_OK
ReadX 13803 9871 16384 16384 NT_STATUS_OK
ReadX 13803 26255 3771 3771 NT_STATUS_OK
ReadX 13803 30026 2048 2048 NT_STATUS_OK
ReadX 13803 32074 1024 1024 NT_STATUS_OK
ReadX 13803 33098 6652 6652 NT_STATUS_OK
ReadX 13803 39750 16384 16384 NT_STATUS_OK
ReadX 13803 56134 10496 10496 NT_STATUS_OK
ReadX 13803 66630 1784 1784 NT_STATUS_OK
ReadX 13803 68414 90 90 NT_STATUS_OK
ReadX 13803 68504 273 273 NT_STATUS_OK
ReadX 13803 68777 1600 1600 NT_STATUS_OK
ReadX 13803 70377 640 640 NT_STATUS_OK
ReadX 13803 71017 1280 1280 NT_STATUS_OK
ReadX 13803 72297 8464 8464 NT_STATUS_OK
ReadX 13803 80761 158 158 NT_STATUS_OK
ReadX 13803 80919 912 912 NT_STATUS_OK
ReadX 13803 81831 1980 1980 NT_STATUS_OK
ReadX 13803 83811 2256 2256 NT_STATUS_OK
ReadX 13803 86067 400 400 NT_STATUS_OK
ReadX 13803 86467 252 252 NT_STATUS_OK
ReadX 13803 86719 42 42 NT_STATUS_OK
ReadX 13803 86761 725 725 NT_STATUS_OK
ReadX 13803 2009 512 512 NT_STATUS_OK
ReadX 13803 3895 9 9 NT_STATUS_OK
ReadX 13803 3781 46 46 NT_STATUS_OK
ReadX 13803 4059 92 92 NT_STATUS_OK
ReadX 13803 3781 92 92 NT_STATUS_OK
ReadX 13803 3986 184 184 NT_STATUS_OK
ReadX 13803 3987 16384 16384 NT_STATUS_OK
ReadX 13803 3902 16384 16384 NT_STATUS_OK
ReadX 13803 3781 10240 10240 NT_STATUS_OK
ReadX 13803 3821 16384 16384 NT_STATUS_OK
ReadX 13803 3891 935 935 NT_STATUS_OK
ReadX 13803 4060 10240 10240 NT_STATUS_OK
ReadX 13803 4059 184 184 NT_STATUS_OK
ReadX 13803 256 184 184 NT_STATUS_OK
ReadX 13803 256 1026 1026 NT_STATUS_OK
ReadX 13803 3901 326 326 NT_STATUS_OK
ReadX 13803 3899 652 652 NT_STATUS_OK
ReadX 13803 256 2 2 NT_STATUS_OK
ReadX 13803 258 4948 4948 NT_STATUS_OK
Close 13803 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13818 NT_STATUS_OK
Close 13818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13821 NT_STATUS_OK
WriteX 13821 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13821 258 NT_STATUS_OK
WriteX 13821 0 65536 65536 NT_STATUS_OK
WriteX 13821 65536 65536 65536 NT_STATUS_OK
WriteX 13821 131072 65536 65536 NT_STATUS_OK
WriteX 13821 196608 65536 65536 NT_STATUS_OK
WriteX 13821 262144 65536 65536 NT_STATUS_OK
WriteX 13821 327680 65536 65536 NT_STATUS_OK
WriteX 13821 393216 65536 65536 NT_STATUS_OK
WriteX 13821 458752 65536 65536 NT_STATUS_OK
WriteX 13821 524288 65536 65536 NT_STATUS_OK
WriteX 13821 589824 35257 35257 NT_STATUS_OK
Close 13821 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13823 NT_STATUS_OK
Close 13823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13826 NT_STATUS_OK
WriteX 13826 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13826 258 NT_STATUS_OK
WriteX 13826 0 65536 65536 NT_STATUS_OK
WriteX 13826 65536 65536 65536 NT_STATUS_OK
WriteX 13826 131072 65536 65536 NT_STATUS_OK
WriteX 13826 196608 65536 65536 NT_STATUS_OK
WriteX 13826 262144 65536 65536 NT_STATUS_OK
WriteX 13826 327680 65536 65536 NT_STATUS_OK
WriteX 13826 393216 65536 65536 NT_STATUS_OK
WriteX 13826 458752 65536 65536 NT_STATUS_OK
WriteX 13826 524288 65536 65536 NT_STATUS_OK
WriteX 13826 589824 57598 57598 NT_STATUS_OK
Close 13826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13828 NT_STATUS_OK
WriteX 13828 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13828 258 NT_STATUS_OK
WriteX 13828 0 12543 12543 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
Close 13828 NT_STATUS_OK
Close 13812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13830 NT_STATUS_OK
Close 13830 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13832 NT_STATUS_OK
ReadX 13832 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13833 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13834 NT_STATUS_OK
QUERY_FILE_INFORMATION 13834 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13834 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13834 1005 NT_STATUS_OK
ReadX 13834 1938 24 24 NT_STATUS_OK
ReadX 13834 1920 276 276 NT_STATUS_OK
ReadX 13834 1918 14 14 NT_STATUS_OK
ReadX 13834 1918 7 7 NT_STATUS_OK
ReadX 13834 1919 12 12 NT_STATUS_OK
ReadX 13834 1919 8 8 NT_STATUS_OK
ReadX 13834 1917 15 15 NT_STATUS_OK
ReadX 13834 0 16 16 NT_STATUS_OK
ReadX 13834 16 2048 2048 NT_STATUS_OK
ReadX 13834 2064 2048 2048 NT_STATUS_OK
ReadX 13834 257 2048 2048 NT_STATUS_OK
ReadX 13834 385 2048 2048 NT_STATUS_OK
ReadX 13834 513 2048 2048 NT_STATUS_OK
ReadX 13834 641 2048 2048 NT_STATUS_OK
ReadX 13834 769 2048 2048 NT_STATUS_OK
ReadX 13834 897 2048 2048 NT_STATUS_OK
ReadX 13834 1025 2048 2048 NT_STATUS_OK
ReadX 13834 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13836 NT_STATUS_OK
Close 13836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13839 NT_STATUS_OK
WriteX 13839 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13839 258 NT_STATUS_OK
WriteX 13839 0 11588 11588 NT_STATUS_OK
Flush 13839 NT_STATUS_OK
Close 13839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13840 NT_STATUS_OK
Close 13840 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13842 NT_STATUS_OK
ReadX 13842 0 4096 4096 NT_STATUS_OK
Close 13834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13844 NT_STATUS_OK
WriteX 13844 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13844 258 NT_STATUS_OK
WriteX 13844 0 11615 11615 NT_STATUS_OK
Flush 13844 NT_STATUS_OK
Close 13844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13846 NT_STATUS_OK
Close 13846 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13848 NT_STATUS_OK
ReadX 13848 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13850 NT_STATUS_OK
Close 13850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13853 NT_STATUS_OK
WriteX 13853 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13853 258 NT_STATUS_OK
WriteX 13853 0 65536 65536 NT_STATUS_OK
WriteX 13853 65536 16050 16050 NT_STATUS_OK
Close 13853 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13833 1939 64 64 NT_STATUS_OK
ReadX 13833 128 248 248 NT_STATUS_OK
ReadX 13833 128 568 568 NT_STATUS_OK
ReadX 13833 3872 1536 1536 NT_STATUS_OK
ReadX 13833 3456 2560 2560 NT_STATUS_OK
ReadX 13833 3136 512 512 NT_STATUS_OK
ReadX 13833 2880 4096 4096 NT_STATUS_OK
ReadX 13833 3264 3072 3072 NT_STATUS_OK
ReadX 13833 320 4096 4096 NT_STATUS_OK
ReadX 13833 1024 4096 4096 NT_STATUS_OK
ReadX 13833 3616 4096 4096 NT_STATUS_OK
ReadX 13833 1939 64 64 NT_STATUS_OK
ReadX 13833 128 248 248 NT_STATUS_OK
ReadX 13833 128 608 608 NT_STATUS_OK
ReadX 13833 2858 1024 1024 NT_STATUS_OK
ReadX 13833 2810 4096 4096 NT_STATUS_OK
ReadX 13833 2826 4096 4096 NT_STATUS_OK
ReadX 13833 2580 2048 2048 NT_STATUS_OK
ReadX 13833 2800 2560 2560 NT_STATUS_OK
ReadX 13833 2100 4096 4096 NT_STATUS_OK
ReadX 13833 2084 4096 4096 NT_STATUS_OK
ReadX 13833 868 4096 4096 NT_STATUS_OK
ReadX 13833 2324 4096 4096 NT_STATUS_OK
ReadX 13833 884 4096 4096 NT_STATUS_OK
ReadX 13833 2604 1024 1024 NT_STATUS_OK
ReadX 13833 580 4096 4096 NT_STATUS_OK
ReadX 13833 596 4096 4096 NT_STATUS_OK
ReadX 13833 2752 4096 4096 NT_STATUS_OK
ReadX 13833 2842 1024 1024 NT_STATUS_OK
ReadX 13833 660 4096 4096 NT_STATUS_OK
ReadX 13833 2720 4096 4096 NT_STATUS_OK
ReadX 13833 2736 4096 4096 NT_STATUS_OK
ReadX 13833 628 4096 4096 NT_STATUS_OK
ReadX 13833 2704 4096 4096 NT_STATUS_OK
ReadX 13833 1556 4096 4096 NT_STATUS_OK
ReadX 13833 576 4096 4096 NT_STATUS_OK
ReadX 13833 3168 1536 1536 NT_STATUS_OK
ReadX 13833 832 4096 4096 NT_STATUS_OK
ReadX 13833 1088 4096 4096 NT_STATUS_OK
ReadX 13833 1344 4096 4096 NT_STATUS_OK
ReadX 13833 1600 4096 4096 NT_STATUS_OK
ReadX 13833 1856 4096 4096 NT_STATUS_OK
ReadX 13833 2112 4096 4096 NT_STATUS_OK
ReadX 13833 1892 4096 4096 NT_STATUS_OK
ReadX 13833 820 4096 4096 NT_STATUS_OK
ReadX 13833 788 4096 4096 NT_STATUS_OK
ReadX 13833 1604 4096 4096 NT_STATUS_OK
ReadX 13833 3648 4096 4096 NT_STATUS_OK
ReadX 13833 2608 4096 4096 NT_STATUS_OK
ReadX 13833 548 4096 4096 NT_STATUS_OK
ReadX 13833 740 4096 4096 NT_STATUS_OK
ReadX 13833 1344 4096 4096 NT_STATUS_OK
ReadX 13833 3392 4096 4096 NT_STATUS_OK
ReadX 13833 3904 4096 4096 NT_STATUS_OK
ReadX 13833 644 4096 4096 NT_STATUS_OK
ReadX 13833 676 4096 4096 NT_STATUS_OK
ReadX 13833 2688 4096 4096 NT_STATUS_OK
ReadX 13833 320 4096 4096 NT_STATUS_OK
ReadX 13833 900 4096 4096 NT_STATUS_OK
ReadX 13833 1908 4096 4096 NT_STATUS_OK
ReadX 13833 852 4096 4096 NT_STATUS_OK
ReadX 13833 724 4096 4096 NT_STATUS_OK
ReadX 13833 2292 4096 4096 NT_STATUS_OK
ReadX 13833 612 4096 4096 NT_STATUS_OK
ReadX 13833 388 4096 4096 NT_STATUS_OK
ReadX 13833 2368 4096 4096 NT_STATUS_OK
ReadX 13833 2624 4096 4096 NT_STATUS_OK
ReadX 13833 500 4096 4096 NT_STATUS_OK
ReadX 13833 356 4096 4096 NT_STATUS_OK
ReadX 13833 1024 4096 4096 NT_STATUS_OK
ReadX 13833 576 4096 4096 NT_STATUS_OK
ReadX 13833 340 4096 4096 NT_STATUS_OK
ReadX 13833 420 4096 4096 NT_STATUS_OK
ReadX 13833 1600 4096 4096 NT_STATUS_OK
ReadX 13833 404 4096 4096 NT_STATUS_OK
ReadX 13833 1428 4096 4096 NT_STATUS_OK
ReadX 13833 2656 4096 4096 NT_STATUS_OK
ReadX 13833 2624 4096 4096 NT_STATUS_OK
ReadX 13833 452 4096 4096 NT_STATUS_OK
ReadX 13833 692 4096 4096 NT_STATUS_OK
ReadX 13833 564 4096 4096 NT_STATUS_OK
ReadX 13833 372 4096 4096 NT_STATUS_OK
ReadX 13833 468 4096 4096 NT_STATUS_OK
ReadX 13833 484 4096 4096 NT_STATUS_OK
ReadX 13833 1088 4096 4096 NT_STATUS_OK
ReadX 13833 1924 4096 4096 NT_STATUS_OK
ReadX 13833 2768 4096 4096 NT_STATUS_OK
ReadX 13833 832 4096 4096 NT_STATUS_OK
ReadX 13833 836 4096 4096 NT_STATUS_OK
ReadX 13833 1856 4096 4096 NT_STATUS_OK
ReadX 13833 2640 4096 4096 NT_STATUS_OK
ReadX 13833 436 4096 4096 NT_STATUS_OK
ReadX 13833 1828 4096 4096 NT_STATUS_OK
ReadX 13833 804 4096 4096 NT_STATUS_OK
ReadX 13833 1860 4096 4096 NT_STATUS_OK
ReadX 13833 1812 4096 4096 NT_STATUS_OK
ReadX 13833 756 4096 4096 NT_STATUS_OK
ReadX 13833 1636 4096 4096 NT_STATUS_OK
ReadX 13833 772 4096 4096 NT_STATUS_OK
ReadX 13833 2036 4096 4096 NT_STATUS_OK
ReadX 13833 1220 4096 4096 NT_STATUS_OK
ReadX 13833 1652 4096 4096 NT_STATUS_OK
ReadX 13833 2588 4096 4096 NT_STATUS_OK
ReadX 13833 916 4096 4096 NT_STATUS_OK
ReadX 13833 260 4096 4096 NT_STATUS_OK
ReadX 13833 932 4096 4096 NT_STATUS_OK
ReadX 13833 2624 4096 4096 NT_STATUS_OK
ReadX 13833 308 4096 4096 NT_STATUS_OK
ReadX 13833 292 4096 4096 NT_STATUS_OK
ReadX 13833 1140 4096 4096 NT_STATUS_OK
ReadX 13833 276 4096 4096 NT_STATUS_OK
ReadX 13833 2020 4096 4096 NT_STATUS_OK
ReadX 13833 2880 4096 4096 NT_STATUS_OK
ReadX 13833 516 4096 4096 NT_STATUS_OK
ReadX 13833 1844 4096 4096 NT_STATUS_OK
ReadX 13833 1124 4096 4096 NT_STATUS_OK
ReadX 13833 3136 4096 4096 NT_STATUS_OK
ReadX 13833 324 4096 4096 NT_STATUS_OK
ReadX 13833 1156 4096 4096 NT_STATUS_OK
ReadX 13833 1172 4096 4096 NT_STATUS_OK
ReadX 13833 2112 4096 4096 NT_STATUS_OK
ReadX 13833 2368 4096 4096 NT_STATUS_OK
ReadX 13833 964 4096 4096 NT_STATUS_OK
ReadX 13833 980 4096 4096 NT_STATUS_OK
ReadX 13833 1012 4096 4096 NT_STATUS_OK
ReadX 13833 532 4096 4096 NT_STATUS_OK
ReadX 13833 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13833 1620 4096 4096 NT_STATUS_OK
ReadX 13833 1604 4096 4096 NT_STATUS_OK
ReadX 13833 2116 4096 4096 NT_STATUS_OK
ReadX 13833 2132 4096 4096 NT_STATUS_OK
ReadX 13833 2148 4096 4096 NT_STATUS_OK
ReadX 13833 2276 4096 4096 NT_STATUS_OK
ReadX 13833 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13855 NT_STATUS_OK
Close 13855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13858 NT_STATUS_OK
QUERY_FILE_INFORMATION 13813 1004 NT_STATUS_OK
Close 13813 NT_STATUS_OK
WriteX 13858 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13858 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13815 1004 NT_STATUS_OK
Close 13815 NT_STATUS_OK
WriteX 13858 0 65536 65536 NT_STATUS_OK
WriteX 13858 65536 64850 64850 NT_STATUS_OK
Close 13858 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13860 NT_STATUS_OK
WriteX 13860 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13860 258 NT_STATUS_OK
ReadX 13833 2068 4096 4096 NT_STATUS_OK
ReadX 13833 1588 4096 4096 NT_STATUS_OK
ReadX 13833 1572 4096 4096 NT_STATUS_OK
WriteX 13860 0 18630 18630 NT_STATUS_OK
Flush 13860 NT_STATUS_OK
Close 13860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13862 NT_STATUS_OK
Close 13862 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13864 NT_STATUS_OK
ReadX 13864 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13833 612 4096 4096 NT_STATUS_OK
ReadX 13833 564 4096 4096 NT_STATUS_OK
ReadX 13833 1876 4096 4096 NT_STATUS_OK
ReadX 13833 628 4096 4096 NT_STATUS_OK
ReadX 13833 740 4096 4096 NT_STATUS_OK
ReadX 13833 724 4096 4096 NT_STATUS_OK
ReadX 13833 644 4096 4096 NT_STATUS_OK
ReadX 13833 2324 4096 4096 NT_STATUS_OK
ReadX 13833 660 4096 4096 NT_STATUS_OK
ReadX 13833 852 4096 4096 NT_STATUS_OK
ReadX 13833 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13833 2368 4096 4096 NT_STATUS_OK
ReadX 13833 1024 4096 4096 NT_STATUS_OK
ReadX 13833 320 4096 4096 NT_STATUS_OK
ReadX 13833 580 4096 4096 NT_STATUS_OK
ReadX 13833 3136 512 512 NT_STATUS_OK
ReadX 13833 2880 4096 4096 NT_STATUS_OK
Close 13833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13865 NT_STATUS_OK
ReadX 13865 61440 4096 4096 NT_STATUS_OK
ReadX 13865 126976 4096 4096 NT_STATUS_OK
WriteX 13865 0 65536 65536 NT_STATUS_OK
WriteX 13865 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13866 NT_STATUS_OK
ReadX 13866 61440 4096 4096 NT_STATUS_OK
ReadX 13866 126976 4096 4096 NT_STATUS_OK
ReadX 13866 192512 4096 4096 NT_STATUS_OK
ReadX 13866 258048 4096 4096 NT_STATUS_OK
WriteX 13866 0 65536 65536 NT_STATUS_OK
WriteX 13866 65536 65536 65536 NT_STATUS_OK
WriteX 13866 131072 65536 65536 NT_STATUS_OK
WriteX 13866 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13867 NT_STATUS_OK
ReadX 13867 61440 4096 4096 NT_STATUS_OK
ReadX 13867 126976 4096 4096 NT_STATUS_OK
ReadX 13867 192512 4096 4096 NT_STATUS_OK
ReadX 13867 258048 4096 4096 NT_STATUS_OK
ReadX 13867 323584 4096 4096 NT_STATUS_OK
ReadX 13867 389120 4096 4096 NT_STATUS_OK
ReadX 13867 454656 4096 4096 NT_STATUS_OK
ReadX 13867 520192 4096 4096 NT_STATUS_OK
WriteX 13867 0 65536 65536 NT_STATUS_OK
WriteX 13867 65536 65536 65536 NT_STATUS_OK
WriteX 13867 131072 65536 65536 NT_STATUS_OK
WriteX 13867 196608 65536 65536 NT_STATUS_OK
WriteX 13867 262144 65536 65536 NT_STATUS_OK
WriteX 13867 327680 65536 65536 NT_STATUS_OK
WriteX 13867 393216 65536 65536 NT_STATUS_OK
WriteX 13867 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13868 NT_STATUS_OK
ReadX 13868 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13869 NT_STATUS_OK
Close 13869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13870 NT_STATUS_OK
WriteX 13870 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13870 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13868 0 8192 8192 NT_STATUS_OK
Flush 13868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13868 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13868 0 8192 8192 NT_STATUS_OK
Flush 13868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13868 0 8192 8192 NT_STATUS_OK
Flush 13868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13868 0 8192 8192 NT_STATUS_OK
Flush 13868 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13872 NT_STATUS_OK
Close 13872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13864 NT_STATUS_OK
Close 13832 NT_STATUS_OK
Close 13865 NT_STATUS_OK
Close 13866 NT_STATUS_OK
Close 13867 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13875 NT_STATUS_OK
WriteX 13875 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13875 258 NT_STATUS_OK
WriteX 13875 0 62591 62591 NT_STATUS_OK
Close 13875 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13877 NT_STATUS_OK
Close 13877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13880 NT_STATUS_OK
WriteX 13880 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13880 258 NT_STATUS_OK
WriteX 13880 0 10845 10845 NT_STATUS_OK
Close 13880 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13882 NT_STATUS_OK
Close 13882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13885 NT_STATUS_OK
WriteX 13885 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13885 258 NT_STATUS_OK
WriteX 13885 0 30118 30118 NT_STATUS_OK
Close 13885 NT_STATUS_OK
WriteX 13868 0 4096 4096 NT_STATUS_OK
WriteX 13870 0 64 64 NT_STATUS_OK
Close 13870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13868 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13887 NT_STATUS_OK
ReadX 13887 0 61440 61440 NT_STATUS_OK
ReadX 13887 61440 4096 4096 NT_STATUS_OK
ReadX 13887 65536 61440 61440 NT_STATUS_OK
ReadX 13887 126976 4096 4096 NT_STATUS_OK
ReadX 13887 131072 61440 61440 NT_STATUS_OK
ReadX 13887 192512 4096 4096 NT_STATUS_OK
ReadX 13887 196608 61440 61440 NT_STATUS_OK
ReadX 13887 258048 4096 4096 NT_STATUS_OK
ReadX 13887 262144 61440 61440 NT_STATUS_OK
ReadX 13887 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13888 NT_STATUS_OK
ReadX 13888 0 61440 61440 NT_STATUS_OK
ReadX 13888 61440 4096 4096 NT_STATUS_OK
ReadX 13888 65536 61440 61440 NT_STATUS_OK
ReadX 13888 126976 4096 4096 NT_STATUS_OK
ReadX 13888 131072 61440 61440 NT_STATUS_OK
ReadX 13888 192512 4096 4096 NT_STATUS_OK
ReadX 13888 196608 61440 61440 NT_STATUS_OK
ReadX 13888 258048 4096 4096 NT_STATUS_OK
ReadX 13888 262144 61440 61440 NT_STATUS_OK
ReadX 13888 323584 4096 4096 NT_STATUS_OK
ReadX 13888 327680 61440 61440 NT_STATUS_OK
ReadX 13888 389120 4096 4096 NT_STATUS_OK
ReadX 13888 393216 61440 61440 NT_STATUS_OK
ReadX 13888 454656 4096 4096 NT_STATUS_OK
ReadX 13888 458752 61440 61440 NT_STATUS_OK
ReadX 13888 520192 4096 4096 NT_STATUS_OK
ReadX 13888 524288 61440 61440 NT_STATUS_OK
ReadX 13888 585728 4096 4096 NT_STATUS_OK
ReadX 13888 589824 61440 61440 NT_STATUS_OK
ReadX 13888 651264 4096 4096 NT_STATUS_OK
ReadX 13888 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13889 NT_STATUS_OK
ReadX 13889 0 61440 61440 NT_STATUS_OK
ReadX 13889 61440 4096 4096 NT_STATUS_OK
ReadX 13889 65536 61440 61440 NT_STATUS_OK
ReadX 13889 126976 4096 4096 NT_STATUS_OK
ReadX 13889 131072 61440 61440 NT_STATUS_OK
ReadX 13889 192512 4096 4096 NT_STATUS_OK
ReadX 13889 196608 61440 61440 NT_STATUS_OK
ReadX 13889 258048 4096 4096 NT_STATUS_OK
ReadX 13889 262144 61440 61440 NT_STATUS_OK
ReadX 13889 323584 4096 4096 NT_STATUS_OK
ReadX 13889 327680 61440 61440 NT_STATUS_OK
ReadX 13889 389120 4096 4096 NT_STATUS_OK
ReadX 13889 393216 61440 61440 NT_STATUS_OK
ReadX 13889 454656 4096 4096 NT_STATUS_OK
ReadX 13889 458752 61440 61440 NT_STATUS_OK
ReadX 13889 520192 4096 4096 NT_STATUS_OK
ReadX 13889 524288 61440 61440 NT_STATUS_OK
ReadX 13889 585728 4096 4096 NT_STATUS_OK
ReadX 13889 589824 61440 61440 NT_STATUS_OK
ReadX 13889 651264 4096 4096 NT_STATUS_OK
ReadX 13889 655360 61440 61440 NT_STATUS_OK
ReadX 13889 716800 4096 4096 NT_STATUS_OK
ReadX 13889 720896 61440 61440 NT_STATUS_OK
ReadX 13889 782336 4096 4096 NT_STATUS_OK
ReadX 13889 786432 61440 61440 NT_STATUS_OK
ReadX 13889 847872 4096 4096 NT_STATUS_OK
ReadX 13889 851968 61440 61440 NT_STATUS_OK
ReadX 13889 913408 4096 4096 NT_STATUS_OK
ReadX 13889 917504 61440 61440 NT_STATUS_OK
ReadX 13889 978944 4096 4096 NT_STATUS_OK
ReadX 13889 983040 61440 61440 NT_STATUS_OK
ReadX 13889 1044480 4096 4096 NT_STATUS_OK
ReadX 13889 1048576 61440 61440 NT_STATUS_OK
ReadX 13889 1110016 4096 4096 NT_STATUS_OK
ReadX 13889 1114112 61440 61440 NT_STATUS_OK
ReadX 13889 1175552 4096 4096 NT_STATUS_OK
ReadX 13889 1179648 61440 61440 NT_STATUS_OK
ReadX 13889 1241088 4096 4096 NT_STATUS_OK
ReadX 13889 1245184 61440 61440 NT_STATUS_OK
ReadX 13889 1306624 4096 4096 NT_STATUS_OK
ReadX 13889 1310720 61440 61440 NT_STATUS_OK
ReadX 13889 1372160 4096 4096 NT_STATUS_OK
ReadX 13889 1376256 61440 61440 NT_STATUS_OK
ReadX 13889 1437696 4096 4096 NT_STATUS_OK
ReadX 13889 1441792 61440 61440 NT_STATUS_OK
ReadX 13889 1503232 4096 4096 NT_STATUS_OK
ReadX 13889 1507328 61440 61440 NT_STATUS_OK
ReadX 13889 1568768 4096 4096 NT_STATUS_OK
ReadX 13889 1572864 61440 61440 NT_STATUS_OK
ReadX 13889 1634304 4096 4096 NT_STATUS_OK
ReadX 13889 1638400 61440 61440 NT_STATUS_OK
ReadX 13889 1699840 4096 4096 NT_STATUS_OK
ReadX 13889 1703936 61440 61440 NT_STATUS_OK
ReadX 13889 1765376 4096 4096 NT_STATUS_OK
ReadX 13889 1769472 61440 61440 NT_STATUS_OK
ReadX 13889 1830912 4096 4096 NT_STATUS_OK
ReadX 13889 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13890 NT_STATUS_OK
Close 13890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13887 NT_STATUS_OK
Close 13888 NT_STATUS_OK
Close 13889 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13892 NT_STATUS_OK
ReadX 13892 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13893 NT_STATUS_OK
ReadX 13893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13894 NT_STATUS_OK
ReadX 13894 0 4096 4096 NT_STATUS_OK
ReadX 13894 4096 4096 4096 NT_STATUS_OK
ReadX 13894 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13895 NT_STATUS_OK
Close 13895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13892 NT_STATUS_OK
Close 13893 NT_STATUS_OK
Close 13894 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13897 NT_STATUS_OK
ReadX 13897 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13898 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13898 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13899 NT_STATUS_OK
Close 13899 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13897 NT_STATUS_OK
Close 13898 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13901 NT_STATUS_OK
ReadX 13901 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13902 NT_STATUS_OK
ReadX 13902 0 8192 8192 NT_STATUS_OK
ReadX 13902 8192 8192 8192 NT_STATUS_OK
ReadX 13902 16384 8192 8192 NT_STATUS_OK
ReadX 13902 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13904 NT_STATUS_OK
Close 13904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13902 NT_STATUS_OK
Close 13901 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13907 NT_STATUS_OK
WriteX 13907 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13907 258 NT_STATUS_OK
WriteX 13907 0 10438 10438 NT_STATUS_OK
Close 13907 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13908 NT_STATUS_OK
Close 13908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13909 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13910 NT_STATUS_OK
Close 13910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13911 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13912 NT_STATUS_OK
Close 13912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13913 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13914 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13915 NT_STATUS_OK
Close 13915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13916 NT_STATUS_OK
ReadX 13916 0 4096 4096 NT_STATUS_OK
ReadX 13916 4096 4096 4096 NT_STATUS_OK
ReadX 13916 8192 4096 4096 NT_STATUS_OK
ReadX 13916 12288 8192 8192 NT_STATUS_OK
ReadX 13916 20480 8192 8192 NT_STATUS_OK
ReadX 13916 28672 8192 8192 NT_STATUS_OK
ReadX 13916 36864 8192 8192 NT_STATUS_OK
ReadX 13916 45056 8192 8192 NT_STATUS_OK
ReadX 13916 53248 8192 8192 NT_STATUS_OK
ReadX 13916 61440 8192 8192 NT_STATUS_OK
ReadX 13916 69632 8192 8192 NT_STATUS_OK
ReadX 13916 77824 8192 8192 NT_STATUS_OK
ReadX 13916 86016 8192 8192 NT_STATUS_OK
ReadX 13916 94208 8192 8192 NT_STATUS_OK
ReadX 13916 102400 8192 8192 NT_STATUS_OK
ReadX 13916 110592 8192 8192 NT_STATUS_OK
ReadX 13916 118784 8192 8192 NT_STATUS_OK
ReadX 13916 126976 8192 8192 NT_STATUS_OK
ReadX 13916 135168 8192 8192 NT_STATUS_OK
ReadX 13916 143360 8192 8192 NT_STATUS_OK
ReadX 13916 151552 8192 8192 NT_STATUS_OK
ReadX 13916 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13916 NT_STATUS_OK
Close 13909 NT_STATUS_OK
Close 13911 NT_STATUS_OK
Close 13913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13918 NT_STATUS_OK
Close 13918 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13921 NT_STATUS_OK
WriteX 13921 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13921 258 NT_STATUS_OK
WriteX 13921 0 28489 28489 NT_STATUS_OK
Close 13921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13922 NT_STATUS_OK
Close 13922 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13924 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13924 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13925 NT_STATUS_OK
Close 13925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13924 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13927 NT_STATUS_OK
ReadX 13927 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13928 NT_STATUS_OK
ReadX 13928 0 8192 8192 NT_STATUS_OK
ReadX 13928 8192 8192 8192 NT_STATUS_OK
ReadX 13928 16384 8192 8192 NT_STATUS_OK
ReadX 13928 24576 8192 8192 NT_STATUS_OK
ReadX 13928 32768 16384 16384 NT_STATUS_OK
ReadX 13928 49152 8192 8192 NT_STATUS_OK
ReadX 13928 57344 8192 8192 NT_STATUS_OK
ReadX 13928 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13930 NT_STATUS_OK
Close 13930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13928 NT_STATUS_OK
Close 13927 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13933 NT_STATUS_OK
WriteX 13933 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13933 258 NT_STATUS_OK
WriteX 13933 0 29253 29253 NT_STATUS_OK
Close 13933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13934 NT_STATUS_OK
Close 13934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13935 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13937 NT_STATUS_OK
Close 13937 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13940 NT_STATUS_OK
WriteX 13940 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13940 258 NT_STATUS_OK
WriteX 13940 0 30183 30183 NT_STATUS_OK
Close 13940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13941 NT_STATUS_OK
Close 13941 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13943 NT_STATUS_OK
WriteX 13943 0 510 510 NT_STATUS_OK
WriteX 13943 510 512 512 NT_STATUS_OK
WriteX 13943 1022 510 510 NT_STATUS_OK
WriteX 13943 1532 510 510 NT_STATUS_OK
WriteX 13943 2042 168 168 NT_STATUS_OK
Close 13943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13944 NT_STATUS_OK
Close 13944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13946 NT_STATUS_OK
ReadX 13946 0 4096 4096 NT_STATUS_OK
WriteX 13946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13947 NT_STATUS_OK
ReadX 13947 61440 4096 4096 NT_STATUS_OK
ReadX 13947 126976 4096 4096 NT_STATUS_OK
WriteX 13947 0 65536 65536 NT_STATUS_OK
WriteX 13947 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13948 NT_STATUS_OK
ReadX 13948 61440 4096 4096 NT_STATUS_OK
ReadX 13948 126976 4096 4096 NT_STATUS_OK
ReadX 13948 192512 4096 4096 NT_STATUS_OK
ReadX 13948 258048 4096 4096 NT_STATUS_OK
WriteX 13948 0 65536 65536 NT_STATUS_OK
WriteX 13948 65536 65536 65536 NT_STATUS_OK
WriteX 13948 131072 65536 65536 NT_STATUS_OK
WriteX 13948 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13949 NT_STATUS_OK
ReadX 13949 61440 4096 4096 NT_STATUS_OK
ReadX 13949 126976 4096 4096 NT_STATUS_OK
ReadX 13949 192512 4096 4096 NT_STATUS_OK
ReadX 13949 258048 4096 4096 NT_STATUS_OK
ReadX 13949 323584 4096 4096 NT_STATUS_OK
ReadX 13949 389120 4096 4096 NT_STATUS_OK
ReadX 13949 454656 4096 4096 NT_STATUS_OK
ReadX 13949 520192 4096 4096 NT_STATUS_OK
WriteX 13949 0 65536 65536 NT_STATUS_OK
WriteX 13949 65536 65536 65536 NT_STATUS_OK
WriteX 13949 131072 65536 65536 NT_STATUS_OK
WriteX 13949 196608 65536 65536 NT_STATUS_OK
WriteX 13949 262144 65536 65536 NT_STATUS_OK
WriteX 13949 327680 65536 65536 NT_STATUS_OK
WriteX 13949 393216 65536 65536 NT_STATUS_OK
WriteX 13949 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13950 NT_STATUS_OK
Close 13950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13946 NT_STATUS_OK
Close 13947 NT_STATUS_OK
Close 13948 NT_STATUS_OK
Close 13949 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13952 NT_STATUS_OK
Close 13952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13956 NT_STATUS_OK
Close 13956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13959 NT_STATUS_OK
Close 13959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13961 NT_STATUS_OK
Close 13961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13965 NT_STATUS_OK
Close 13965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13968 NT_STATUS_OK
Close 13968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13970 NT_STATUS_OK
Close 13970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13974 NT_STATUS_OK
Close 13974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13979 NT_STATUS_OK
Close 13979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13984 NT_STATUS_OK
Close 13984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13989 NT_STATUS_OK
Close 13989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13994 NT_STATUS_OK
Close 13994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13999 NT_STATUS_OK
Close 13999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 14004 NT_STATUS_OK
Close 14004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 14009 NT_STATUS_OK
Close 14009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 14012 NT_STATUS_OK
Close 14012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 14015 NT_STATUS_OK
Close 14015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 14018 NT_STATUS_OK
WriteX 14018 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14018 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 14018 0 65536 65536 NT_STATUS_OK
WriteX 14018 65536 65536 65536 NT_STATUS_OK
WriteX 14018 131072 65536 65536 NT_STATUS_OK
WriteX 14018 196608 65536 65536 NT_STATUS_OK
WriteX 14018 262144 26634 26634 NT_STATUS_OK
Close 14018 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14023 NT_STATUS_OK
Close 14023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14024 NT_STATUS_OK
Close 14024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14025 NT_STATUS_OK
ReadX 14025 0 4096 4096 NT_STATUS_OK
Close 14025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14026 NT_STATUS_OK
ReadX 14026 0 4096 4096 NT_STATUS_OK
ReadX 14026 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14027 NT_STATUS_OK
Close 14027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 14026 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14031 NT_STATUS_OK
Close 14031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14034 NT_STATUS_OK
Close 14034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14036 NT_STATUS_OK
Close 14036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 14040 NT_STATUS_OK
Close 14040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 14043 NT_STATUS_OK
Close 14043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14045 NT_STATUS_OK
Close 14045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14049 NT_STATUS_OK
Close 14049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14054 NT_STATUS_OK
Close 14054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14059 NT_STATUS_OK
Close 14059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14064 NT_STATUS_OK
Close 14064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 14069 NT_STATUS_OK
Close 14069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 14074 NT_STATUS_OK
Close 14074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 14078 NT_STATUS_OK
Close 14078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 14083 NT_STATUS_OK
Close 14083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 14088 NT_STATUS_OK
Close 14088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 14091 NT_STATUS_OK
Close 14091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 14093 NT_STATUS_OK
Close 14093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9879 NT_STATUS_OK
Close 9879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9880 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9881 NT_STATUS_OK
ReadX 9881 0 4096 4096 NT_STATUS_OK
Close 9881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9882 NT_STATUS_OK
ReadX 9882 0 4096 4096 NT_STATUS_OK
Close 9882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9883 NT_STATUS_OK
ReadX 9883 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9893 NT_STATUS_OK
Close 9893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9895 NT_STATUS_OK
ReadX 9895 0 4096 4096 NT_STATUS_OK
Close 9895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9896 NT_STATUS_OK
ReadX 9896 0 4096 4096 NT_STATUS_OK
Close 9896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9897 NT_STATUS_OK
ReadX 9897 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9883 NT_STATUS_OK
Close 9897 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9926 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9926 0 4096 4096 NT_STATUS_OK
Close 9926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9927 NT_STATUS_OK
ReadX 9927 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9928 NT_STATUS_OK
ReadX 9928 0 4096 4096 NT_STATUS_OK
ReadX 9928 4096 4096 4096 NT_STATUS_OK
ReadX 9928 8192 4096 4096 NT_STATUS_OK
ReadX 9928 12288 4096 4096 NT_STATUS_OK
ReadX 9928 16384 4096 4096 NT_STATUS_OK
ReadX 9928 20480 4096 4096 NT_STATUS_OK
ReadX 9928 24576 4096 4096 NT_STATUS_OK
ReadX 9928 28672 4096 4096 NT_STATUS_OK
ReadX 9928 32768 4096 4096 NT_STATUS_OK
ReadX 9928 36864 4096 4096 NT_STATUS_OK
ReadX 9928 40960 4096 4096 NT_STATUS_OK
ReadX 9928 45056 4096 4096 NT_STATUS_OK
ReadX 9928 49152 4096 4096 NT_STATUS_OK
ReadX 9928 53248 4096 4096 NT_STATUS_OK
ReadX 9928 57344 4096 4096 NT_STATUS_OK
ReadX 9928 61440 4096 4096 NT_STATUS_OK
ReadX 9928 65536 4096 4096 NT_STATUS_OK
ReadX 9928 69632 4096 4096 NT_STATUS_OK
ReadX 9928 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9928 1004 NT_STATUS_OK
WriteX 9928 0 4096 4096 NT_STATUS_OK
Close 9928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9929 NT_STATUS_OK
SET_FILE_INFORMATION 9929 1004 NT_STATUS_OK
Close 9929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9930 NT_STATUS_OK
ReadX 9930 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9931 NT_STATUS_OK
Close 9931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9934 NT_STATUS_OK
WriteX 9934 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9934 258 NT_STATUS_OK
WriteX 9934 0 65536 65536 NT_STATUS_OK
WriteX 9934 65536 19979 19979 NT_STATUS_OK
Close 9934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9935 NT_STATUS_OK
ReadX 9935 0 4096 4096 NT_STATUS_OK
WriteX 9935 0 4096 4096 NT_STATUS_OK
Flush 9935 NT_STATUS_OK
WriteX 9935 0 4096 4096 NT_STATUS_OK
Flush 9935 NT_STATUS_OK
QUERY_FILE_INFORMATION 9935 1004 NT_STATUS_OK
WriteX 9935 0 4096 4096 NT_STATUS_OK
Flush 9935 NT_STATUS_OK
WriteX 9935 0 4096 4096 NT_STATUS_OK
Flush 9935 NT_STATUS_OK
WriteX 9935 0 4096 4096 NT_STATUS_OK
Flush 9935 NT_STATUS_OK
SET_FILE_INFORMATION 9935 1004 NT_STATUS_OK
WriteX 9935 0 4096 4096 NT_STATUS_OK
Flush 9935 NT_STATUS_OK
Close 9935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9936 NT_STATUS_OK
ReadX 9936 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 9937 NT_STATUS_OK
ReadX 9937 0 4096 4096 NT_STATUS_OK
Close 9936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9938 NT_STATUS_OK
ReadX 9938 0 4096 4096 NT_STATUS_OK
Close 9938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9939 NT_STATUS_OK
ReadX 9939 0 4096 4096 NT_STATUS_OK
Close 9939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9940 NT_STATUS_OK
ReadX 9940 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9940 1004 NT_STATUS_OK
WriteX 9940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 9941 NT_STATUS_OK
Close 9941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 9937 NT_STATUS_OK
Close 9940 NT_STATUS_OK
Close 9930 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9943 NT_STATUS_OK
Close 9943 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9946 NT_STATUS_OK
WriteX 9946 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9946 258 NT_STATUS_OK
WriteX 9946 0 65536 65536 NT_STATUS_OK
WriteX 9946 65536 17654 17654 NT_STATUS_OK
Close 9946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9947 NT_STATUS_OK
ReadX 9947 0 4096 4096 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
QUERY_FILE_INFORMATION 9947 1004 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
SET_FILE_INFORMATION 9947 1004 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
Close 9947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9948 NT_STATUS_OK
SET_FILE_INFORMATION 9948 1004 NT_STATUS_OK
Close 9948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9949 NT_STATUS_OK
ReadX 9949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 9950 NT_STATUS_OK
Close 9950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 9952 NT_STATUS_OK
ReadX 9952 0 4096 4096 NT_STATUS_OK
ReadX 9952 4096 4096 4096 NT_STATUS_OK
ReadX 9952 8192 4096 4096 NT_STATUS_OK
ReadX 9952 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9952 16384 4096 4096 NT_STATUS_OK
ReadX 9952 20480 4096 4096 NT_STATUS_OK
ReadX 9952 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9953 NT_STATUS_OK
ReadX 9953 0 4096 4096 NT_STATUS_OK
Close 9953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9954 NT_STATUS_OK
ReadX 9954 0 4096 4096 NT_STATUS_OK
Close 9954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9955 NT_STATUS_OK
ReadX 9955 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9955 1004 NT_STATUS_OK
WriteX 9955 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 9956 NT_STATUS_OK
Close 9956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 9955 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9958 NT_STATUS_OK
Close 9958 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9961 NT_STATUS_OK
WriteX 9961 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9961 258 NT_STATUS_OK
WriteX 9961 0 65536 65536 NT_STATUS_OK
WriteX 9961 65536 19490 19490 NT_STATUS_OK
Close 9961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9962 NT_STATUS_OK
ReadX 9962 0 4096 4096 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
QUERY_FILE_INFORMATION 9962 1004 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
SET_FILE_INFORMATION 9962 1004 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
Close 9962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9963 NT_STATUS_OK
SET_FILE_INFORMATION 9963 1004 NT_STATUS_OK
Close 9963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9964 NT_STATUS_OK
ReadX 9964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 9965 NT_STATUS_OK
Close 9965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9967 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9967 0 4096 4096 NT_STATUS_OK
Close 9967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9968 NT_STATUS_OK
ReadX 9968 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9969 NT_STATUS_OK
ReadX 9969 0 4096 4096 NT_STATUS_OK
ReadX 9969 4096 4096 4096 NT_STATUS_OK
ReadX 9969 8192 4096 4096 NT_STATUS_OK
ReadX 9969 12288 4096 4096 NT_STATUS_OK
ReadX 9969 16384 4096 4096 NT_STATUS_OK
ReadX 9969 20480 4096 4096 NT_STATUS_OK
ReadX 9969 24576 4096 4096 NT_STATUS_OK
ReadX 9969 28672 4096 4096 NT_STATUS_OK
ReadX 9969 32768 4096 4096 NT_STATUS_OK
ReadX 9969 36864 4096 4096 NT_STATUS_OK
ReadX 9969 40960 4096 4096 NT_STATUS_OK
ReadX 9969 45056 4096 4096 NT_STATUS_OK
ReadX 9969 49152 4096 4096 NT_STATUS_OK
ReadX 9969 53248 4096 4096 NT_STATUS_OK
ReadX 9969 57344 4096 4096 NT_STATUS_OK
ReadX 9969 61440 4096 4096 NT_STATUS_OK
ReadX 9969 65536 4096 4096 NT_STATUS_OK
ReadX 9969 69632 4096 4096 NT_STATUS_OK
ReadX 9969 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9969 1004 NT_STATUS_OK
WriteX 9969 0 4096 4096 NT_STATUS_OK
Close 9969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9970 NT_STATUS_OK
SET_FILE_INFORMATION 9970 1004 NT_STATUS_OK
Close 9970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9971 NT_STATUS_OK
ReadX 9971 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9972 NT_STATUS_OK
Close 9972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 9964 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9975 NT_STATUS_OK
WriteX 9975 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9975 258 NT_STATUS_OK
WriteX 9975 0 65536 65536 NT_STATUS_OK
WriteX 9975 65536 8866 8866 NT_STATUS_OK
Close 9975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9976 NT_STATUS_OK
ReadX 9976 0 4096 4096 NT_STATUS_OK
WriteX 9976 0 4096 4096 NT_STATUS_OK
Flush 9976 NT_STATUS_OK
SET_FILE_INFORMATION 9976 1004 NT_STATUS_OK
WriteX 9976 0 4096 4096 NT_STATUS_OK
Flush 9976 NT_STATUS_OK
Close 9976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9977 NT_STATUS_OK
ReadX 9977 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9978 NT_STATUS_OK
ReadX 9978 0 4096 4096 NT_STATUS_OK
Close 9978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9979 NT_STATUS_OK
ReadX 9979 0 4096 4096 NT_STATUS_OK
Close 9979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9980 NT_STATUS_OK
ReadX 9980 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9980 1004 NT_STATUS_OK
WriteX 9980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 9981 NT_STATUS_OK
Close 9981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 9980 NT_STATUS_OK
Close 9971 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 9983 NT_STATUS_OK
Close 9983 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9986 NT_STATUS_OK
WriteX 9986 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9986 258 NT_STATUS_OK
WriteX 9986 0 65536 65536 NT_STATUS_OK
WriteX 9986 65536 9298 9298 NT_STATUS_OK
Close 9986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9987 NT_STATUS_OK
ReadX 9987 0 4096 4096 NT_STATUS_OK
WriteX 9987 0 4096 4096 NT_STATUS_OK
Flush 9987 NT_STATUS_OK
SET_FILE_INFORMATION 9987 1004 NT_STATUS_OK
WriteX 9987 0 4096 4096 NT_STATUS_OK
Flush 9987 NT_STATUS_OK
Close 9987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9988 NT_STATUS_OK
SET_FILE_INFORMATION 9988 1004 NT_STATUS_OK
Close 9988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9989 NT_STATUS_OK
ReadX 9989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 9990 NT_STATUS_OK
Close 9990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 9993 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9993 0 4096 4096 NT_STATUS_OK
Close 9993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 9994 NT_STATUS_OK
ReadX 9994 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9994 4096 4096 4096 NT_STATUS_OK
ReadX 9994 8192 4096 4096 NT_STATUS_OK
ReadX 9994 12288 4096 4096 NT_STATUS_OK
ReadX 9994 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9995 NT_STATUS_OK
ReadX 9995 0 4096 4096 NT_STATUS_OK
Close 9995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9996 NT_STATUS_OK
ReadX 9996 0 4096 4096 NT_STATUS_OK
Close 9996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9997 NT_STATUS_OK
ReadX 9997 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9997 1004 NT_STATUS_OK
WriteX 9997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 9998 NT_STATUS_OK
Close 9998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 9994 NT_STATUS_OK
Close 9997 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10000 NT_STATUS_OK
Close 10000 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10003 NT_STATUS_OK
WriteX 10003 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10003 258 NT_STATUS_OK
WriteX 10003 0 65536 65536 NT_STATUS_OK
WriteX 10003 65536 11540 11540 NT_STATUS_OK
Close 10003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10004 NT_STATUS_OK
ReadX 10004 0 4096 4096 NT_STATUS_OK
WriteX 10004 0 4096 4096 NT_STATUS_OK
Flush 10004 NT_STATUS_OK
SET_FILE_INFORMATION 10004 1004 NT_STATUS_OK
WriteX 10004 0 4096 4096 NT_STATUS_OK
Flush 10004 NT_STATUS_OK
Close 10004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10005 NT_STATUS_OK
SET_FILE_INFORMATION 10005 1004 NT_STATUS_OK
Close 10005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10006 NT_STATUS_OK
ReadX 10006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10007 NT_STATUS_OK
Close 10007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10009 NT_STATUS_OK
ReadX 10009 61440 4096 4096 NT_STATUS_OK
ReadX 10009 126976 4096 4096 NT_STATUS_OK
WriteX 10009 0 65536 65536 NT_STATUS_OK
WriteX 10009 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10010 NT_STATUS_OK
ReadX 10010 61440 4096 4096 NT_STATUS_OK
ReadX 10010 126976 4096 4096 NT_STATUS_OK
ReadX 10010 192512 4096 4096 NT_STATUS_OK
ReadX 10010 258048 4096 4096 NT_STATUS_OK
WriteX 10010 0 65536 65536 NT_STATUS_OK
WriteX 10010 65536 65536 65536 NT_STATUS_OK
WriteX 10010 131072 65536 65536 NT_STATUS_OK
WriteX 10010 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10011 NT_STATUS_OK
ReadX 10011 61440 4096 4096 NT_STATUS_OK
ReadX 10011 126976 4096 4096 NT_STATUS_OK
ReadX 10011 192512 4096 4096 NT_STATUS_OK
ReadX 10011 258048 4096 4096 NT_STATUS_OK
ReadX 10011 323584 4096 4096 NT_STATUS_OK
ReadX 10011 389120 4096 4096 NT_STATUS_OK
ReadX 10011 454656 4096 4096 NT_STATUS_OK
ReadX 10011 520192 4096 4096 NT_STATUS_OK
WriteX 10011 0 65536 65536 NT_STATUS_OK
WriteX 10011 65536 65536 65536 NT_STATUS_OK
WriteX 10011 131072 65536 65536 NT_STATUS_OK
WriteX 10011 196608 65536 65536 NT_STATUS_OK
WriteX 10011 262144 65536 65536 NT_STATUS_OK
WriteX 10011 327680 65536 65536 NT_STATUS_OK
WriteX 10011 393216 65536 65536 NT_STATUS_OK
WriteX 10011 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10012 NT_STATUS_OK
ReadX 10012 0 4096 4096 NT_STATUS_OK
ReadX 10012 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10013 NT_STATUS_OK
WriteX 10013 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10013 258 NT_STATUS_OK
WriteX 10013 0 53 53 NT_STATUS_OK
Close 10013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10014 NT_STATUS_OK
Close 10014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10006 NT_STATUS_OK
Close 9952 NT_STATUS_OK
Close 10009 NT_STATUS_OK
Close 10010 NT_STATUS_OK
Close 10011 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10012 8192 4096 4096 NT_STATUS_OK
ReadX 10012 12288 4096 4096 NT_STATUS_OK
WriteX 10016 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10016 258 NT_STATUS_OK
ReadX 10012 16384 4096 4096 NT_STATUS_OK
ReadX 10012 20480 4096 4096 NT_STATUS_OK
WriteX 10016 0 15360 15360 NT_STATUS_OK
Close 10016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10017 NT_STATUS_OK
ReadX 10017 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10017 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10017 1004 NT_STATUS_OK
WriteX 10017 0 4096 4096 NT_STATUS_OK
Close 10017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10018 NT_STATUS_OK
Close 10018 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10020 NT_STATUS_OK
ReadX 10020 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10021 NT_STATUS_OK
Close 10021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10020 4096 4096 4096 NT_STATUS_OK
ReadX 10020 8192 4096 4096 NT_STATUS_OK
ReadX 10020 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10023 NT_STATUS_OK
ReadX 10023 0 4096 4096 NT_STATUS_OK
ReadX 10023 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10024 NT_STATUS_OK
ReadX 10024 0 4096 4096 NT_STATUS_OK
ReadX 10024 4096 4096 4096 NT_STATUS_OK
ReadX 10024 8192 4096 4096 NT_STATUS_OK
Close 10023 NT_STATUS_OK
Close 10024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10025 NT_STATUS_OK
WriteX 10025 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10025 258 NT_STATUS_OK
WriteX 10025 0 15360 15360 NT_STATUS_OK
Close 10025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10026 NT_STATUS_OK
ReadX 10026 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10026 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10026 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10027 NT_STATUS_OK
Close 10027 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10029 NT_STATUS_OK
ReadX 10029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10030 NT_STATUS_OK
SET_FILE_INFORMATION 10030 1004 NT_STATUS_OK
Close 10030 NT_STATUS_OK
WriteX 10026 0 4096 4096 NT_STATUS_OK
Close 10026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10031 NT_STATUS_OK
Close 10031 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10033 NT_STATUS_OK
ReadX 10033 0 4096 4096 NT_STATUS_OK
ReadX 10033 4096 4096 4096 NT_STATUS_OK
ReadX 10033 8192 4096 4096 NT_STATUS_OK
ReadX 10033 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10033 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10033 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10034 NT_STATUS_OK
ReadX 10034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10035 NT_STATUS_OK
WriteX 10035 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10035 258 NT_STATUS_OK
WriteX 10035 0 53 53 NT_STATUS_OK
Close 10035 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10036 NT_STATUS_OK
Close 10036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10034 4096 4096 4096 NT_STATUS_OK
ReadX 10034 8192 4096 4096 NT_STATUS_OK
ReadX 10034 12288 4096 4096 NT_STATUS_OK
WriteX 10038 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10038 258 NT_STATUS_OK
WriteX 10038 0 12006 12006 NT_STATUS_OK
Close 10038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10039 NT_STATUS_OK
ReadX 10039 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10039 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10039 1004 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Close 10039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10040 NT_STATUS_OK
Close 10040 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10042 NT_STATUS_OK
ReadX 10042 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10043 NT_STATUS_OK
Close 10043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10042 4096 4096 4096 NT_STATUS_OK
ReadX 10042 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10045 NT_STATUS_OK
WriteX 10045 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10045 258 NT_STATUS_OK
WriteX 10045 0 11991 11991 NT_STATUS_OK
Close 10045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10046 NT_STATUS_OK
ReadX 10046 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10046 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10046 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10047 NT_STATUS_OK
Close 10047 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10049 NT_STATUS_OK
ReadX 10049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10050 NT_STATUS_OK
SET_FILE_INFORMATION 10050 1004 NT_STATUS_OK
Close 10050 NT_STATUS_OK
WriteX 10046 0 4096 4096 NT_STATUS_OK
Close 10046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10051 NT_STATUS_OK
Close 10051 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10053 NT_STATUS_OK
ReadX 10053 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10054 NT_STATUS_OK
Close 10054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10053 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10053 1004 NT_STATUS_OK
ReadX 10053 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10053 1004 NT_STATUS_OK
WriteX 10053 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10053 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10053 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10053 1004 NT_STATUS_OK
Close 10029 NT_STATUS_OK
WriteX 10033 0 19054 19054 NT_STATUS_OK
WriteX 10053 0 12288 12288 NT_STATUS_OK
Close 10049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10056 NT_STATUS_OK
Close 10056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10033 NT_STATUS_OK
Close 10053 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10058 NT_STATUS_OK
Close 10058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10060 NT_STATUS_OK
ReadX 10060 0 61440 61440 NT_STATUS_OK
ReadX 10060 61440 4096 4096 NT_STATUS_OK
ReadX 10060 65536 61440 61440 NT_STATUS_OK
ReadX 10060 126976 4096 4096 NT_STATUS_OK
ReadX 10060 131072 61440 61440 NT_STATUS_OK
ReadX 10060 192512 4096 4096 NT_STATUS_OK
ReadX 10060 196608 61440 61440 NT_STATUS_OK
ReadX 10060 258048 4096 4096 NT_STATUS_OK
ReadX 10060 262144 61440 61440 NT_STATUS_OK
ReadX 10060 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10061 NT_STATUS_OK
ReadX 10061 0 61440 61440 NT_STATUS_OK
ReadX 10061 61440 4096 4096 NT_STATUS_OK
ReadX 10061 65536 61440 61440 NT_STATUS_OK
ReadX 10061 126976 4096 4096 NT_STATUS_OK
ReadX 10061 131072 61440 61440 NT_STATUS_OK
ReadX 10061 192512 4096 4096 NT_STATUS_OK
ReadX 10061 196608 61440 61440 NT_STATUS_OK
ReadX 10061 258048 4096 4096 NT_STATUS_OK
ReadX 10061 262144 61440 61440 NT_STATUS_OK
ReadX 10061 323584 4096 4096 NT_STATUS_OK
ReadX 10061 327680 61440 61440 NT_STATUS_OK
ReadX 10061 389120 4096 4096 NT_STATUS_OK
ReadX 10061 393216 61440 61440 NT_STATUS_OK
ReadX 10061 454656 4096 4096 NT_STATUS_OK
ReadX 10061 458752 61440 61440 NT_STATUS_OK
ReadX 10061 520192 4096 4096 NT_STATUS_OK
ReadX 10061 524288 61440 61440 NT_STATUS_OK
ReadX 10061 585728 4096 4096 NT_STATUS_OK
ReadX 10061 589824 61440 61440 NT_STATUS_OK
ReadX 10061 651264 4096 4096 NT_STATUS_OK
ReadX 10061 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10062 NT_STATUS_OK
ReadX 10062 0 61440 61440 NT_STATUS_OK
ReadX 10062 61440 4096 4096 NT_STATUS_OK
ReadX 10062 65536 61440 61440 NT_STATUS_OK
ReadX 10062 126976 4096 4096 NT_STATUS_OK
ReadX 10062 131072 61440 61440 NT_STATUS_OK
ReadX 10062 192512 4096 4096 NT_STATUS_OK
ReadX 10062 196608 61440 61440 NT_STATUS_OK
ReadX 10062 258048 4096 4096 NT_STATUS_OK
ReadX 10062 262144 61440 61440 NT_STATUS_OK
ReadX 10062 323584 4096 4096 NT_STATUS_OK
ReadX 10062 327680 61440 61440 NT_STATUS_OK
ReadX 10062 389120 4096 4096 NT_STATUS_OK
ReadX 10062 393216 61440 61440 NT_STATUS_OK
ReadX 10062 454656 4096 4096 NT_STATUS_OK
ReadX 10062 458752 61440 61440 NT_STATUS_OK
ReadX 10062 520192 4096 4096 NT_STATUS_OK
ReadX 10062 524288 61440 61440 NT_STATUS_OK
ReadX 10062 585728 4096 4096 NT_STATUS_OK
ReadX 10062 589824 61440 61440 NT_STATUS_OK
ReadX 10062 651264 4096 4096 NT_STATUS_OK
ReadX 10062 655360 61440 61440 NT_STATUS_OK
ReadX 10062 716800 4096 4096 NT_STATUS_OK
ReadX 10062 720896 61440 61440 NT_STATUS_OK
ReadX 10062 782336 4096 4096 NT_STATUS_OK
ReadX 10062 786432 61440 61440 NT_STATUS_OK
ReadX 10062 847872 4096 4096 NT_STATUS_OK
ReadX 10062 851968 61440 61440 NT_STATUS_OK
ReadX 10062 913408 4096 4096 NT_STATUS_OK
ReadX 10062 917504 61440 61440 NT_STATUS_OK
ReadX 10062 978944 4096 4096 NT_STATUS_OK
ReadX 10062 983040 61440 61440 NT_STATUS_OK
ReadX 10062 1044480 4096 4096 NT_STATUS_OK
ReadX 10062 1048576 61440 61440 NT_STATUS_OK
ReadX 10062 1110016 4096 4096 NT_STATUS_OK
ReadX 10062 1114112 61440 61440 NT_STATUS_OK
ReadX 10062 1175552 4096 4096 NT_STATUS_OK
ReadX 10062 1179648 61440 61440 NT_STATUS_OK
ReadX 10062 1241088 4096 4096 NT_STATUS_OK
ReadX 10062 1245184 61440 61440 NT_STATUS_OK
ReadX 10062 1306624 4096 4096 NT_STATUS_OK
ReadX 10062 1310720 61440 61440 NT_STATUS_OK
ReadX 10062 1372160 4096 4096 NT_STATUS_OK
ReadX 10062 1376256 61440 61440 NT_STATUS_OK
ReadX 10062 1437696 4096 4096 NT_STATUS_OK
ReadX 10062 1441792 61440 61440 NT_STATUS_OK
ReadX 10062 1503232 4096 4096 NT_STATUS_OK
ReadX 10062 1507328 61440 61440 NT_STATUS_OK
ReadX 10062 1568768 4096 4096 NT_STATUS_OK
ReadX 10062 1572864 61440 61440 NT_STATUS_OK
ReadX 10062 1634304 4096 4096 NT_STATUS_OK
ReadX 10062 1638400 61440 61440 NT_STATUS_OK
ReadX 10062 1699840 4096 4096 NT_STATUS_OK
ReadX 10062 1703936 61440 61440 NT_STATUS_OK
ReadX 10062 1765376 4096 4096 NT_STATUS_OK
ReadX 10062 1769472 61440 61440 NT_STATUS_OK
ReadX 10062 1830912 4096 4096 NT_STATUS_OK
ReadX 10062 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10063 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10064 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10065 NT_STATUS_OK
ReadX 10065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10066 NT_STATUS_OK
ReadX 10066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10067 NT_STATUS_OK
ReadX 10067 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10068 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10069 NT_STATUS_OK
QUERY_FILE_INFORMATION 10069 1004 NT_STATUS_OK
WriteX 10069 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10069 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10070 NT_STATUS_OK
Close 10070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10071 NT_STATUS_OK
WriteX 10071 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10071 258 NT_STATUS_OK
WriteX 10071 0 491 491 NT_STATUS_OK
Close 10071 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10072 NT_STATUS_OK
ReadX 10072 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10069 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10074 NT_STATUS_OK
Close 10074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10075 NT_STATUS_OK
WriteX 10075 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10075 258 NT_STATUS_OK
WriteX 10075 0 543 543 NT_STATUS_OK
Close 10075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10076 NT_STATUS_OK
ReadX 10076 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10060 NT_STATUS_OK
Close 10061 NT_STATUS_OK
Close 10062 NT_STATUS_OK
Close 10076 NT_STATUS_OK
Close 10064 NT_STATUS_OK
Close 10065 NT_STATUS_OK
Close 10066 NT_STATUS_OK
Close 10067 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10079 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10080 NT_STATUS_OK
ReadX 10080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10081 NT_STATUS_OK
ReadX 10081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10082 NT_STATUS_OK
ReadX 10082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10083 NT_STATUS_OK
ReadX 10083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10084 NT_STATUS_OK
ReadX 10084 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10088 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10089 NT_STATUS_OK
QUERY_FILE_INFORMATION 10089 1004 NT_STATUS_OK
WriteX 10089 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10089 258 NT_STATUS_OK
WriteX 10089 0 2048 2048 NT_STATUS_OK
Close 10089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10090 NT_STATUS_OK
ReadX 10090 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10090 0 4096 4096 NT_STATUS_OK
Flush 10090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10090 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10094 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10095 NT_STATUS_OK
WriteX 10095 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10095 258 NT_STATUS_OK
WriteX 10095 0 2048 2048 NT_STATUS_OK
Close 10095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10096 NT_STATUS_OK
ReadX 10096 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10100 NT_STATUS_OK
Close 10100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10101 NT_STATUS_OK
WriteX 10101 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10101 258 NT_STATUS_OK
WriteX 10101 0 2048 2048 NT_STATUS_OK
Close 10101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10102 NT_STATUS_OK
ReadX 10102 0 2048 2048 NT_STATUS_OK
ReadX 10080 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10084 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10096 0 4096 4096 NT_STATUS_OK
WriteX 10080 0 8192 8192 NT_STATUS_OK
WriteX 10081 0 4096 4096 NT_STATUS_OK
WriteX 10082 0 4096 4096 NT_STATUS_OK
ReadX 10096 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10105 NT_STATUS_OK
ReadX 10105 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10106 NT_STATUS_OK
QUERY_FILE_INFORMATION 10106 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10105 NT_STATUS_OK
Close 10081 NT_STATUS_OK
Close 10082 NT_STATUS_OK
Close 10083 NT_STATUS_OK
Close 10096 NT_STATUS_OK
Close 10080 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10108 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10109 NT_STATUS_OK
ReadX 10109 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10110 NT_STATUS_OK
ReadX 10110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10111 NT_STATUS_OK
ReadX 10111 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10112 NT_STATUS_OK
ReadX 10112 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10113 NT_STATUS_OK
ReadX 10113 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10114 NT_STATUS_OK
ReadX 10114 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10115 NT_STATUS_OK
ReadX 10115 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10116 NT_STATUS_OK
ReadX 10116 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10117 NT_STATUS_OK
ReadX 10117 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10118 NT_STATUS_OK
ReadX 10118 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10119 NT_STATUS_OK
ReadX 10119 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10120 NT_STATUS_OK
ReadX 10120 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10121 NT_STATUS_OK
ReadX 10121 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10125 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10126 NT_STATUS_OK
QUERY_FILE_INFORMATION 10126 1004 NT_STATUS_OK
WriteX 10126 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10126 258 NT_STATUS_OK
WriteX 10126 0 2048 2048 NT_STATUS_OK
Close 10126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10127 NT_STATUS_OK
ReadX 10127 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10117 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10128 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10129 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10129 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10133 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10134 NT_STATUS_OK
QUERY_FILE_INFORMATION 10134 1004 NT_STATUS_OK
WriteX 10134 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10134 258 NT_STATUS_OK
WriteX 10134 0 2048 2048 NT_STATUS_OK
Close 10134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10135 NT_STATUS_OK
ReadX 10135 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10127 0 4096 4096 NT_STATUS_OK
Flush 10127 NT_STATUS_OK
WriteX 10135 0 4096 4096 NT_STATUS_OK
Flush 10135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10127 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10135 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10129 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10136 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10137 NT_STATUS_OK
WriteX 10137 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10137 258 NT_STATUS_OK
WriteX 10137 0 4096 4096 NT_STATUS_OK
Close 10137 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10138 NT_STATUS_OK
ReadX 10138 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10139 NT_STATUS_OK
Close 10139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10140 NT_STATUS_OK
WriteX 10140 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10140 258 NT_STATUS_OK
WriteX 10140 0 4096 4096 NT_STATUS_OK
Close 10140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10141 NT_STATUS_OK
ReadX 10141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10141 0 4096 4096 NT_STATUS_OK
Close 10138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10121 NT_STATUS_OK
Close 10115 NT_STATUS_OK
Close 10129 NT_STATUS_OK
Close 10118 NT_STATUS_OK
Close 10119 NT_STATUS_OK
Close 10120 NT_STATUS_OK
Close 10116 NT_STATUS_OK
Close 10109 NT_STATUS_OK
Close 10110 NT_STATUS_OK
Close 10113 NT_STATUS_OK
Close 10114 NT_STATUS_OK
Close 10111 NT_STATUS_OK
Close 10112 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10144 NT_STATUS_OK
Close 10144 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10146 NT_STATUS_OK
ReadX 10146 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10147 NT_STATUS_OK
Close 10147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10148 NT_STATUS_OK
WriteX 10148 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10148 258 NT_STATUS_OK
WriteX 10148 0 2048 2048 NT_STATUS_OK
Close 10148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10149 NT_STATUS_OK
ReadX 10149 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10150 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10150 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10151 NT_STATUS_OK
ReadX 10151 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10152 NT_STATUS_OK
ReadX 10152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10153 NT_STATUS_OK
ReadX 10153 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10154 NT_STATUS_OK
ReadX 10154 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10155 NT_STATUS_OK
ReadX 10155 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10156 NT_STATUS_OK
ReadX 10156 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10158 NT_STATUS_OK
ReadX 10158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10159 NT_STATUS_OK
ReadX 10159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10160 NT_STATUS_OK
ReadX 10160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10161 NT_STATUS_OK
ReadX 10161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10162 NT_STATUS_OK
ReadX 10162 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10163 NT_STATUS_OK
QUERY_FILE_INFORMATION 10163 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10146 NT_STATUS_OK
Close 10149 NT_STATUS_OK
Close 10161 NT_STATUS_OK
Close 10156 NT_STATUS_OK
Close 10157 NT_STATUS_OK
Close 10158 NT_STATUS_OK
Close 10159 NT_STATUS_OK
Close 10160 NT_STATUS_OK
Close 10162 NT_STATUS_OK
Close 10150 NT_STATUS_OK
Close 10151 NT_STATUS_OK
Close 10154 NT_STATUS_OK
Close 10155 NT_STATUS_OK
Close 10152 NT_STATUS_OK
Close 10153 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10165 NT_STATUS_OK
QUERY_FILE_INFORMATION 10165 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10167 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10168 NT_STATUS_OK
ReadX 10168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10169 NT_STATUS_OK
ReadX 10169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10170 NT_STATUS_OK
ReadX 10170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10171 NT_STATUS_OK
ReadX 10171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10172 NT_STATUS_OK
ReadX 10172 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10173 NT_STATUS_OK
ReadX 10173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10174 NT_STATUS_OK
ReadX 10174 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10175 NT_STATUS_OK
ReadX 10175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10176 NT_STATUS_OK
ReadX 10176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10177 NT_STATUS_OK
ReadX 10177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10178 NT_STATUS_OK
ReadX 10178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10179 NT_STATUS_OK
ReadX 10179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10180 NT_STATUS_OK
ReadX 10180 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10184 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10185 NT_STATUS_OK
QUERY_FILE_INFORMATION 10185 1004 NT_STATUS_OK
WriteX 10185 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10185 258 NT_STATUS_OK
WriteX 10185 0 2048 2048 NT_STATUS_OK
Close 10185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10186 NT_STATUS_OK
ReadX 10186 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10187 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10188 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10188 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10189 NT_STATUS_OK
ReadX 10189 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10190 NT_STATUS_OK
ReadX 10190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10191 NT_STATUS_OK
ReadX 10191 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10192 NT_STATUS_OK
ReadX 10192 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10196 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10197 NT_STATUS_OK
QUERY_FILE_INFORMATION 10197 1004 NT_STATUS_OK
WriteX 10197 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10197 258 NT_STATUS_OK
WriteX 10197 0 2048 2048 NT_STATUS_OK
Close 10197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10198 NT_STATUS_OK
ReadX 10198 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10173 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10199 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10200 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10200 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10204 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10205 NT_STATUS_OK
QUERY_FILE_INFORMATION 10205 1004 NT_STATUS_OK
WriteX 10205 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10205 258 NT_STATUS_OK
WriteX 10205 0 2048 2048 NT_STATUS_OK
Close 10205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10206 NT_STATUS_OK
ReadX 10206 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10186 0 4096 4096 NT_STATUS_OK
Flush 10186 NT_STATUS_OK
WriteX 10198 0 4096 4096 NT_STATUS_OK
Flush 10198 NT_STATUS_OK
WriteX 10206 0 4096 4096 NT_STATUS_OK
Flush 10206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10186 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10198 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10206 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10188 4096 16384 16384 NT_STATUS_OK
ReadX 10168 4096 16384 16384 NT_STATUS_OK
ReadX 10200 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10207 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10208 NT_STATUS_OK
ReadX 10208 0 2048 2048 NT_STATUS_OK
WriteX 10208 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10209 NT_STATUS_OK
QUERY_FILE_INFORMATION 10209 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10208 NT_STATUS_OK
Close 10192 NT_STATUS_OK
Close 10180 NT_STATUS_OK
Close 10172 NT_STATUS_OK
Close 10188 NT_STATUS_OK
Close 10189 NT_STATUS_OK
Close 10190 NT_STATUS_OK
Close 10191 NT_STATUS_OK
Close 10179 NT_STATUS_OK
Close 10200 NT_STATUS_OK
Close 10174 NT_STATUS_OK
Close 10177 NT_STATUS_OK
Close 10178 NT_STATUS_OK
Close 10175 NT_STATUS_OK
Close 10176 NT_STATUS_OK
Close 10168 NT_STATUS_OK
Close 10169 NT_STATUS_OK
Close 10170 NT_STATUS_OK
Close 10171 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10211 NT_STATUS_OK
QUERY_FILE_INFORMATION 10211 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10213 NT_STATUS_OK
QUERY_FILE_INFORMATION 10213 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10215 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10216 NT_STATUS_OK
ReadX 10216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10217 NT_STATUS_OK
ReadX 10217 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10218 NT_STATUS_OK
ReadX 10218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10219 NT_STATUS_OK
ReadX 10219 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10220 NT_STATUS_OK
ReadX 10220 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10216 4096 16384 16384 NT_STATUS_OK
WriteX 10216 0 4096 4096 NT_STATUS_OK
WriteX 10217 0 4096 4096 NT_STATUS_OK
WriteX 10218 0 4096 4096 NT_STATUS_OK
WriteX 10219 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10221 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10222 NT_STATUS_OK
ReadX 10222 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10223 NT_STATUS_OK
ReadX 10223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10224 NT_STATUS_OK
ReadX 10224 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10225 NT_STATUS_OK
ReadX 10225 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10226 NT_STATUS_OK
ReadX 10226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10227 NT_STATUS_OK
ReadX 10227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10228 NT_STATUS_OK
ReadX 10228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10229 NT_STATUS_OK
ReadX 10229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10230 NT_STATUS_OK
ReadX 10230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10232 NT_STATUS_OK
ReadX 10232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10234 NT_STATUS_OK
ReadX 10234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10235 NT_STATUS_OK
ReadX 10235 0 8192 8192 NT_STATUS_OK
ReadX 10222 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10236 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10236 0 4096 4096 NT_STATUS_OK
ReadX 10236 4096 4096 4096 NT_STATUS_OK
ReadX 10236 8192 4096 4096 NT_STATUS_OK
WriteX 10222 0 4096 4096 NT_STATUS_OK
WriteX 10223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10237 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10237 0 4096 4096 NT_STATUS_OK
ReadX 10237 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10216 0 4096 4096 NT_STATUS_OK
WriteX 10217 0 4096 4096 NT_STATUS_OK
WriteX 10218 0 4096 4096 NT_STATUS_OK
WriteX 10219 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10241 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10241 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10242 NT_STATUS_OK
QUERY_FILE_INFORMATION 10242 1004 NT_STATUS_OK
WriteX 10242 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10242 258 NT_STATUS_OK
WriteX 10242 0 2048 2048 NT_STATUS_OK
Close 10242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10243 NT_STATUS_OK
ReadX 10243 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10243 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10243 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10244 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10245 NT_STATUS_OK
ReadX 10245 0 4096 4096 NT_STATUS_OK
ReadX 10245 4096 4096 4096 NT_STATUS_OK
WriteX 10245 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10243 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10247 NT_STATUS_OK
ReadX 10247 0 4096 4096 NT_STATUS_OK
ReadX 10247 4096 4096 4096 NT_STATUS_OK
WriteX 10247 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10248 NT_STATUS_OK
QUERY_FILE_INFORMATION 10248 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10248 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10235 NT_STATUS_OK
Close 10220 NT_STATUS_OK
Close 10216 NT_STATUS_OK
Close 10217 NT_STATUS_OK
Close 10218 NT_STATUS_OK
Close 10219 NT_STATUS_OK
Close 10228 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Close 10229 NT_STATUS_OK
Close 10230 NT_STATUS_OK
Close 10231 NT_STATUS_OK
Close 10232 NT_STATUS_OK
Close 10234 NT_STATUS_OK
Close 10222 NT_STATUS_OK
Close 10223 NT_STATUS_OK
Close 10226 NT_STATUS_OK
Close 10227 NT_STATUS_OK
Close 10224 NT_STATUS_OK
Close 10225 NT_STATUS_OK
Close 10247 NT_STATUS_OK
Close 10236 NT_STATUS_OK
Close 10237 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10250 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10250 0 4096 4096 NT_STATUS_OK
ReadX 10250 4096 4096 4096 NT_STATUS_OK
ReadX 10250 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10251 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10252 NT_STATUS_OK
ReadX 10252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10253 NT_STATUS_OK
ReadX 10253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10254 NT_STATUS_OK
ReadX 10254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10255 NT_STATUS_OK
ReadX 10255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10256 NT_STATUS_OK
ReadX 10256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10257 NT_STATUS_OK
ReadX 10257 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10258 NT_STATUS_OK
ReadX 10258 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10259 NT_STATUS_OK
ReadX 10259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10260 NT_STATUS_OK
ReadX 10260 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10261 NT_STATUS_OK
ReadX 10261 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10262 NT_STATUS_OK
ReadX 10262 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10263 NT_STATUS_OK
ReadX 10263 0 4096 4096 NT_STATUS_OK
ReadX 10251 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10267 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10268 NT_STATUS_OK
QUERY_FILE_INFORMATION 10268 1004 NT_STATUS_OK
WriteX 10268 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10268 258 NT_STATUS_OK
WriteX 10268 0 2048 2048 NT_STATUS_OK
Close 10268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10269 NT_STATUS_OK
ReadX 10269 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10269 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10273 NT_STATUS_OK
Close 10273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10274 NT_STATUS_OK
QUERY_FILE_INFORMATION 10274 1004 NT_STATUS_OK
WriteX 10274 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10274 258 NT_STATUS_OK
WriteX 10274 0 2048 2048 NT_STATUS_OK
Close 10274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10275 NT_STATUS_OK
ReadX 10275 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10275 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10258 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10276 NT_STATUS_OK
QUERY_FILE_INFORMATION 10276 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10262 NT_STATUS_OK
Close 10257 NT_STATUS_OK
Close 10263 NT_STATUS_OK
Close 10251 NT_STATUS_OK
Close 10252 NT_STATUS_OK
Close 10255 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10253 NT_STATUS_OK
Close 10254 NT_STATUS_OK
Close 10258 NT_STATUS_OK
Close 10259 NT_STATUS_OK
Close 10260 NT_STATUS_OK
Close 10261 NT_STATUS_OK
Close 10250 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10278 NT_STATUS_OK
QUERY_FILE_INFORMATION 10278 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10280 NT_STATUS_OK
ReadX 10280 61440 4096 4096 NT_STATUS_OK
ReadX 10280 126976 4096 4096 NT_STATUS_OK
WriteX 10280 0 65536 65536 NT_STATUS_OK
WriteX 10280 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10281 NT_STATUS_OK
ReadX 10281 61440 4096 4096 NT_STATUS_OK
ReadX 10281 126976 4096 4096 NT_STATUS_OK
ReadX 10281 192512 4096 4096 NT_STATUS_OK
ReadX 10281 258048 4096 4096 NT_STATUS_OK
WriteX 10281 0 65536 65536 NT_STATUS_OK
WriteX 10281 65536 65536 65536 NT_STATUS_OK
WriteX 10281 131072 65536 65536 NT_STATUS_OK
WriteX 10281 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10282 NT_STATUS_OK
ReadX 10282 61440 4096 4096 NT_STATUS_OK
ReadX 10282 126976 4096 4096 NT_STATUS_OK
ReadX 10282 192512 4096 4096 NT_STATUS_OK
ReadX 10282 258048 4096 4096 NT_STATUS_OK
ReadX 10282 323584 4096 4096 NT_STATUS_OK
ReadX 10282 389120 4096 4096 NT_STATUS_OK
ReadX 10282 454656 4096 4096 NT_STATUS_OK
ReadX 10282 520192 4096 4096 NT_STATUS_OK
WriteX 10282 0 65536 65536 NT_STATUS_OK
WriteX 10282 65536 65536 65536 NT_STATUS_OK
WriteX 10282 131072 65536 65536 NT_STATUS_OK
WriteX 10282 196608 65536 65536 NT_STATUS_OK
WriteX 10282 262144 65536 65536 NT_STATUS_OK
WriteX 10282 327680 65536 65536 NT_STATUS_OK
WriteX 10282 393216 65536 65536 NT_STATUS_OK
WriteX 10282 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10283 NT_STATUS_OK
ReadX 10283 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10283 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10283 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10283 8192 4096 4096 NT_STATUS_OK
ReadX 10283 12288 4096 4096 NT_STATUS_OK
ReadX 10283 16384 4096 4096 NT_STATUS_OK
ReadX 10283 20480 4096 4096 NT_STATUS_OK
ReadX 10283 24576 4096 4096 NT_STATUS_OK
ReadX 10283 28672 4096 4096 NT_STATUS_OK
ReadX 10283 32768 4096 4096 NT_STATUS_OK
ReadX 10283 36864 4096 4096 NT_STATUS_OK
ReadX 10283 40960 4096 4096 NT_STATUS_OK
ReadX 10283 45056 4096 4096 NT_STATUS_OK
ReadX 10283 49152 4096 4096 NT_STATUS_OK
ReadX 10283 53248 4096 4096 NT_STATUS_OK
ReadX 10283 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10283 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10284 NT_STATUS_OK
Close 10284 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10280 NT_STATUS_OK
Close 10281 NT_STATUS_OK
Close 10282 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10286 NT_STATUS_OK
WriteX 10286 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10286 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10286 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10286 1004 NT_STATUS_OK
WriteX 10286 0 57088 57088 NT_STATUS_OK
WriteX 10286 0 4096 4096 NT_STATUS_OK
Flush 10286 NT_STATUS_OK
Close 10283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10287 NT_STATUS_OK
SET_FILE_INFORMATION 10287 1004 NT_STATUS_OK
Close 10287 NT_STATUS_OK
SET_FILE_INFORMATION 10286 1004 NT_STATUS_OK
WriteX 10286 0 4096 4096 NT_STATUS_OK
Close 10286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10288 NT_STATUS_OK
Close 10288 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10290 NT_STATUS_OK
ReadX 10290 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10290 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10291 NT_STATUS_OK
WriteX 10291 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10291 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10291 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10291 1004 NT_STATUS_OK
WriteX 10291 0 51456 51456 NT_STATUS_OK
WriteX 10291 0 4096 4096 NT_STATUS_OK
Flush 10291 NT_STATUS_OK
SET_FILE_INFORMATION 10291 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10291 1004 NT_STATUS_OK
WriteX 10291 0 4096 4096 NT_STATUS_OK
Close 10291 NT_STATUS_OK
Close 10290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10293 NT_STATUS_OK
Close 10293 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10295 NT_STATUS_OK
ReadX 10295 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10295 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10297 NT_STATUS_OK
Close 10297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10300 NT_STATUS_OK
WriteX 10300 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10300 258 NT_STATUS_OK
WriteX 10300 0 53077 53077 NT_STATUS_OK
Close 10300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10301 NT_STATUS_OK
WriteX 10301 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10301 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10301 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10301 1004 NT_STATUS_OK
WriteX 10301 0 65536 65536 NT_STATUS_OK
WriteX 10301 65536 1856 1856 NT_STATUS_OK
WriteX 10301 0 4096 4096 NT_STATUS_OK
Flush 10301 NT_STATUS_OK
SET_FILE_INFORMATION 10301 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10301 1004 NT_STATUS_OK
WriteX 10301 0 4096 4096 NT_STATUS_OK
Close 10301 NT_STATUS_OK
Close 10295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10303 NT_STATUS_OK
Close 10303 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10305 NT_STATUS_OK
ReadX 10305 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10307 NT_STATUS_OK
Close 10307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10310 NT_STATUS_OK
WriteX 10310 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10310 258 NT_STATUS_OK
WriteX 10310 0 7983 7983 NT_STATUS_OK
Close 10310 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10312 NT_STATUS_OK
Close 10312 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10315 NT_STATUS_OK
WriteX 10315 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10315 258 NT_STATUS_OK
WriteX 10315 0 65536 65536 NT_STATUS_OK
WriteX 10315 65536 65536 65536 NT_STATUS_OK
WriteX 10315 131072 65536 65536 NT_STATUS_OK
WriteX 10315 196608 65536 65536 NT_STATUS_OK
WriteX 10315 262144 65536 65536 NT_STATUS_OK
WriteX 10315 327680 65536 65536 NT_STATUS_OK
WriteX 10315 393216 65536 65536 NT_STATUS_OK
WriteX 10315 458752 46731 46731 NT_STATUS_OK
Close 10315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10316 NT_STATUS_OK
WriteX 10316 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10316 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10305 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10316 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10316 1004 NT_STATUS_OK
WriteX 10316 0 65536 65536 NT_STATUS_OK
WriteX 10316 65536 22848 22848 NT_STATUS_OK
WriteX 10316 0 4096 4096 NT_STATUS_OK
Flush 10316 NT_STATUS_OK
SET_FILE_INFORMATION 10316 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10316 1004 NT_STATUS_OK
WriteX 10316 0 4096 4096 NT_STATUS_OK
Close 10316 NT_STATUS_OK
Close 10305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10318 NT_STATUS_OK
Close 10318 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10320 NT_STATUS_OK
ReadX 10320 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10320 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10321 NT_STATUS_OK
ReadX 10321 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10321 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10321 1004 NT_STATUS_OK
ReadX 10321 8192 4096 4096 NT_STATUS_OK
ReadX 10321 12288 4096 4096 NT_STATUS_OK
ReadX 10321 16384 4096 4096 NT_STATUS_OK
ReadX 10321 20480 4096 4096 NT_STATUS_OK
ReadX 10321 24576 4096 4096 NT_STATUS_OK
ReadX 10321 28672 4096 4096 NT_STATUS_OK
ReadX 10321 32768 4096 4096 NT_STATUS_OK
ReadX 10321 36864 4096 4096 NT_STATUS_OK
ReadX 10321 40960 4096 4096 NT_STATUS_OK
ReadX 10321 45056 4096 4096 NT_STATUS_OK
ReadX 10321 49152 4096 4096 NT_STATUS_OK
ReadX 10321 53248 4096 4096 NT_STATUS_OK
ReadX 10321 57344 4096 4096 NT_STATUS_OK
ReadX 10321 61440 4096 4096 NT_STATUS_OK
ReadX 10321 65536 4096 4096 NT_STATUS_OK
ReadX 10321 69632 4096 4096 NT_STATUS_OK
ReadX 10321 73728 4096 4096 NT_STATUS_OK
ReadX 10321 77824 4096 4096 NT_STATUS_OK
ReadX 10321 81920 4096 4096 NT_STATUS_OK
ReadX 10321 86016 4096 4096 NT_STATUS_OK
ReadX 10321 90112 4096 4096 NT_STATUS_OK
ReadX 10321 94208 4096 4096 NT_STATUS_OK
ReadX 10321 98304 4096 4096 NT_STATUS_OK
ReadX 10321 102400 4096 4096 NT_STATUS_OK
ReadX 10321 106496 4096 4096 NT_STATUS_OK
ReadX 10321 110592 4096 4096 NT_STATUS_OK
ReadX 10321 114688 4096 4096 NT_STATUS_OK
ReadX 10321 118784 4096 4096 NT_STATUS_OK
ReadX 10321 122880 4096 4096 NT_STATUS_OK
ReadX 10321 126976 4096 4096 NT_STATUS_OK
ReadX 10321 131072 4096 4096 NT_STATUS_OK
ReadX 10321 135168 4096 4096 NT_STATUS_OK
ReadX 10321 139264 4096 4096 NT_STATUS_OK
ReadX 10321 143360 4096 4096 NT_STATUS_OK
ReadX 10321 147456 4096 4096 NT_STATUS_OK
ReadX 10321 151552 4096 4096 NT_STATUS_OK
ReadX 10321 155648 4096 4096 NT_STATUS_OK
ReadX 10321 159744 4096 4096 NT_STATUS_OK
ReadX 10321 163840 4096 4096 NT_STATUS_OK
ReadX 10321 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10321 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10322 NT_STATUS_OK
Close 10322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10320 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10324 NT_STATUS_OK
WriteX 10324 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10324 258 NT_STATUS_OK
Close 10321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10325 NT_STATUS_OK
SET_FILE_INFORMATION 10325 1004 NT_STATUS_OK
Close 10325 NT_STATUS_OK
WriteX 10324 0 42388 42388 NT_STATUS_OK
Close 10324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10326 NT_STATUS_OK
Close 10326 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10328 NT_STATUS_OK
ReadX 10328 0 4096 4096 NT_STATUS_OK
ReadX 10328 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10329 NT_STATUS_OK
WriteX 10329 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10329 258 NT_STATUS_OK
SET_FILE_INFORMATION 10329 1004 NT_STATUS_OK
WriteX 10329 0 42652 42652 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Close 10328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10331 NT_STATUS_OK
Close 10331 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10333 NT_STATUS_OK
ReadX 10333 0 4096 4096 NT_STATUS_OK
ReadX 10333 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10335 NT_STATUS_OK
Close 10335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10338 NT_STATUS_OK
WriteX 10338 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10338 258 NT_STATUS_OK
WriteX 10338 0 65536 65536 NT_STATUS_OK
WriteX 10338 65536 49 49 NT_STATUS_OK
Close 10338 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10339 NT_STATUS_OK
ReadX 10339 0 61440 61440 NT_STATUS_OK
ReadX 10339 61440 4096 4096 NT_STATUS_OK
ReadX 10339 65536 61440 61440 NT_STATUS_OK
ReadX 10339 126976 4096 4096 NT_STATUS_OK
ReadX 10339 131072 61440 61440 NT_STATUS_OK
ReadX 10339 192512 4096 4096 NT_STATUS_OK
ReadX 10339 196608 61440 61440 NT_STATUS_OK
ReadX 10339 258048 4096 4096 NT_STATUS_OK
ReadX 10339 262144 61440 61440 NT_STATUS_OK
ReadX 10339 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10340 NT_STATUS_OK
ReadX 10340 0 61440 61440 NT_STATUS_OK
ReadX 10340 61440 4096 4096 NT_STATUS_OK
ReadX 10340 65536 61440 61440 NT_STATUS_OK
ReadX 10340 126976 4096 4096 NT_STATUS_OK
ReadX 10340 131072 61440 61440 NT_STATUS_OK
ReadX 10340 192512 4096 4096 NT_STATUS_OK
ReadX 10340 196608 61440 61440 NT_STATUS_OK
ReadX 10340 258048 4096 4096 NT_STATUS_OK
ReadX 10340 262144 61440 61440 NT_STATUS_OK
ReadX 10340 323584 4096 4096 NT_STATUS_OK
ReadX 10340 327680 61440 61440 NT_STATUS_OK
ReadX 10340 389120 4096 4096 NT_STATUS_OK
ReadX 10340 393216 61440 61440 NT_STATUS_OK
ReadX 10340 454656 4096 4096 NT_STATUS_OK
ReadX 10340 458752 61440 61440 NT_STATUS_OK
ReadX 10340 520192 4096 4096 NT_STATUS_OK
ReadX 10340 524288 61440 61440 NT_STATUS_OK
ReadX 10340 585728 4096 4096 NT_STATUS_OK
ReadX 10340 589824 61440 61440 NT_STATUS_OK
ReadX 10340 651264 4096 4096 NT_STATUS_OK
ReadX 10340 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10341 NT_STATUS_OK
ReadX 10341 0 61440 61440 NT_STATUS_OK
ReadX 10341 61440 4096 4096 NT_STATUS_OK
ReadX 10341 65536 61440 61440 NT_STATUS_OK
ReadX 10341 126976 4096 4096 NT_STATUS_OK
ReadX 10341 131072 61440 61440 NT_STATUS_OK
ReadX 10341 192512 4096 4096 NT_STATUS_OK
ReadX 10341 196608 61440 61440 NT_STATUS_OK
ReadX 10341 258048 4096 4096 NT_STATUS_OK
ReadX 10341 262144 61440 61440 NT_STATUS_OK
ReadX 10341 323584 4096 4096 NT_STATUS_OK
ReadX 10341 327680 61440 61440 NT_STATUS_OK
ReadX 10341 389120 4096 4096 NT_STATUS_OK
ReadX 10341 393216 61440 61440 NT_STATUS_OK
ReadX 10341 454656 4096 4096 NT_STATUS_OK
ReadX 10341 458752 61440 61440 NT_STATUS_OK
ReadX 10341 520192 4096 4096 NT_STATUS_OK
ReadX 10341 524288 61440 61440 NT_STATUS_OK
ReadX 10341 585728 4096 4096 NT_STATUS_OK
ReadX 10341 589824 61440 61440 NT_STATUS_OK
ReadX 10341 651264 4096 4096 NT_STATUS_OK
ReadX 10341 655360 61440 61440 NT_STATUS_OK
ReadX 10341 716800 4096 4096 NT_STATUS_OK
ReadX 10341 720896 61440 61440 NT_STATUS_OK
ReadX 10341 782336 4096 4096 NT_STATUS_OK
ReadX 10341 786432 61440 61440 NT_STATUS_OK
ReadX 10341 847872 4096 4096 NT_STATUS_OK
ReadX 10341 851968 61440 61440 NT_STATUS_OK
ReadX 10341 913408 4096 4096 NT_STATUS_OK
ReadX 10341 917504 61440 61440 NT_STATUS_OK
ReadX 10341 978944 4096 4096 NT_STATUS_OK
ReadX 10341 983040 61440 61440 NT_STATUS_OK
ReadX 10341 1044480 4096 4096 NT_STATUS_OK
ReadX 10341 1048576 61440 61440 NT_STATUS_OK
ReadX 10341 1110016 4096 4096 NT_STATUS_OK
ReadX 10341 1114112 61440 61440 NT_STATUS_OK
ReadX 10341 1175552 4096 4096 NT_STATUS_OK
ReadX 10341 1179648 61440 61440 NT_STATUS_OK
ReadX 10341 1241088 4096 4096 NT_STATUS_OK
ReadX 10341 1245184 61440 61440 NT_STATUS_OK
ReadX 10341 1306624 4096 4096 NT_STATUS_OK
ReadX 10341 1310720 61440 61440 NT_STATUS_OK
ReadX 10341 1372160 4096 4096 NT_STATUS_OK
ReadX 10341 1376256 61440 61440 NT_STATUS_OK
ReadX 10341 1437696 4096 4096 NT_STATUS_OK
ReadX 10341 1441792 61440 61440 NT_STATUS_OK
ReadX 10341 1503232 4096 4096 NT_STATUS_OK
ReadX 10341 1507328 61440 61440 NT_STATUS_OK
ReadX 10341 1568768 4096 4096 NT_STATUS_OK
ReadX 10341 1572864 61440 61440 NT_STATUS_OK
ReadX 10341 1634304 4096 4096 NT_STATUS_OK
ReadX 10341 1638400 61440 61440 NT_STATUS_OK
ReadX 10341 1699840 4096 4096 NT_STATUS_OK
ReadX 10341 1703936 61440 61440 NT_STATUS_OK
ReadX 10341 1765376 4096 4096 NT_STATUS_OK
ReadX 10341 1769472 61440 61440 NT_STATUS_OK
ReadX 10341 1830912 4096 4096 NT_STATUS_OK
ReadX 10341 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10342 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10343 NT_STATUS_OK
QUERY_FILE_INFORMATION 10343 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10343 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10343 1005 NT_STATUS_OK
ReadX 10343 2156 24 24 NT_STATUS_OK
ReadX 10343 2139 276 276 NT_STATUS_OK
ReadX 10343 2136 14 14 NT_STATUS_OK
ReadX 10343 2136 7 7 NT_STATUS_OK
ReadX 10343 2138 12 12 NT_STATUS_OK
ReadX 10343 2137 8 8 NT_STATUS_OK
ReadX 10343 2135 15 15 NT_STATUS_OK
ReadX 10343 0 16 16 NT_STATUS_OK
ReadX 10343 16 2048 2048 NT_STATUS_OK
ReadX 10343 2064 2048 2048 NT_STATUS_OK
ReadX 10343 257 2048 2048 NT_STATUS_OK
ReadX 10343 385 2048 2048 NT_STATUS_OK
ReadX 10343 513 2048 2048 NT_STATUS_OK
ReadX 10343 641 2048 2048 NT_STATUS_OK
ReadX 10343 769 2048 2048 NT_STATUS_OK
ReadX 10343 897 2048 2048 NT_STATUS_OK
ReadX 10343 1025 2048 2048 NT_STATUS_OK
ReadX 10343 1153 2048 2048 NT_STATUS_OK
ReadX 10343 1281 2048 2048 NT_STATUS_OK
ReadX 10343 1409 2048 2048 NT_STATUS_OK
ReadX 10343 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10345 NT_STATUS_OK
Close 10345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10339 NT_STATUS_OK
Close 10340 NT_STATUS_OK
Close 10341 NT_STATUS_OK
Close 10333 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10348 NT_STATUS_OK
WriteX 10348 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10348 258 NT_STATUS_OK
WriteX 10348 0 10575 10575 NT_STATUS_OK
Flush 10348 NT_STATUS_OK
Close 10348 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10349 NT_STATUS_OK
Close 10349 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10351 NT_STATUS_OK
ReadX 10351 0 4096 4096 NT_STATUS_OK
Close 10343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10353 NT_STATUS_OK
LockX 10353 2147483538 1 NT_STATUS_OK
UnlockX 10353 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10353 1005 NT_STATUS_OK
ReadX 10353 0 512 512 NT_STATUS_OK
ReadX 10353 512 512 512 NT_STATUS_OK
ReadX 10353 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10353 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10353 1004 NT_STATUS_OK
Close 10353 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10354 NT_STATUS_OK
QUERY_FILE_INFORMATION 10354 1005 NT_STATUS_OK
ReadX 10354 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10355 NT_STATUS_OK
LockX 10355 2147483538 1 NT_STATUS_OK
UnlockX 10355 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10355 1005 NT_STATUS_OK
ReadX 10355 0 512 512 NT_STATUS_OK
ReadX 10355 512 512 512 NT_STATUS_OK
ReadX 10355 1024 512 512 NT_STATUS_OK
ReadX 10355 288 20 20 NT_STATUS_OK
ReadX 10355 308 2084 2084 NT_STATUS_OK
ReadX 10355 388 2084 2084 NT_STATUS_OK
ReadX 10355 388 2084 2084 NT_STATUS_OK
ReadX 10342 2157 1386 1386 NT_STATUS_OK
ReadX 10355 2472 399 399 NT_STATUS_OK
ReadX 10355 3072 1536 1536 NT_STATUS_OK
ReadX 10355 544 149 149 NT_STATUS_OK
ReadX 10355 693 485 485 NT_STATUS_OK
Close 10355 NT_STATUS_OK
ReadX 10342 2157 4096 4096 NT_STATUS_OK
ReadX 10342 6253 4096 4096 NT_STATUS_OK
ReadX 10342 10349 4096 4096 NT_STATUS_OK
ReadX 10342 14445 4096 4096 NT_STATUS_OK
ReadX 10342 18541 4096 4096 NT_STATUS_OK
ReadX 10342 22637 256 256 NT_STATUS_OK
ReadX 10342 22893 4096 4096 NT_STATUS_OK
ReadX 10342 26989 4096 4096 NT_STATUS_OK
ReadX 10342 31085 4096 4096 NT_STATUS_OK
ReadX 10342 35181 4096 4096 NT_STATUS_OK
ReadX 10342 39277 4096 4096 NT_STATUS_OK
ReadX 10342 43373 4096 4096 NT_STATUS_OK
ReadX 10342 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10342 2157 1024 1024 NT_STATUS_OK
ReadX 10342 1667 4688 4688 NT_STATUS_OK
ReadX 10342 6355 3516 3516 NT_STATUS_OK
ReadX 10342 9871 16384 16384 NT_STATUS_OK
ReadX 10342 26255 3771 3771 NT_STATUS_OK
ReadX 10342 30026 2048 2048 NT_STATUS_OK
ReadX 10342 32074 1024 1024 NT_STATUS_OK
ReadX 10342 33098 6652 6652 NT_STATUS_OK
ReadX 10342 39750 16384 16384 NT_STATUS_OK
ReadX 10342 56134 10496 10496 NT_STATUS_OK
ReadX 10342 66630 1784 1784 NT_STATUS_OK
ReadX 10342 68414 90 90 NT_STATUS_OK
ReadX 10342 68504 273 273 NT_STATUS_OK
ReadX 10342 68777 1600 1600 NT_STATUS_OK
ReadX 10342 70377 640 640 NT_STATUS_OK
ReadX 10342 71017 1280 1280 NT_STATUS_OK
ReadX 10342 72297 8464 8464 NT_STATUS_OK
ReadX 10342 80761 158 158 NT_STATUS_OK
ReadX 10342 80919 912 912 NT_STATUS_OK
ReadX 10342 81831 1980 1980 NT_STATUS_OK
ReadX 10342 83811 2256 2256 NT_STATUS_OK
ReadX 10342 86067 400 400 NT_STATUS_OK
ReadX 10342 86467 252 252 NT_STATUS_OK
ReadX 10342 86719 42 42 NT_STATUS_OK
ReadX 10342 86761 725 725 NT_STATUS_OK
ReadX 10342 2009 512 512 NT_STATUS_OK
ReadX 10342 3895 9 9 NT_STATUS_OK
ReadX 10342 3781 46 46 NT_STATUS_OK
ReadX 10342 4059 92 92 NT_STATUS_OK
ReadX 10342 3781 92 92 NT_STATUS_OK
ReadX 10342 3986 184 184 NT_STATUS_OK
ReadX 10342 3987 16384 16384 NT_STATUS_OK
ReadX 10342 3902 16384 16384 NT_STATUS_OK
ReadX 10342 3781 10240 10240 NT_STATUS_OK
ReadX 10342 3821 16384 16384 NT_STATUS_OK
ReadX 10342 3891 935 935 NT_STATUS_OK
ReadX 10342 4060 10240 10240 NT_STATUS_OK
ReadX 10342 4059 184 184 NT_STATUS_OK
ReadX 10342 256 184 184 NT_STATUS_OK
ReadX 10342 256 1026 1026 NT_STATUS_OK
ReadX 10342 3901 326 326 NT_STATUS_OK
ReadX 10342 3899 652 652 NT_STATUS_OK
ReadX 10342 256 2 2 NT_STATUS_OK
ReadX 10342 258 4948 4948 NT_STATUS_OK
Close 10342 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10357 NT_STATUS_OK
Close 10357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10360 NT_STATUS_OK
WriteX 10360 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10360 258 NT_STATUS_OK
WriteX 10360 0 65536 65536 NT_STATUS_OK
WriteX 10360 65536 65536 65536 NT_STATUS_OK
WriteX 10360 131072 65536 65536 NT_STATUS_OK
WriteX 10360 196608 65536 65536 NT_STATUS_OK
WriteX 10360 262144 65536 65536 NT_STATUS_OK
WriteX 10360 327680 65536 65536 NT_STATUS_OK
WriteX 10360 393216 65536 65536 NT_STATUS_OK
WriteX 10360 458752 65536 65536 NT_STATUS_OK
WriteX 10360 524288 65536 65536 NT_STATUS_OK
WriteX 10360 589824 35257 35257 NT_STATUS_OK
Close 10360 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10362 NT_STATUS_OK
Close 10362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10365 NT_STATUS_OK
WriteX 10365 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10365 258 NT_STATUS_OK
WriteX 10365 0 65536 65536 NT_STATUS_OK
WriteX 10365 65536 65536 65536 NT_STATUS_OK
WriteX 10365 131072 65536 65536 NT_STATUS_OK
WriteX 10365 196608 65536 65536 NT_STATUS_OK
WriteX 10365 262144 65536 65536 NT_STATUS_OK
WriteX 10365 327680 65536 65536 NT_STATUS_OK
WriteX 10365 393216 65536 65536 NT_STATUS_OK
WriteX 10365 458752 65536 65536 NT_STATUS_OK
WriteX 10365 524288 65536 65536 NT_STATUS_OK
WriteX 10365 589824 57598 57598 NT_STATUS_OK
Close 10365 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10367 NT_STATUS_OK
WriteX 10367 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10367 258 NT_STATUS_OK
WriteX 10367 0 12543 12543 NT_STATUS_OK
Flush 10367 NT_STATUS_OK
Close 10367 NT_STATUS_OK
Close 10351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10369 NT_STATUS_OK
Close 10369 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10371 NT_STATUS_OK
ReadX 10371 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10372 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10373 NT_STATUS_OK
QUERY_FILE_INFORMATION 10373 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10373 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10373 1005 NT_STATUS_OK
ReadX 10373 1938 24 24 NT_STATUS_OK
ReadX 10373 1920 276 276 NT_STATUS_OK
ReadX 10373 1918 14 14 NT_STATUS_OK
ReadX 10373 1918 7 7 NT_STATUS_OK
ReadX 10373 1919 12 12 NT_STATUS_OK
ReadX 10373 1919 8 8 NT_STATUS_OK
ReadX 10373 1917 15 15 NT_STATUS_OK
ReadX 10373 0 16 16 NT_STATUS_OK
ReadX 10373 16 2048 2048 NT_STATUS_OK
ReadX 10373 2064 2048 2048 NT_STATUS_OK
ReadX 10373 257 2048 2048 NT_STATUS_OK
ReadX 10373 385 2048 2048 NT_STATUS_OK
ReadX 10373 513 2048 2048 NT_STATUS_OK
ReadX 10373 641 2048 2048 NT_STATUS_OK
ReadX 10373 769 2048 2048 NT_STATUS_OK
ReadX 10373 897 2048 2048 NT_STATUS_OK
ReadX 10373 1025 2048 2048 NT_STATUS_OK
ReadX 10373 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10375 NT_STATUS_OK
Close 10375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10378 NT_STATUS_OK
WriteX 10378 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10378 258 NT_STATUS_OK
WriteX 10378 0 11588 11588 NT_STATUS_OK
Flush 10378 NT_STATUS_OK
Close 10378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10379 NT_STATUS_OK
Close 10379 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10381 NT_STATUS_OK
ReadX 10381 0 4096 4096 NT_STATUS_OK
Close 10373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10383 NT_STATUS_OK
WriteX 10383 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10383 258 NT_STATUS_OK
WriteX 10383 0 11615 11615 NT_STATUS_OK
Flush 10383 NT_STATUS_OK
Close 10383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10385 NT_STATUS_OK
Close 10385 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10387 NT_STATUS_OK
ReadX 10387 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10389 NT_STATUS_OK
Close 10389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10392 NT_STATUS_OK
WriteX 10392 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10392 258 NT_STATUS_OK
WriteX 10392 0 65536 65536 NT_STATUS_OK
WriteX 10392 65536 16050 16050 NT_STATUS_OK
Close 10392 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10372 1939 64 64 NT_STATUS_OK
ReadX 10372 128 248 248 NT_STATUS_OK
ReadX 10372 128 568 568 NT_STATUS_OK
ReadX 10372 3872 1536 1536 NT_STATUS_OK
ReadX 10372 3456 2560 2560 NT_STATUS_OK
ReadX 10372 3136 512 512 NT_STATUS_OK
ReadX 10372 2880 4096 4096 NT_STATUS_OK
ReadX 10372 3264 3072 3072 NT_STATUS_OK
ReadX 10372 320 4096 4096 NT_STATUS_OK
ReadX 10372 1024 4096 4096 NT_STATUS_OK
ReadX 10372 3616 4096 4096 NT_STATUS_OK
ReadX 10372 1939 64 64 NT_STATUS_OK
ReadX 10372 128 248 248 NT_STATUS_OK
ReadX 10372 128 608 608 NT_STATUS_OK
ReadX 10372 2858 1024 1024 NT_STATUS_OK
ReadX 10372 2810 4096 4096 NT_STATUS_OK
ReadX 10372 2826 4096 4096 NT_STATUS_OK
ReadX 10372 2580 2048 2048 NT_STATUS_OK
ReadX 10372 2800 2560 2560 NT_STATUS_OK
ReadX 10372 2100 4096 4096 NT_STATUS_OK
ReadX 10372 2084 4096 4096 NT_STATUS_OK
ReadX 10372 868 4096 4096 NT_STATUS_OK
ReadX 10372 2324 4096 4096 NT_STATUS_OK
ReadX 10372 884 4096 4096 NT_STATUS_OK
ReadX 10372 2604 1024 1024 NT_STATUS_OK
ReadX 10372 580 4096 4096 NT_STATUS_OK
ReadX 10372 596 4096 4096 NT_STATUS_OK
ReadX 10372 2752 4096 4096 NT_STATUS_OK
ReadX 10372 2842 1024 1024 NT_STATUS_OK
ReadX 10372 660 4096 4096 NT_STATUS_OK
ReadX 10372 2720 4096 4096 NT_STATUS_OK
ReadX 10372 2736 4096 4096 NT_STATUS_OK
ReadX 10372 628 4096 4096 NT_STATUS_OK
ReadX 10372 2704 4096 4096 NT_STATUS_OK
ReadX 10372 1556 4096 4096 NT_STATUS_OK
ReadX 10372 576 4096 4096 NT_STATUS_OK
ReadX 10372 3168 1536 1536 NT_STATUS_OK
ReadX 10372 832 4096 4096 NT_STATUS_OK
ReadX 10372 1088 4096 4096 NT_STATUS_OK
ReadX 10372 1344 4096 4096 NT_STATUS_OK
ReadX 10372 1600 4096 4096 NT_STATUS_OK
ReadX 10372 1856 4096 4096 NT_STATUS_OK
ReadX 10372 2112 4096 4096 NT_STATUS_OK
ReadX 10372 1892 4096 4096 NT_STATUS_OK
ReadX 10372 820 4096 4096 NT_STATUS_OK
ReadX 10372 788 4096 4096 NT_STATUS_OK
ReadX 10372 1604 4096 4096 NT_STATUS_OK
ReadX 10372 3648 4096 4096 NT_STATUS_OK
ReadX 10372 2608 4096 4096 NT_STATUS_OK
ReadX 10372 548 4096 4096 NT_STATUS_OK
ReadX 10372 740 4096 4096 NT_STATUS_OK
ReadX 10372 1344 4096 4096 NT_STATUS_OK
ReadX 10372 3392 4096 4096 NT_STATUS_OK
ReadX 10372 3904 4096 4096 NT_STATUS_OK
ReadX 10372 644 4096 4096 NT_STATUS_OK
ReadX 10372 676 4096 4096 NT_STATUS_OK
ReadX 10372 2688 4096 4096 NT_STATUS_OK
ReadX 10372 320 4096 4096 NT_STATUS_OK
ReadX 10372 900 4096 4096 NT_STATUS_OK
ReadX 10372 1908 4096 4096 NT_STATUS_OK
ReadX 10372 852 4096 4096 NT_STATUS_OK
ReadX 10372 724 4096 4096 NT_STATUS_OK
ReadX 10372 2292 4096 4096 NT_STATUS_OK
ReadX 10372 612 4096 4096 NT_STATUS_OK
ReadX 10372 388 4096 4096 NT_STATUS_OK
ReadX 10372 2368 4096 4096 NT_STATUS_OK
ReadX 10372 2624 4096 4096 NT_STATUS_OK
ReadX 10372 500 4096 4096 NT_STATUS_OK
ReadX 10372 356 4096 4096 NT_STATUS_OK
ReadX 10372 1024 4096 4096 NT_STATUS_OK
ReadX 10372 576 4096 4096 NT_STATUS_OK
ReadX 10372 340 4096 4096 NT_STATUS_OK
ReadX 10372 420 4096 4096 NT_STATUS_OK
ReadX 10372 1600 4096 4096 NT_STATUS_OK
ReadX 10372 404 4096 4096 NT_STATUS_OK
ReadX 10372 1428 4096 4096 NT_STATUS_OK
ReadX 10372 2656 4096 4096 NT_STATUS_OK
ReadX 10372 2624 4096 4096 NT_STATUS_OK
ReadX 10372 452 4096 4096 NT_STATUS_OK
ReadX 10372 692 4096 4096 NT_STATUS_OK
ReadX 10372 564 4096 4096 NT_STATUS_OK
ReadX 10372 372 4096 4096 NT_STATUS_OK
ReadX 10372 468 4096 4096 NT_STATUS_OK
ReadX 10372 484 4096 4096 NT_STATUS_OK
ReadX 10372 1088 4096 4096 NT_STATUS_OK
ReadX 10372 1924 4096 4096 NT_STATUS_OK
ReadX 10372 2768 4096 4096 NT_STATUS_OK
ReadX 10372 832 4096 4096 NT_STATUS_OK
ReadX 10372 836 4096 4096 NT_STATUS_OK
ReadX 10372 1856 4096 4096 NT_STATUS_OK
ReadX 10372 2640 4096 4096 NT_STATUS_OK
ReadX 10372 436 4096 4096 NT_STATUS_OK
ReadX 10372 1828 4096 4096 NT_STATUS_OK
ReadX 10372 804 4096 4096 NT_STATUS_OK
ReadX 10372 1860 4096 4096 NT_STATUS_OK
ReadX 10372 1812 4096 4096 NT_STATUS_OK
ReadX 10372 756 4096 4096 NT_STATUS_OK
ReadX 10372 1636 4096 4096 NT_STATUS_OK
ReadX 10372 772 4096 4096 NT_STATUS_OK
ReadX 10372 2036 4096 4096 NT_STATUS_OK
ReadX 10372 1220 4096 4096 NT_STATUS_OK
ReadX 10372 1652 4096 4096 NT_STATUS_OK
ReadX 10372 2588 4096 4096 NT_STATUS_OK
ReadX 10372 916 4096 4096 NT_STATUS_OK
ReadX 10372 260 4096 4096 NT_STATUS_OK
ReadX 10372 932 4096 4096 NT_STATUS_OK
ReadX 10372 2624 4096 4096 NT_STATUS_OK
ReadX 10372 308 4096 4096 NT_STATUS_OK
ReadX 10372 292 4096 4096 NT_STATUS_OK
ReadX 10372 1140 4096 4096 NT_STATUS_OK
ReadX 10372 276 4096 4096 NT_STATUS_OK
ReadX 10372 2020 4096 4096 NT_STATUS_OK
ReadX 10372 2880 4096 4096 NT_STATUS_OK
ReadX 10372 516 4096 4096 NT_STATUS_OK
ReadX 10372 1844 4096 4096 NT_STATUS_OK
ReadX 10372 1124 4096 4096 NT_STATUS_OK
ReadX 10372 3136 4096 4096 NT_STATUS_OK
ReadX 10372 324 4096 4096 NT_STATUS_OK
ReadX 10372 1156 4096 4096 NT_STATUS_OK
ReadX 10372 1172 4096 4096 NT_STATUS_OK
ReadX 10372 2112 4096 4096 NT_STATUS_OK
ReadX 10372 2368 4096 4096 NT_STATUS_OK
ReadX 10372 964 4096 4096 NT_STATUS_OK
ReadX 10372 980 4096 4096 NT_STATUS_OK
ReadX 10372 1012 4096 4096 NT_STATUS_OK
ReadX 10372 532 4096 4096 NT_STATUS_OK
ReadX 10372 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10372 1620 4096 4096 NT_STATUS_OK
ReadX 10372 1604 4096 4096 NT_STATUS_OK
ReadX 10372 2116 4096 4096 NT_STATUS_OK
ReadX 10372 2132 4096 4096 NT_STATUS_OK
ReadX 10372 2148 4096 4096 NT_STATUS_OK
ReadX 10372 2276 4096 4096 NT_STATUS_OK
ReadX 10372 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10394 NT_STATUS_OK
Close 10394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10397 NT_STATUS_OK
QUERY_FILE_INFORMATION 10352 1004 NT_STATUS_OK
Close 10352 NT_STATUS_OK
WriteX 10397 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10397 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10354 1004 NT_STATUS_OK
Close 10354 NT_STATUS_OK
WriteX 10397 0 65536 65536 NT_STATUS_OK
WriteX 10397 65536 64850 64850 NT_STATUS_OK
Close 10397 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10399 NT_STATUS_OK
WriteX 10399 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10399 258 NT_STATUS_OK
ReadX 10372 2068 4096 4096 NT_STATUS_OK
ReadX 10372 1588 4096 4096 NT_STATUS_OK
ReadX 10372 1572 4096 4096 NT_STATUS_OK
WriteX 10399 0 18630 18630 NT_STATUS_OK
Flush 10399 NT_STATUS_OK
Close 10399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10401 NT_STATUS_OK
Close 10401 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10403 NT_STATUS_OK
ReadX 10403 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10372 612 4096 4096 NT_STATUS_OK
ReadX 10372 564 4096 4096 NT_STATUS_OK
ReadX 10372 1876 4096 4096 NT_STATUS_OK
ReadX 10372 628 4096 4096 NT_STATUS_OK
ReadX 10372 740 4096 4096 NT_STATUS_OK
ReadX 10372 724 4096 4096 NT_STATUS_OK
ReadX 10372 644 4096 4096 NT_STATUS_OK
ReadX 10372 2324 4096 4096 NT_STATUS_OK
ReadX 10372 660 4096 4096 NT_STATUS_OK
ReadX 10372 852 4096 4096 NT_STATUS_OK
ReadX 10372 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10372 2368 4096 4096 NT_STATUS_OK
ReadX 10372 1024 4096 4096 NT_STATUS_OK
ReadX 10372 320 4096 4096 NT_STATUS_OK
ReadX 10372 580 4096 4096 NT_STATUS_OK
ReadX 10372 3136 512 512 NT_STATUS_OK
ReadX 10372 2880 4096 4096 NT_STATUS_OK
Close 10372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10404 NT_STATUS_OK
ReadX 10404 61440 4096 4096 NT_STATUS_OK
ReadX 10404 126976 4096 4096 NT_STATUS_OK
WriteX 10404 0 65536 65536 NT_STATUS_OK
WriteX 10404 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10405 NT_STATUS_OK
ReadX 10405 61440 4096 4096 NT_STATUS_OK
ReadX 10405 126976 4096 4096 NT_STATUS_OK
ReadX 10405 192512 4096 4096 NT_STATUS_OK
ReadX 10405 258048 4096 4096 NT_STATUS_OK
WriteX 10405 0 65536 65536 NT_STATUS_OK
WriteX 10405 65536 65536 65536 NT_STATUS_OK
WriteX 10405 131072 65536 65536 NT_STATUS_OK
WriteX 10405 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10406 NT_STATUS_OK
ReadX 10406 61440 4096 4096 NT_STATUS_OK
ReadX 10406 126976 4096 4096 NT_STATUS_OK
ReadX 10406 192512 4096 4096 NT_STATUS_OK
ReadX 10406 258048 4096 4096 NT_STATUS_OK
ReadX 10406 323584 4096 4096 NT_STATUS_OK
ReadX 10406 389120 4096 4096 NT_STATUS_OK
ReadX 10406 454656 4096 4096 NT_STATUS_OK
ReadX 10406 520192 4096 4096 NT_STATUS_OK
WriteX 10406 0 65536 65536 NT_STATUS_OK
WriteX 10406 65536 65536 65536 NT_STATUS_OK
WriteX 10406 131072 65536 65536 NT_STATUS_OK
WriteX 10406 196608 65536 65536 NT_STATUS_OK
WriteX 10406 262144 65536 65536 NT_STATUS_OK
WriteX 10406 327680 65536 65536 NT_STATUS_OK
WriteX 10406 393216 65536 65536 NT_STATUS_OK
WriteX 10406 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10407 NT_STATUS_OK
ReadX 10407 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10408 NT_STATUS_OK
Close 10408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10409 NT_STATUS_OK
WriteX 10409 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10409 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10407 0 8192 8192 NT_STATUS_OK
Flush 10407 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10407 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10407 0 8192 8192 NT_STATUS_OK
Flush 10407 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10407 0 8192 8192 NT_STATUS_OK
Flush 10407 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10407 0 8192 8192 NT_STATUS_OK
Flush 10407 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10411 NT_STATUS_OK
Close 10411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10403 NT_STATUS_OK
Close 10371 NT_STATUS_OK
Close 10404 NT_STATUS_OK
Close 10405 NT_STATUS_OK
Close 10406 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10414 NT_STATUS_OK
WriteX 10414 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10414 258 NT_STATUS_OK
WriteX 10414 0 62591 62591 NT_STATUS_OK
Close 10414 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10416 NT_STATUS_OK
Close 10416 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10419 NT_STATUS_OK
WriteX 10419 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10419 258 NT_STATUS_OK
WriteX 10419 0 10845 10845 NT_STATUS_OK
Close 10419 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10421 NT_STATUS_OK
Close 10421 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10424 NT_STATUS_OK
WriteX 10424 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10424 258 NT_STATUS_OK
WriteX 10424 0 30118 30118 NT_STATUS_OK
Close 10424 NT_STATUS_OK
WriteX 10407 0 4096 4096 NT_STATUS_OK
WriteX 10409 0 64 64 NT_STATUS_OK
Close 10409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10407 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10426 NT_STATUS_OK
ReadX 10426 0 61440 61440 NT_STATUS_OK
ReadX 10426 61440 4096 4096 NT_STATUS_OK
ReadX 10426 65536 61440 61440 NT_STATUS_OK
ReadX 10426 126976 4096 4096 NT_STATUS_OK
ReadX 10426 131072 61440 61440 NT_STATUS_OK
ReadX 10426 192512 4096 4096 NT_STATUS_OK
ReadX 10426 196608 61440 61440 NT_STATUS_OK
ReadX 10426 258048 4096 4096 NT_STATUS_OK
ReadX 10426 262144 61440 61440 NT_STATUS_OK
ReadX 10426 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10427 NT_STATUS_OK
ReadX 10427 0 61440 61440 NT_STATUS_OK
ReadX 10427 61440 4096 4096 NT_STATUS_OK
ReadX 10427 65536 61440 61440 NT_STATUS_OK
ReadX 10427 126976 4096 4096 NT_STATUS_OK
ReadX 10427 131072 61440 61440 NT_STATUS_OK
ReadX 10427 192512 4096 4096 NT_STATUS_OK
ReadX 10427 196608 61440 61440 NT_STATUS_OK
ReadX 10427 258048 4096 4096 NT_STATUS_OK
ReadX 10427 262144 61440 61440 NT_STATUS_OK
ReadX 10427 323584 4096 4096 NT_STATUS_OK
ReadX 10427 327680 61440 61440 NT_STATUS_OK
ReadX 10427 389120 4096 4096 NT_STATUS_OK
ReadX 10427 393216 61440 61440 NT_STATUS_OK
ReadX 10427 454656 4096 4096 NT_STATUS_OK
ReadX 10427 458752 61440 61440 NT_STATUS_OK
ReadX 10427 520192 4096 4096 NT_STATUS_OK
ReadX 10427 524288 61440 61440 NT_STATUS_OK
ReadX 10427 585728 4096 4096 NT_STATUS_OK
ReadX 10427 589824 61440 61440 NT_STATUS_OK
ReadX 10427 651264 4096 4096 NT_STATUS_OK
ReadX 10427 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10428 NT_STATUS_OK
ReadX 10428 0 61440 61440 NT_STATUS_OK
ReadX 10428 61440 4096 4096 NT_STATUS_OK
ReadX 10428 65536 61440 61440 NT_STATUS_OK
ReadX 10428 126976 4096 4096 NT_STATUS_OK
ReadX 10428 131072 61440 61440 NT_STATUS_OK
ReadX 10428 192512 4096 4096 NT_STATUS_OK
ReadX 10428 196608 61440 61440 NT_STATUS_OK
ReadX 10428 258048 4096 4096 NT_STATUS_OK
ReadX 10428 262144 61440 61440 NT_STATUS_OK
ReadX 10428 323584 4096 4096 NT_STATUS_OK
ReadX 10428 327680 61440 61440 NT_STATUS_OK
ReadX 10428 389120 4096 4096 NT_STATUS_OK
ReadX 10428 393216 61440 61440 NT_STATUS_OK
ReadX 10428 454656 4096 4096 NT_STATUS_OK
ReadX 10428 458752 61440 61440 NT_STATUS_OK
ReadX 10428 520192 4096 4096 NT_STATUS_OK
ReadX 10428 524288 61440 61440 NT_STATUS_OK
ReadX 10428 585728 4096 4096 NT_STATUS_OK
ReadX 10428 589824 61440 61440 NT_STATUS_OK
ReadX 10428 651264 4096 4096 NT_STATUS_OK
ReadX 10428 655360 61440 61440 NT_STATUS_OK
ReadX 10428 716800 4096 4096 NT_STATUS_OK
ReadX 10428 720896 61440 61440 NT_STATUS_OK
ReadX 10428 782336 4096 4096 NT_STATUS_OK
ReadX 10428 786432 61440 61440 NT_STATUS_OK
ReadX 10428 847872 4096 4096 NT_STATUS_OK
ReadX 10428 851968 61440 61440 NT_STATUS_OK
ReadX 10428 913408 4096 4096 NT_STATUS_OK
ReadX 10428 917504 61440 61440 NT_STATUS_OK
ReadX 10428 978944 4096 4096 NT_STATUS_OK
ReadX 10428 983040 61440 61440 NT_STATUS_OK
ReadX 10428 1044480 4096 4096 NT_STATUS_OK
ReadX 10428 1048576 61440 61440 NT_STATUS_OK
ReadX 10428 1110016 4096 4096 NT_STATUS_OK
ReadX 10428 1114112 61440 61440 NT_STATUS_OK
ReadX 10428 1175552 4096 4096 NT_STATUS_OK
ReadX 10428 1179648 61440 61440 NT_STATUS_OK
ReadX 10428 1241088 4096 4096 NT_STATUS_OK
ReadX 10428 1245184 61440 61440 NT_STATUS_OK
ReadX 10428 1306624 4096 4096 NT_STATUS_OK
ReadX 10428 1310720 61440 61440 NT_STATUS_OK
ReadX 10428 1372160 4096 4096 NT_STATUS_OK
ReadX 10428 1376256 61440 61440 NT_STATUS_OK
ReadX 10428 1437696 4096 4096 NT_STATUS_OK
ReadX 10428 1441792 61440 61440 NT_STATUS_OK
ReadX 10428 1503232 4096 4096 NT_STATUS_OK
ReadX 10428 1507328 61440 61440 NT_STATUS_OK
ReadX 10428 1568768 4096 4096 NT_STATUS_OK
ReadX 10428 1572864 61440 61440 NT_STATUS_OK
ReadX 10428 1634304 4096 4096 NT_STATUS_OK
ReadX 10428 1638400 61440 61440 NT_STATUS_OK
ReadX 10428 1699840 4096 4096 NT_STATUS_OK
ReadX 10428 1703936 61440 61440 NT_STATUS_OK
ReadX 10428 1765376 4096 4096 NT_STATUS_OK
ReadX 10428 1769472 61440 61440 NT_STATUS_OK
ReadX 10428 1830912 4096 4096 NT_STATUS_OK
ReadX 10428 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10429 NT_STATUS_OK
Close 10429 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10426 NT_STATUS_OK
Close 10427 NT_STATUS_OK
Close 10428 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10431 NT_STATUS_OK
ReadX 10431 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10432 NT_STATUS_OK
ReadX 10432 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10433 NT_STATUS_OK
ReadX 10433 0 4096 4096 NT_STATUS_OK
ReadX 10433 4096 4096 4096 NT_STATUS_OK
ReadX 10433 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10434 NT_STATUS_OK
Close 10434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10431 NT_STATUS_OK
Close 10432 NT_STATUS_OK
Close 10433 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10437 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10438 NT_STATUS_OK
Close 10438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Close 10437 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10440 NT_STATUS_OK
ReadX 10440 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10441 NT_STATUS_OK
ReadX 10441 0 8192 8192 NT_STATUS_OK
ReadX 10441 8192 8192 8192 NT_STATUS_OK
ReadX 10441 16384 8192 8192 NT_STATUS_OK
ReadX 10441 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10443 NT_STATUS_OK
Close 10443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10441 NT_STATUS_OK
Close 10440 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10446 NT_STATUS_OK
WriteX 10446 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10446 258 NT_STATUS_OK
WriteX 10446 0 10438 10438 NT_STATUS_OK
Close 10446 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10447 NT_STATUS_OK
Close 10447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10448 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10449 NT_STATUS_OK
Close 10449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10450 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10451 NT_STATUS_OK
Close 10451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10452 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10453 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10454 NT_STATUS_OK
Close 10454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10455 NT_STATUS_OK
ReadX 10455 0 4096 4096 NT_STATUS_OK
ReadX 10455 4096 4096 4096 NT_STATUS_OK
ReadX 10455 8192 4096 4096 NT_STATUS_OK
ReadX 10455 12288 8192 8192 NT_STATUS_OK
ReadX 10455 20480 8192 8192 NT_STATUS_OK
ReadX 10455 28672 8192 8192 NT_STATUS_OK
ReadX 10455 36864 8192 8192 NT_STATUS_OK
ReadX 10455 45056 8192 8192 NT_STATUS_OK
ReadX 10455 53248 8192 8192 NT_STATUS_OK
ReadX 10455 61440 8192 8192 NT_STATUS_OK
ReadX 10455 69632 8192 8192 NT_STATUS_OK
ReadX 10455 77824 8192 8192 NT_STATUS_OK
ReadX 10455 86016 8192 8192 NT_STATUS_OK
ReadX 10455 94208 8192 8192 NT_STATUS_OK
ReadX 10455 102400 8192 8192 NT_STATUS_OK
ReadX 10455 110592 8192 8192 NT_STATUS_OK
ReadX 10455 118784 8192 8192 NT_STATUS_OK
ReadX 10455 126976 8192 8192 NT_STATUS_OK
ReadX 10455 135168 8192 8192 NT_STATUS_OK
ReadX 10455 143360 8192 8192 NT_STATUS_OK
ReadX 10455 151552 8192 8192 NT_STATUS_OK
ReadX 10455 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10455 NT_STATUS_OK
Close 10448 NT_STATUS_OK
Close 10450 NT_STATUS_OK
Close 10452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10457 NT_STATUS_OK
Close 10457 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10460 NT_STATUS_OK
WriteX 10460 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10460 258 NT_STATUS_OK
WriteX 10460 0 28489 28489 NT_STATUS_OK
Close 10460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10461 NT_STATUS_OK
Close 10461 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10463 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10463 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10464 NT_STATUS_OK
Close 10464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10463 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10466 NT_STATUS_OK
ReadX 10466 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10467 NT_STATUS_OK
ReadX 10467 0 8192 8192 NT_STATUS_OK
ReadX 10467 8192 8192 8192 NT_STATUS_OK
ReadX 10467 16384 8192 8192 NT_STATUS_OK
ReadX 10467 24576 8192 8192 NT_STATUS_OK
ReadX 10467 32768 16384 16384 NT_STATUS_OK
ReadX 10467 49152 8192 8192 NT_STATUS_OK
ReadX 10467 57344 8192 8192 NT_STATUS_OK
ReadX 10467 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10469 NT_STATUS_OK
Close 10469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10467 NT_STATUS_OK
Close 10466 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10472 NT_STATUS_OK
WriteX 10472 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10472 258 NT_STATUS_OK
WriteX 10472 0 29253 29253 NT_STATUS_OK
Close 10472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10473 NT_STATUS_OK
Close 10473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10474 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10476 NT_STATUS_OK
Close 10476 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10479 NT_STATUS_OK
WriteX 10479 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10479 258 NT_STATUS_OK
WriteX 10479 0 30183 30183 NT_STATUS_OK
Close 10479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10480 NT_STATUS_OK
Close 10480 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10482 NT_STATUS_OK
WriteX 10482 0 510 510 NT_STATUS_OK
WriteX 10482 510 512 512 NT_STATUS_OK
WriteX 10482 1022 510 510 NT_STATUS_OK
WriteX 10482 1532 510 510 NT_STATUS_OK
WriteX 10482 2042 168 168 NT_STATUS_OK
Close 10482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10483 NT_STATUS_OK
Close 10483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10485 NT_STATUS_OK
ReadX 10485 0 4096 4096 NT_STATUS_OK
WriteX 10485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10486 NT_STATUS_OK
ReadX 10486 61440 4096 4096 NT_STATUS_OK
ReadX 10486 126976 4096 4096 NT_STATUS_OK
WriteX 10486 0 65536 65536 NT_STATUS_OK
WriteX 10486 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10487 NT_STATUS_OK
ReadX 10487 61440 4096 4096 NT_STATUS_OK
ReadX 10487 126976 4096 4096 NT_STATUS_OK
ReadX 10487 192512 4096 4096 NT_STATUS_OK
ReadX 10487 258048 4096 4096 NT_STATUS_OK
WriteX 10487 0 65536 65536 NT_STATUS_OK
WriteX 10487 65536 65536 65536 NT_STATUS_OK
WriteX 10487 131072 65536 65536 NT_STATUS_OK
WriteX 10487 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10488 NT_STATUS_OK
ReadX 10488 61440 4096 4096 NT_STATUS_OK
ReadX 10488 126976 4096 4096 NT_STATUS_OK
ReadX 10488 192512 4096 4096 NT_STATUS_OK
ReadX 10488 258048 4096 4096 NT_STATUS_OK
ReadX 10488 323584 4096 4096 NT_STATUS_OK
ReadX 10488 389120 4096 4096 NT_STATUS_OK
ReadX 10488 454656 4096 4096 NT_STATUS_OK
ReadX 10488 520192 4096 4096 NT_STATUS_OK
WriteX 10488 0 65536 65536 NT_STATUS_OK
WriteX 10488 65536 65536 65536 NT_STATUS_OK
WriteX 10488 131072 65536 65536 NT_STATUS_OK
WriteX 10488 196608 65536 65536 NT_STATUS_OK
WriteX 10488 262144 65536 65536 NT_STATUS_OK
WriteX 10488 327680 65536 65536 NT_STATUS_OK
WriteX 10488 393216 65536 65536 NT_STATUS_OK
WriteX 10488 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10489 NT_STATUS_OK
Close 10489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10485 NT_STATUS_OK
Close 10486 NT_STATUS_OK
Close 10487 NT_STATUS_OK
Close 10488 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10491 NT_STATUS_OK
Close 10491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10495 NT_STATUS_OK
Close 10495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10498 NT_STATUS_OK
Close 10498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10500 NT_STATUS_OK
Close 10500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10504 NT_STATUS_OK
Close 10504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10507 NT_STATUS_OK
Close 10507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10509 NT_STATUS_OK
Close 10509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10513 NT_STATUS_OK
Close 10513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10518 NT_STATUS_OK
Close 10518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10523 NT_STATUS_OK
Close 10523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10528 NT_STATUS_OK
Close 10528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10533 NT_STATUS_OK
Close 10533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10538 NT_STATUS_OK
Close 10538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10543 NT_STATUS_OK
Close 10543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10548 NT_STATUS_OK
Close 10548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10551 NT_STATUS_OK
Close 10551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10554 NT_STATUS_OK
Close 10554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10557 NT_STATUS_OK
WriteX 10557 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10557 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10557 0 65536 65536 NT_STATUS_OK
WriteX 10557 65536 65536 65536 NT_STATUS_OK
WriteX 10557 131072 65536 65536 NT_STATUS_OK
WriteX 10557 196608 65536 65536 NT_STATUS_OK
WriteX 10557 262144 26634 26634 NT_STATUS_OK
Close 10557 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10562 NT_STATUS_OK
Close 10562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10563 NT_STATUS_OK
Close 10563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10564 NT_STATUS_OK
ReadX 10564 0 4096 4096 NT_STATUS_OK
Close 10564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10565 NT_STATUS_OK
ReadX 10565 0 4096 4096 NT_STATUS_OK
ReadX 10565 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10566 NT_STATUS_OK
Close 10566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10565 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10570 NT_STATUS_OK
Close 10570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10573 NT_STATUS_OK
Close 10573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10575 NT_STATUS_OK
Close 10575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10579 NT_STATUS_OK
Close 10579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10582 NT_STATUS_OK
Close 10582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10584 NT_STATUS_OK
Close 10584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10588 NT_STATUS_OK
Close 10588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10593 NT_STATUS_OK
Close 10593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10598 NT_STATUS_OK
Close 10598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10603 NT_STATUS_OK
Close 10603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10608 NT_STATUS_OK
Close 10608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10613 NT_STATUS_OK
Close 10613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10617 NT_STATUS_OK
Close 10617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10622 NT_STATUS_OK
Close 10622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10627 NT_STATUS_OK
Close 10627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10630 NT_STATUS_OK
Close 10630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10632 NT_STATUS_OK
Close 10632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10642 NT_STATUS_OK
Close 10642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10643 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10644 NT_STATUS_OK
ReadX 10644 0 4096 4096 NT_STATUS_OK
Close 10644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10645 NT_STATUS_OK
ReadX 10645 0 4096 4096 NT_STATUS_OK
Close 10645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10646 NT_STATUS_OK
ReadX 10646 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10656 NT_STATUS_OK
Close 10656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10657 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10658 NT_STATUS_OK
ReadX 10658 0 4096 4096 NT_STATUS_OK
Close 10658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10659 NT_STATUS_OK
ReadX 10659 0 4096 4096 NT_STATUS_OK
Close 10659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10660 NT_STATUS_OK
ReadX 10660 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10646 NT_STATUS_OK
Close 10660 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10689 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10689 0 4096 4096 NT_STATUS_OK
Close 10689 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10690 NT_STATUS_OK
ReadX 10690 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10691 NT_STATUS_OK
ReadX 10691 0 4096 4096 NT_STATUS_OK
ReadX 10691 4096 4096 4096 NT_STATUS_OK
ReadX 10691 8192 4096 4096 NT_STATUS_OK
ReadX 10691 12288 4096 4096 NT_STATUS_OK
ReadX 10691 16384 4096 4096 NT_STATUS_OK
ReadX 10691 20480 4096 4096 NT_STATUS_OK
ReadX 10691 24576 4096 4096 NT_STATUS_OK
ReadX 10691 28672 4096 4096 NT_STATUS_OK
ReadX 10691 32768 4096 4096 NT_STATUS_OK
ReadX 10691 36864 4096 4096 NT_STATUS_OK
ReadX 10691 40960 4096 4096 NT_STATUS_OK
ReadX 10691 45056 4096 4096 NT_STATUS_OK
ReadX 10691 49152 4096 4096 NT_STATUS_OK
ReadX 10691 53248 4096 4096 NT_STATUS_OK
ReadX 10691 57344 4096 4096 NT_STATUS_OK
ReadX 10691 61440 4096 4096 NT_STATUS_OK
ReadX 10691 65536 4096 4096 NT_STATUS_OK
ReadX 10691 69632 4096 4096 NT_STATUS_OK
ReadX 10691 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10691 1004 NT_STATUS_OK
WriteX 10691 0 4096 4096 NT_STATUS_OK
Close 10691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10692 NT_STATUS_OK
SET_FILE_INFORMATION 10692 1004 NT_STATUS_OK
Close 10692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10693 NT_STATUS_OK
ReadX 10693 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10694 NT_STATUS_OK
Close 10694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10697 NT_STATUS_OK
WriteX 10697 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10697 258 NT_STATUS_OK
WriteX 10697 0 65536 65536 NT_STATUS_OK
WriteX 10697 65536 19979 19979 NT_STATUS_OK
Close 10697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10698 NT_STATUS_OK
ReadX 10698 0 4096 4096 NT_STATUS_OK
WriteX 10698 0 4096 4096 NT_STATUS_OK
Flush 10698 NT_STATUS_OK
WriteX 10698 0 4096 4096 NT_STATUS_OK
Flush 10698 NT_STATUS_OK
QUERY_FILE_INFORMATION 10698 1004 NT_STATUS_OK
WriteX 10698 0 4096 4096 NT_STATUS_OK
Flush 10698 NT_STATUS_OK
WriteX 10698 0 4096 4096 NT_STATUS_OK
Flush 10698 NT_STATUS_OK
WriteX 10698 0 4096 4096 NT_STATUS_OK
Flush 10698 NT_STATUS_OK
SET_FILE_INFORMATION 10698 1004 NT_STATUS_OK
WriteX 10698 0 4096 4096 NT_STATUS_OK
Flush 10698 NT_STATUS_OK
Close 10698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10699 NT_STATUS_OK
ReadX 10699 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10700 NT_STATUS_OK
ReadX 10700 0 4096 4096 NT_STATUS_OK
Close 10699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10701 NT_STATUS_OK
ReadX 10701 0 4096 4096 NT_STATUS_OK
Close 10701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10702 NT_STATUS_OK
ReadX 10702 0 4096 4096 NT_STATUS_OK
Close 10702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10703 NT_STATUS_OK
ReadX 10703 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10703 1004 NT_STATUS_OK
WriteX 10703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10704 NT_STATUS_OK
Close 10704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10700 NT_STATUS_OK
Close 10703 NT_STATUS_OK
Close 10693 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10706 NT_STATUS_OK
Close 10706 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10709 NT_STATUS_OK
WriteX 10709 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10709 258 NT_STATUS_OK
WriteX 10709 0 65536 65536 NT_STATUS_OK
WriteX 10709 65536 17654 17654 NT_STATUS_OK
Close 10709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10710 NT_STATUS_OK
ReadX 10710 0 4096 4096 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
QUERY_FILE_INFORMATION 10710 1004 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
SET_FILE_INFORMATION 10710 1004 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
Close 10710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10711 NT_STATUS_OK
SET_FILE_INFORMATION 10711 1004 NT_STATUS_OK
Close 10711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10712 NT_STATUS_OK
ReadX 10712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10713 NT_STATUS_OK
Close 10713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10715 NT_STATUS_OK
ReadX 10715 0 4096 4096 NT_STATUS_OK
ReadX 10715 4096 4096 4096 NT_STATUS_OK
ReadX 10715 8192 4096 4096 NT_STATUS_OK
ReadX 10715 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10715 16384 4096 4096 NT_STATUS_OK
ReadX 10715 20480 4096 4096 NT_STATUS_OK
ReadX 10715 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10716 NT_STATUS_OK
ReadX 10716 0 4096 4096 NT_STATUS_OK
Close 10716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10717 NT_STATUS_OK
ReadX 10717 0 4096 4096 NT_STATUS_OK
Close 10717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10718 NT_STATUS_OK
ReadX 10718 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10718 1004 NT_STATUS_OK
WriteX 10718 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10719 NT_STATUS_OK
Close 10719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10718 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10721 NT_STATUS_OK
Close 10721 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10724 NT_STATUS_OK
WriteX 10724 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10724 258 NT_STATUS_OK
WriteX 10724 0 65536 65536 NT_STATUS_OK
WriteX 10724 65536 19490 19490 NT_STATUS_OK
Close 10724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10725 NT_STATUS_OK
ReadX 10725 0 4096 4096 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
QUERY_FILE_INFORMATION 10725 1004 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
SET_FILE_INFORMATION 10725 1004 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
Close 10725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10726 NT_STATUS_OK
SET_FILE_INFORMATION 10726 1004 NT_STATUS_OK
Close 10726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10727 NT_STATUS_OK
ReadX 10727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10728 NT_STATUS_OK
Close 10728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10730 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10730 0 4096 4096 NT_STATUS_OK
Close 10730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10731 NT_STATUS_OK
ReadX 10731 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10732 NT_STATUS_OK
ReadX 10732 0 4096 4096 NT_STATUS_OK
ReadX 10732 4096 4096 4096 NT_STATUS_OK
ReadX 10732 8192 4096 4096 NT_STATUS_OK
ReadX 10732 12288 4096 4096 NT_STATUS_OK
ReadX 10732 16384 4096 4096 NT_STATUS_OK
ReadX 10732 20480 4096 4096 NT_STATUS_OK
ReadX 10732 24576 4096 4096 NT_STATUS_OK
ReadX 10732 28672 4096 4096 NT_STATUS_OK
ReadX 10732 32768 4096 4096 NT_STATUS_OK
ReadX 10732 36864 4096 4096 NT_STATUS_OK
ReadX 10732 40960 4096 4096 NT_STATUS_OK
ReadX 10732 45056 4096 4096 NT_STATUS_OK
ReadX 10732 49152 4096 4096 NT_STATUS_OK
ReadX 10732 53248 4096 4096 NT_STATUS_OK
ReadX 10732 57344 4096 4096 NT_STATUS_OK
ReadX 10732 61440 4096 4096 NT_STATUS_OK
ReadX 10732 65536 4096 4096 NT_STATUS_OK
ReadX 10732 69632 4096 4096 NT_STATUS_OK
ReadX 10732 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10732 1004 NT_STATUS_OK
WriteX 10732 0 4096 4096 NT_STATUS_OK
Close 10732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10733 NT_STATUS_OK
SET_FILE_INFORMATION 10733 1004 NT_STATUS_OK
Close 10733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10734 NT_STATUS_OK
ReadX 10734 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10735 NT_STATUS_OK
Close 10735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10727 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10738 NT_STATUS_OK
WriteX 10738 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10738 258 NT_STATUS_OK
WriteX 10738 0 65536 65536 NT_STATUS_OK
WriteX 10738 65536 8866 8866 NT_STATUS_OK
Close 10738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10739 NT_STATUS_OK
ReadX 10739 0 4096 4096 NT_STATUS_OK
WriteX 10739 0 4096 4096 NT_STATUS_OK
Flush 10739 NT_STATUS_OK
SET_FILE_INFORMATION 10739 1004 NT_STATUS_OK
WriteX 10739 0 4096 4096 NT_STATUS_OK
Flush 10739 NT_STATUS_OK
Close 10739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10740 NT_STATUS_OK
ReadX 10740 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10741 NT_STATUS_OK
ReadX 10741 0 4096 4096 NT_STATUS_OK
Close 10741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10742 NT_STATUS_OK
ReadX 10742 0 4096 4096 NT_STATUS_OK
Close 10742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10743 NT_STATUS_OK
ReadX 10743 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10743 1004 NT_STATUS_OK
WriteX 10743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10744 NT_STATUS_OK
Close 10744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10743 NT_STATUS_OK
Close 10734 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10746 NT_STATUS_OK
Close 10746 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10749 NT_STATUS_OK
WriteX 10749 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10749 258 NT_STATUS_OK
WriteX 10749 0 65536 65536 NT_STATUS_OK
WriteX 10749 65536 9298 9298 NT_STATUS_OK
Close 10749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10750 NT_STATUS_OK
ReadX 10750 0 4096 4096 NT_STATUS_OK
WriteX 10750 0 4096 4096 NT_STATUS_OK
Flush 10750 NT_STATUS_OK
SET_FILE_INFORMATION 10750 1004 NT_STATUS_OK
WriteX 10750 0 4096 4096 NT_STATUS_OK
Flush 10750 NT_STATUS_OK
Close 10750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10751 NT_STATUS_OK
SET_FILE_INFORMATION 10751 1004 NT_STATUS_OK
Close 10751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10752 NT_STATUS_OK
ReadX 10752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10753 NT_STATUS_OK
Close 10753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10756 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10756 0 4096 4096 NT_STATUS_OK
Close 10756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10757 NT_STATUS_OK
ReadX 10757 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10757 4096 4096 4096 NT_STATUS_OK
ReadX 10757 8192 4096 4096 NT_STATUS_OK
ReadX 10757 12288 4096 4096 NT_STATUS_OK
ReadX 10757 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10758 NT_STATUS_OK
ReadX 10758 0 4096 4096 NT_STATUS_OK
Close 10758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10759 NT_STATUS_OK
ReadX 10759 0 4096 4096 NT_STATUS_OK
Close 10759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10760 NT_STATUS_OK
ReadX 10760 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10760 1004 NT_STATUS_OK
WriteX 10760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10761 NT_STATUS_OK
Close 10761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10757 NT_STATUS_OK
Close 10760 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10763 NT_STATUS_OK
Close 10763 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10766 NT_STATUS_OK
WriteX 10766 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10766 258 NT_STATUS_OK
WriteX 10766 0 65536 65536 NT_STATUS_OK
WriteX 10766 65536 11540 11540 NT_STATUS_OK
Close 10766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10767 NT_STATUS_OK
ReadX 10767 0 4096 4096 NT_STATUS_OK
WriteX 10767 0 4096 4096 NT_STATUS_OK
Flush 10767 NT_STATUS_OK
SET_FILE_INFORMATION 10767 1004 NT_STATUS_OK
WriteX 10767 0 4096 4096 NT_STATUS_OK
Flush 10767 NT_STATUS_OK
Close 10767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10768 NT_STATUS_OK
SET_FILE_INFORMATION 10768 1004 NT_STATUS_OK
Close 10768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10769 NT_STATUS_OK
ReadX 10769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10770 NT_STATUS_OK
Close 10770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10772 NT_STATUS_OK
ReadX 10772 61440 4096 4096 NT_STATUS_OK
ReadX 10772 126976 4096 4096 NT_STATUS_OK
WriteX 10772 0 65536 65536 NT_STATUS_OK
WriteX 10772 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10773 NT_STATUS_OK
ReadX 10773 61440 4096 4096 NT_STATUS_OK
ReadX 10773 126976 4096 4096 NT_STATUS_OK
ReadX 10773 192512 4096 4096 NT_STATUS_OK
ReadX 10773 258048 4096 4096 NT_STATUS_OK
WriteX 10773 0 65536 65536 NT_STATUS_OK
WriteX 10773 65536 65536 65536 NT_STATUS_OK
WriteX 10773 131072 65536 65536 NT_STATUS_OK
WriteX 10773 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10774 NT_STATUS_OK
ReadX 10774 61440 4096 4096 NT_STATUS_OK
ReadX 10774 126976 4096 4096 NT_STATUS_OK
ReadX 10774 192512 4096 4096 NT_STATUS_OK
ReadX 10774 258048 4096 4096 NT_STATUS_OK
ReadX 10774 323584 4096 4096 NT_STATUS_OK
ReadX 10774 389120 4096 4096 NT_STATUS_OK
ReadX 10774 454656 4096 4096 NT_STATUS_OK
ReadX 10774 520192 4096 4096 NT_STATUS_OK
WriteX 10774 0 65536 65536 NT_STATUS_OK
WriteX 10774 65536 65536 65536 NT_STATUS_OK
WriteX 10774 131072 65536 65536 NT_STATUS_OK
WriteX 10774 196608 65536 65536 NT_STATUS_OK
WriteX 10774 262144 65536 65536 NT_STATUS_OK
WriteX 10774 327680 65536 65536 NT_STATUS_OK
WriteX 10774 393216 65536 65536 NT_STATUS_OK
WriteX 10774 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10775 NT_STATUS_OK
ReadX 10775 0 4096 4096 NT_STATUS_OK
ReadX 10775 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10776 NT_STATUS_OK
WriteX 10776 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10776 258 NT_STATUS_OK
WriteX 10776 0 53 53 NT_STATUS_OK
Close 10776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10777 NT_STATUS_OK
Close 10777 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10769 NT_STATUS_OK
Close 10715 NT_STATUS_OK
Close 10772 NT_STATUS_OK
Close 10773 NT_STATUS_OK
Close 10774 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10775 8192 4096 4096 NT_STATUS_OK
ReadX 10775 12288 4096 4096 NT_STATUS_OK
WriteX 10779 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10779 258 NT_STATUS_OK
ReadX 10775 16384 4096 4096 NT_STATUS_OK
ReadX 10775 20480 4096 4096 NT_STATUS_OK
WriteX 10779 0 15360 15360 NT_STATUS_OK
Close 10779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10780 NT_STATUS_OK
ReadX 10780 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10780 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10780 1004 NT_STATUS_OK
WriteX 10780 0 4096 4096 NT_STATUS_OK
Close 10780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10781 NT_STATUS_OK
Close 10781 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10783 NT_STATUS_OK
ReadX 10783 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10784 NT_STATUS_OK
Close 10784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10783 4096 4096 4096 NT_STATUS_OK
ReadX 10783 8192 4096 4096 NT_STATUS_OK
ReadX 10783 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10786 NT_STATUS_OK
ReadX 10786 0 4096 4096 NT_STATUS_OK
ReadX 10786 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10787 NT_STATUS_OK
ReadX 10787 0 4096 4096 NT_STATUS_OK
ReadX 10787 4096 4096 4096 NT_STATUS_OK
ReadX 10787 8192 4096 4096 NT_STATUS_OK
Close 10786 NT_STATUS_OK
Close 10787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10788 NT_STATUS_OK
WriteX 10788 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10788 258 NT_STATUS_OK
WriteX 10788 0 15360 15360 NT_STATUS_OK
Close 10788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10789 NT_STATUS_OK
ReadX 10789 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10789 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10789 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10790 NT_STATUS_OK
Close 10790 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10792 NT_STATUS_OK
ReadX 10792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10793 NT_STATUS_OK
SET_FILE_INFORMATION 10793 1004 NT_STATUS_OK
Close 10793 NT_STATUS_OK
WriteX 10789 0 4096 4096 NT_STATUS_OK
Close 10789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10794 NT_STATUS_OK
Close 10794 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10796 NT_STATUS_OK
ReadX 10796 0 4096 4096 NT_STATUS_OK
ReadX 10796 4096 4096 4096 NT_STATUS_OK
ReadX 10796 8192 4096 4096 NT_STATUS_OK
ReadX 10796 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10796 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10796 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10797 NT_STATUS_OK
ReadX 10797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10798 NT_STATUS_OK
WriteX 10798 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10798 258 NT_STATUS_OK
WriteX 10798 0 53 53 NT_STATUS_OK
Close 10798 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10799 NT_STATUS_OK
Close 10799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10797 4096 4096 4096 NT_STATUS_OK
ReadX 10797 8192 4096 4096 NT_STATUS_OK
ReadX 10797 12288 4096 4096 NT_STATUS_OK
WriteX 10801 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10801 258 NT_STATUS_OK
WriteX 10801 0 12006 12006 NT_STATUS_OK
Close 10801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10802 NT_STATUS_OK
ReadX 10802 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10802 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10802 1004 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Close 10802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10803 NT_STATUS_OK
Close 10803 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10805 NT_STATUS_OK
ReadX 10805 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10806 NT_STATUS_OK
Close 10806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10805 4096 4096 4096 NT_STATUS_OK
ReadX 10805 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10808 NT_STATUS_OK
WriteX 10808 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10808 258 NT_STATUS_OK
WriteX 10808 0 11991 11991 NT_STATUS_OK
Close 10808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10809 NT_STATUS_OK
ReadX 10809 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10809 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10809 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10810 NT_STATUS_OK
Close 10810 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10812 NT_STATUS_OK
ReadX 10812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10813 NT_STATUS_OK
SET_FILE_INFORMATION 10813 1004 NT_STATUS_OK
Close 10813 NT_STATUS_OK
WriteX 10809 0 4096 4096 NT_STATUS_OK
Close 10809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10814 NT_STATUS_OK
Close 10814 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10816 NT_STATUS_OK
ReadX 10816 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10817 NT_STATUS_OK
Close 10817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10816 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10816 1004 NT_STATUS_OK
ReadX 10816 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10816 1004 NT_STATUS_OK
WriteX 10816 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10816 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10816 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10816 1004 NT_STATUS_OK
Close 10792 NT_STATUS_OK
WriteX 10796 0 19054 19054 NT_STATUS_OK
WriteX 10816 0 12288 12288 NT_STATUS_OK
Close 10812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10819 NT_STATUS_OK
Close 10819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10796 NT_STATUS_OK
Close 10816 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10821 NT_STATUS_OK
Close 10821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10823 NT_STATUS_OK
ReadX 10823 0 61440 61440 NT_STATUS_OK
ReadX 10823 61440 4096 4096 NT_STATUS_OK
ReadX 10823 65536 61440 61440 NT_STATUS_OK
ReadX 10823 126976 4096 4096 NT_STATUS_OK
ReadX 10823 131072 61440 61440 NT_STATUS_OK
ReadX 10823 192512 4096 4096 NT_STATUS_OK
ReadX 10823 196608 61440 61440 NT_STATUS_OK
ReadX 10823 258048 4096 4096 NT_STATUS_OK
ReadX 10823 262144 61440 61440 NT_STATUS_OK
ReadX 10823 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10824 NT_STATUS_OK
ReadX 10824 0 61440 61440 NT_STATUS_OK
ReadX 10824 61440 4096 4096 NT_STATUS_OK
ReadX 10824 65536 61440 61440 NT_STATUS_OK
ReadX 10824 126976 4096 4096 NT_STATUS_OK
ReadX 10824 131072 61440 61440 NT_STATUS_OK
ReadX 10824 192512 4096 4096 NT_STATUS_OK
ReadX 10824 196608 61440 61440 NT_STATUS_OK
ReadX 10824 258048 4096 4096 NT_STATUS_OK
ReadX 10824 262144 61440 61440 NT_STATUS_OK
ReadX 10824 323584 4096 4096 NT_STATUS_OK
ReadX 10824 327680 61440 61440 NT_STATUS_OK
ReadX 10824 389120 4096 4096 NT_STATUS_OK
ReadX 10824 393216 61440 61440 NT_STATUS_OK
ReadX 10824 454656 4096 4096 NT_STATUS_OK
ReadX 10824 458752 61440 61440 NT_STATUS_OK
ReadX 10824 520192 4096 4096 NT_STATUS_OK
ReadX 10824 524288 61440 61440 NT_STATUS_OK
ReadX 10824 585728 4096 4096 NT_STATUS_OK
ReadX 10824 589824 61440 61440 NT_STATUS_OK
ReadX 10824 651264 4096 4096 NT_STATUS_OK
ReadX 10824 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10825 NT_STATUS_OK
ReadX 10825 0 61440 61440 NT_STATUS_OK
ReadX 10825 61440 4096 4096 NT_STATUS_OK
ReadX 10825 65536 61440 61440 NT_STATUS_OK
ReadX 10825 126976 4096 4096 NT_STATUS_OK
ReadX 10825 131072 61440 61440 NT_STATUS_OK
ReadX 10825 192512 4096 4096 NT_STATUS_OK
ReadX 10825 196608 61440 61440 NT_STATUS_OK
ReadX 10825 258048 4096 4096 NT_STATUS_OK
ReadX 10825 262144 61440 61440 NT_STATUS_OK
ReadX 10825 323584 4096 4096 NT_STATUS_OK
ReadX 10825 327680 61440 61440 NT_STATUS_OK
ReadX 10825 389120 4096 4096 NT_STATUS_OK
ReadX 10825 393216 61440 61440 NT_STATUS_OK
ReadX 10825 454656 4096 4096 NT_STATUS_OK
ReadX 10825 458752 61440 61440 NT_STATUS_OK
ReadX 10825 520192 4096 4096 NT_STATUS_OK
ReadX 10825 524288 61440 61440 NT_STATUS_OK
ReadX 10825 585728 4096 4096 NT_STATUS_OK
ReadX 10825 589824 61440 61440 NT_STATUS_OK
ReadX 10825 651264 4096 4096 NT_STATUS_OK
ReadX 10825 655360 61440 61440 NT_STATUS_OK
ReadX 10825 716800 4096 4096 NT_STATUS_OK
ReadX 10825 720896 61440 61440 NT_STATUS_OK
ReadX 10825 782336 4096 4096 NT_STATUS_OK
ReadX 10825 786432 61440 61440 NT_STATUS_OK
ReadX 10825 847872 4096 4096 NT_STATUS_OK
ReadX 10825 851968 61440 61440 NT_STATUS_OK
ReadX 10825 913408 4096 4096 NT_STATUS_OK
ReadX 10825 917504 61440 61440 NT_STATUS_OK
ReadX 10825 978944 4096 4096 NT_STATUS_OK
ReadX 10825 983040 61440 61440 NT_STATUS_OK
ReadX 10825 1044480 4096 4096 NT_STATUS_OK
ReadX 10825 1048576 61440 61440 NT_STATUS_OK
ReadX 10825 1110016 4096 4096 NT_STATUS_OK
ReadX 10825 1114112 61440 61440 NT_STATUS_OK
ReadX 10825 1175552 4096 4096 NT_STATUS_OK
ReadX 10825 1179648 61440 61440 NT_STATUS_OK
ReadX 10825 1241088 4096 4096 NT_STATUS_OK
ReadX 10825 1245184 61440 61440 NT_STATUS_OK
ReadX 10825 1306624 4096 4096 NT_STATUS_OK
ReadX 10825 1310720 61440 61440 NT_STATUS_OK
ReadX 10825 1372160 4096 4096 NT_STATUS_OK
ReadX 10825 1376256 61440 61440 NT_STATUS_OK
ReadX 10825 1437696 4096 4096 NT_STATUS_OK
ReadX 10825 1441792 61440 61440 NT_STATUS_OK
ReadX 10825 1503232 4096 4096 NT_STATUS_OK
ReadX 10825 1507328 61440 61440 NT_STATUS_OK
ReadX 10825 1568768 4096 4096 NT_STATUS_OK
ReadX 10825 1572864 61440 61440 NT_STATUS_OK
ReadX 10825 1634304 4096 4096 NT_STATUS_OK
ReadX 10825 1638400 61440 61440 NT_STATUS_OK
ReadX 10825 1699840 4096 4096 NT_STATUS_OK
ReadX 10825 1703936 61440 61440 NT_STATUS_OK
ReadX 10825 1765376 4096 4096 NT_STATUS_OK
ReadX 10825 1769472 61440 61440 NT_STATUS_OK
ReadX 10825 1830912 4096 4096 NT_STATUS_OK
ReadX 10825 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10826 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10827 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10828 NT_STATUS_OK
ReadX 10828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10829 NT_STATUS_OK
ReadX 10829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10830 NT_STATUS_OK
ReadX 10830 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10831 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10832 NT_STATUS_OK
QUERY_FILE_INFORMATION 10832 1004 NT_STATUS_OK
WriteX 10832 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10832 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10833 NT_STATUS_OK
Close 10833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10834 NT_STATUS_OK
WriteX 10834 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10834 258 NT_STATUS_OK
WriteX 10834 0 491 491 NT_STATUS_OK
Close 10834 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10835 NT_STATUS_OK
ReadX 10835 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10832 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10837 NT_STATUS_OK
Close 10837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10838 NT_STATUS_OK
WriteX 10838 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10838 258 NT_STATUS_OK
WriteX 10838 0 543 543 NT_STATUS_OK
Close 10838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10839 NT_STATUS_OK
ReadX 10839 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10823 NT_STATUS_OK
Close 10824 NT_STATUS_OK
Close 10825 NT_STATUS_OK
Close 10839 NT_STATUS_OK
Close 10827 NT_STATUS_OK
Close 10828 NT_STATUS_OK
Close 10829 NT_STATUS_OK
Close 10830 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10842 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10843 NT_STATUS_OK
ReadX 10843 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10844 NT_STATUS_OK
ReadX 10844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10845 NT_STATUS_OK
ReadX 10845 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10846 NT_STATUS_OK
ReadX 10846 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10847 NT_STATUS_OK
ReadX 10847 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10851 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10852 NT_STATUS_OK
QUERY_FILE_INFORMATION 10852 1004 NT_STATUS_OK
WriteX 10852 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10852 258 NT_STATUS_OK
WriteX 10852 0 2048 2048 NT_STATUS_OK
Close 10852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10853 NT_STATUS_OK
ReadX 10853 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10853 0 4096 4096 NT_STATUS_OK
Flush 10853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10853 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10857 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10858 NT_STATUS_OK
WriteX 10858 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10858 258 NT_STATUS_OK
WriteX 10858 0 2048 2048 NT_STATUS_OK
Close 10858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10859 NT_STATUS_OK
ReadX 10859 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10863 NT_STATUS_OK
Close 10863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10864 NT_STATUS_OK
WriteX 10864 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10864 258 NT_STATUS_OK
WriteX 10864 0 2048 2048 NT_STATUS_OK
Close 10864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10865 NT_STATUS_OK
ReadX 10865 0 2048 2048 NT_STATUS_OK
ReadX 10843 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10847 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10859 0 4096 4096 NT_STATUS_OK
WriteX 10843 0 8192 8192 NT_STATUS_OK
WriteX 10844 0 4096 4096 NT_STATUS_OK
WriteX 10845 0 4096 4096 NT_STATUS_OK
ReadX 10859 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10843 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10868 NT_STATUS_OK
ReadX 10868 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10869 NT_STATUS_OK
QUERY_FILE_INFORMATION 10869 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10868 NT_STATUS_OK
Close 10844 NT_STATUS_OK
Close 10845 NT_STATUS_OK
Close 10846 NT_STATUS_OK
Close 10859 NT_STATUS_OK
Close 10843 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10871 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10872 NT_STATUS_OK
ReadX 10872 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10873 NT_STATUS_OK
ReadX 10873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10874 NT_STATUS_OK
ReadX 10874 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10875 NT_STATUS_OK
ReadX 10875 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10876 NT_STATUS_OK
ReadX 10876 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10877 NT_STATUS_OK
ReadX 10877 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10878 NT_STATUS_OK
ReadX 10878 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10879 NT_STATUS_OK
ReadX 10879 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10880 NT_STATUS_OK
ReadX 10880 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10881 NT_STATUS_OK
ReadX 10881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10882 NT_STATUS_OK
ReadX 10882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10883 NT_STATUS_OK
ReadX 10883 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10884 NT_STATUS_OK
ReadX 10884 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10888 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10889 NT_STATUS_OK
QUERY_FILE_INFORMATION 10889 1004 NT_STATUS_OK
WriteX 10889 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10889 258 NT_STATUS_OK
WriteX 10889 0 2048 2048 NT_STATUS_OK
Close 10889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10890 NT_STATUS_OK
ReadX 10890 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10891 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10892 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10892 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10896 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10897 NT_STATUS_OK
QUERY_FILE_INFORMATION 10897 1004 NT_STATUS_OK
WriteX 10897 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10897 258 NT_STATUS_OK
WriteX 10897 0 2048 2048 NT_STATUS_OK
Close 10897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10898 NT_STATUS_OK
ReadX 10898 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10890 0 4096 4096 NT_STATUS_OK
Flush 10890 NT_STATUS_OK
WriteX 10898 0 4096 4096 NT_STATUS_OK
Flush 10898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10890 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10898 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10892 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10899 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10900 NT_STATUS_OK
WriteX 10900 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10900 258 NT_STATUS_OK
WriteX 10900 0 4096 4096 NT_STATUS_OK
Close 10900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10901 NT_STATUS_OK
ReadX 10901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10902 NT_STATUS_OK
Close 10902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10903 NT_STATUS_OK
WriteX 10903 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10903 258 NT_STATUS_OK
WriteX 10903 0 4096 4096 NT_STATUS_OK
Close 10903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10904 NT_STATUS_OK
ReadX 10904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10904 0 4096 4096 NT_STATUS_OK
Close 10901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10884 NT_STATUS_OK
Close 10878 NT_STATUS_OK
Close 10892 NT_STATUS_OK
Close 10881 NT_STATUS_OK
Close 10882 NT_STATUS_OK
Close 10883 NT_STATUS_OK
Close 10879 NT_STATUS_OK
Close 10872 NT_STATUS_OK
Close 10873 NT_STATUS_OK
Close 10876 NT_STATUS_OK
Close 10877 NT_STATUS_OK
Close 10874 NT_STATUS_OK
Close 10875 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10907 NT_STATUS_OK
Close 10907 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10909 NT_STATUS_OK
ReadX 10909 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10910 NT_STATUS_OK
Close 10910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10911 NT_STATUS_OK
WriteX 10911 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10911 258 NT_STATUS_OK
WriteX 10911 0 2048 2048 NT_STATUS_OK
Close 10911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10912 NT_STATUS_OK
ReadX 10912 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10913 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10913 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10914 NT_STATUS_OK
ReadX 10914 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10915 NT_STATUS_OK
ReadX 10915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10916 NT_STATUS_OK
ReadX 10916 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10917 NT_STATUS_OK
ReadX 10917 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10918 NT_STATUS_OK
ReadX 10918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10919 NT_STATUS_OK
ReadX 10919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10921 NT_STATUS_OK
ReadX 10921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10922 NT_STATUS_OK
ReadX 10922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10923 NT_STATUS_OK
ReadX 10923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10924 NT_STATUS_OK
ReadX 10924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10925 NT_STATUS_OK
ReadX 10925 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10926 NT_STATUS_OK
QUERY_FILE_INFORMATION 10926 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10909 NT_STATUS_OK
Close 10912 NT_STATUS_OK
Close 10924 NT_STATUS_OK
Close 10919 NT_STATUS_OK
Close 10920 NT_STATUS_OK
Close 10921 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Close 10923 NT_STATUS_OK
Close 10925 NT_STATUS_OK
Close 10913 NT_STATUS_OK
Close 10914 NT_STATUS_OK
Close 10917 NT_STATUS_OK
Close 10918 NT_STATUS_OK
Close 10915 NT_STATUS_OK
Close 10916 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10928 NT_STATUS_OK
QUERY_FILE_INFORMATION 10928 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10930 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10931 NT_STATUS_OK
ReadX 10931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10932 NT_STATUS_OK
ReadX 10932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10933 NT_STATUS_OK
ReadX 10933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10934 NT_STATUS_OK
ReadX 10934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10935 NT_STATUS_OK
ReadX 10935 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10936 NT_STATUS_OK
ReadX 10936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10937 NT_STATUS_OK
ReadX 10937 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10938 NT_STATUS_OK
ReadX 10938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10939 NT_STATUS_OK
ReadX 10939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10940 NT_STATUS_OK
ReadX 10940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10941 NT_STATUS_OK
ReadX 10941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10942 NT_STATUS_OK
ReadX 10942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10943 NT_STATUS_OK
ReadX 10943 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10947 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10948 NT_STATUS_OK
QUERY_FILE_INFORMATION 10948 1004 NT_STATUS_OK
WriteX 10948 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10948 258 NT_STATUS_OK
WriteX 10948 0 2048 2048 NT_STATUS_OK
Close 10948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10949 NT_STATUS_OK
ReadX 10949 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10950 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10951 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10951 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10952 NT_STATUS_OK
ReadX 10952 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10953 NT_STATUS_OK
ReadX 10953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10954 NT_STATUS_OK
ReadX 10954 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10955 NT_STATUS_OK
ReadX 10955 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10959 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10960 NT_STATUS_OK
QUERY_FILE_INFORMATION 10960 1004 NT_STATUS_OK
WriteX 10960 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10960 258 NT_STATUS_OK
WriteX 10960 0 2048 2048 NT_STATUS_OK
Close 10960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10961 NT_STATUS_OK
ReadX 10961 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10962 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10963 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10963 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10967 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10968 NT_STATUS_OK
QUERY_FILE_INFORMATION 10968 1004 NT_STATUS_OK
WriteX 10968 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10968 258 NT_STATUS_OK
WriteX 10968 0 2048 2048 NT_STATUS_OK
Close 10968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10969 NT_STATUS_OK
ReadX 10969 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10949 0 4096 4096 NT_STATUS_OK
Flush 10949 NT_STATUS_OK
WriteX 10961 0 4096 4096 NT_STATUS_OK
Flush 10961 NT_STATUS_OK
WriteX 10969 0 4096 4096 NT_STATUS_OK
Flush 10969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10949 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10961 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10969 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10951 4096 16384 16384 NT_STATUS_OK
ReadX 10931 4096 16384 16384 NT_STATUS_OK
ReadX 10963 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10970 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10971 NT_STATUS_OK
ReadX 10971 0 2048 2048 NT_STATUS_OK
WriteX 10971 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10972 NT_STATUS_OK
QUERY_FILE_INFORMATION 10972 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10971 NT_STATUS_OK
Close 10955 NT_STATUS_OK
Close 10943 NT_STATUS_OK
Close 10935 NT_STATUS_OK
Close 10951 NT_STATUS_OK
Close 10952 NT_STATUS_OK
Close 10953 NT_STATUS_OK
Close 10954 NT_STATUS_OK
Close 10942 NT_STATUS_OK
Close 10963 NT_STATUS_OK
Close 10937 NT_STATUS_OK
Close 10940 NT_STATUS_OK
Close 10941 NT_STATUS_OK
Close 10938 NT_STATUS_OK
Close 10939 NT_STATUS_OK
Close 10931 NT_STATUS_OK
Close 10932 NT_STATUS_OK
Close 10933 NT_STATUS_OK
Close 10934 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10974 NT_STATUS_OK
QUERY_FILE_INFORMATION 10974 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10976 NT_STATUS_OK
QUERY_FILE_INFORMATION 10976 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10978 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10979 NT_STATUS_OK
ReadX 10979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10980 NT_STATUS_OK
ReadX 10980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10981 NT_STATUS_OK
ReadX 10981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10982 NT_STATUS_OK
ReadX 10982 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10983 NT_STATUS_OK
ReadX 10983 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10979 4096 16384 16384 NT_STATUS_OK
WriteX 10979 0 4096 4096 NT_STATUS_OK
WriteX 10980 0 4096 4096 NT_STATUS_OK
WriteX 10981 0 4096 4096 NT_STATUS_OK
WriteX 10982 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10984 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10985 NT_STATUS_OK
ReadX 10985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10986 NT_STATUS_OK
ReadX 10986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10987 NT_STATUS_OK
ReadX 10987 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10988 NT_STATUS_OK
ReadX 10988 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10989 NT_STATUS_OK
ReadX 10989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10990 NT_STATUS_OK
ReadX 10990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10991 NT_STATUS_OK
ReadX 10991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10992 NT_STATUS_OK
ReadX 10992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10993 NT_STATUS_OK
ReadX 10993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10995 NT_STATUS_OK
ReadX 10995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10997 NT_STATUS_OK
ReadX 10997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10998 NT_STATUS_OK
ReadX 10998 0 8192 8192 NT_STATUS_OK
ReadX 10985 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10999 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10999 0 4096 4096 NT_STATUS_OK
ReadX 10999 4096 4096 4096 NT_STATUS_OK
ReadX 10999 8192 4096 4096 NT_STATUS_OK
WriteX 10985 0 4096 4096 NT_STATUS_OK
WriteX 10986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11000 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11000 0 4096 4096 NT_STATUS_OK
ReadX 11000 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10979 0 4096 4096 NT_STATUS_OK
WriteX 10980 0 4096 4096 NT_STATUS_OK
WriteX 10981 0 4096 4096 NT_STATUS_OK
WriteX 10982 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11005 1004 NT_STATUS_OK
WriteX 11005 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11005 258 NT_STATUS_OK
WriteX 11005 0 2048 2048 NT_STATUS_OK
Close 11005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11006 NT_STATUS_OK
ReadX 11006 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11006 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11006 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11007 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11008 NT_STATUS_OK
ReadX 11008 0 4096 4096 NT_STATUS_OK
ReadX 11008 4096 4096 4096 NT_STATUS_OK
WriteX 11008 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11006 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11010 NT_STATUS_OK
ReadX 11010 0 4096 4096 NT_STATUS_OK
ReadX 11010 4096 4096 4096 NT_STATUS_OK
WriteX 11010 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11011 NT_STATUS_OK
QUERY_FILE_INFORMATION 11011 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11011 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10998 NT_STATUS_OK
Close 10983 NT_STATUS_OK
Close 10979 NT_STATUS_OK
Close 10980 NT_STATUS_OK
Close 10981 NT_STATUS_OK
Close 10982 NT_STATUS_OK
Close 10991 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Close 10992 NT_STATUS_OK
Close 10993 NT_STATUS_OK
Close 10994 NT_STATUS_OK
Close 10995 NT_STATUS_OK
Close 10997 NT_STATUS_OK
Close 10985 NT_STATUS_OK
Close 10986 NT_STATUS_OK
Close 10989 NT_STATUS_OK
Close 10990 NT_STATUS_OK
Close 10987 NT_STATUS_OK
Close 10988 NT_STATUS_OK
Close 11010 NT_STATUS_OK
Close 10999 NT_STATUS_OK
Close 11000 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11013 0 4096 4096 NT_STATUS_OK
ReadX 11013 4096 4096 4096 NT_STATUS_OK
ReadX 11013 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11015 NT_STATUS_OK
ReadX 11015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11016 NT_STATUS_OK
ReadX 11016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11017 NT_STATUS_OK
ReadX 11017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11018 NT_STATUS_OK
ReadX 11018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11019 NT_STATUS_OK
ReadX 11019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11020 NT_STATUS_OK
ReadX 11020 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11021 NT_STATUS_OK
ReadX 11021 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11022 NT_STATUS_OK
ReadX 11022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11023 NT_STATUS_OK
ReadX 11023 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11024 NT_STATUS_OK
ReadX 11024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11025 NT_STATUS_OK
ReadX 11025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11026 NT_STATUS_OK
ReadX 11026 0 4096 4096 NT_STATUS_OK
ReadX 11014 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11030 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11031 NT_STATUS_OK
QUERY_FILE_INFORMATION 11031 1004 NT_STATUS_OK
WriteX 11031 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11031 258 NT_STATUS_OK
WriteX 11031 0 2048 2048 NT_STATUS_OK
Close 11031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11032 NT_STATUS_OK
ReadX 11032 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11032 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11036 NT_STATUS_OK
Close 11036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11037 NT_STATUS_OK
QUERY_FILE_INFORMATION 11037 1004 NT_STATUS_OK
WriteX 11037 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11037 258 NT_STATUS_OK
WriteX 11037 0 2048 2048 NT_STATUS_OK
Close 11037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11038 NT_STATUS_OK
ReadX 11038 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11038 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11021 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11039 NT_STATUS_OK
QUERY_FILE_INFORMATION 11039 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11025 NT_STATUS_OK
Close 11020 NT_STATUS_OK
Close 11026 NT_STATUS_OK
Close 11014 NT_STATUS_OK
Close 11015 NT_STATUS_OK
Close 11018 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11016 NT_STATUS_OK
Close 11017 NT_STATUS_OK
Close 11021 NT_STATUS_OK
Close 11022 NT_STATUS_OK
Close 11023 NT_STATUS_OK
Close 11024 NT_STATUS_OK
Close 11013 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11041 NT_STATUS_OK
QUERY_FILE_INFORMATION 11041 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11043 NT_STATUS_OK
ReadX 11043 61440 4096 4096 NT_STATUS_OK
ReadX 11043 126976 4096 4096 NT_STATUS_OK
WriteX 11043 0 65536 65536 NT_STATUS_OK
WriteX 11043 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11044 NT_STATUS_OK
ReadX 11044 61440 4096 4096 NT_STATUS_OK
ReadX 11044 126976 4096 4096 NT_STATUS_OK
ReadX 11044 192512 4096 4096 NT_STATUS_OK
ReadX 11044 258048 4096 4096 NT_STATUS_OK
WriteX 11044 0 65536 65536 NT_STATUS_OK
WriteX 11044 65536 65536 65536 NT_STATUS_OK
WriteX 11044 131072 65536 65536 NT_STATUS_OK
WriteX 11044 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11045 NT_STATUS_OK
ReadX 11045 61440 4096 4096 NT_STATUS_OK
ReadX 11045 126976 4096 4096 NT_STATUS_OK
ReadX 11045 192512 4096 4096 NT_STATUS_OK
ReadX 11045 258048 4096 4096 NT_STATUS_OK
ReadX 11045 323584 4096 4096 NT_STATUS_OK
ReadX 11045 389120 4096 4096 NT_STATUS_OK
ReadX 11045 454656 4096 4096 NT_STATUS_OK
ReadX 11045 520192 4096 4096 NT_STATUS_OK
WriteX 11045 0 65536 65536 NT_STATUS_OK
WriteX 11045 65536 65536 65536 NT_STATUS_OK
WriteX 11045 131072 65536 65536 NT_STATUS_OK
WriteX 11045 196608 65536 65536 NT_STATUS_OK
WriteX 11045 262144 65536 65536 NT_STATUS_OK
WriteX 11045 327680 65536 65536 NT_STATUS_OK
WriteX 11045 393216 65536 65536 NT_STATUS_OK
WriteX 11045 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11046 NT_STATUS_OK
ReadX 11046 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11046 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11046 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11046 8192 4096 4096 NT_STATUS_OK
ReadX 11046 12288 4096 4096 NT_STATUS_OK
ReadX 11046 16384 4096 4096 NT_STATUS_OK
ReadX 11046 20480 4096 4096 NT_STATUS_OK
ReadX 11046 24576 4096 4096 NT_STATUS_OK
ReadX 11046 28672 4096 4096 NT_STATUS_OK
ReadX 11046 32768 4096 4096 NT_STATUS_OK
ReadX 11046 36864 4096 4096 NT_STATUS_OK
ReadX 11046 40960 4096 4096 NT_STATUS_OK
ReadX 11046 45056 4096 4096 NT_STATUS_OK
ReadX 11046 49152 4096 4096 NT_STATUS_OK
ReadX 11046 53248 4096 4096 NT_STATUS_OK
ReadX 11046 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11046 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11047 NT_STATUS_OK
Close 11047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11043 NT_STATUS_OK
Close 11044 NT_STATUS_OK
Close 11045 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11049 NT_STATUS_OK
WriteX 11049 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11049 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11049 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11049 1004 NT_STATUS_OK
WriteX 11049 0 57088 57088 NT_STATUS_OK
WriteX 11049 0 4096 4096 NT_STATUS_OK
Flush 11049 NT_STATUS_OK
Close 11046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11050 NT_STATUS_OK
SET_FILE_INFORMATION 11050 1004 NT_STATUS_OK
Close 11050 NT_STATUS_OK
SET_FILE_INFORMATION 11049 1004 NT_STATUS_OK
WriteX 11049 0 4096 4096 NT_STATUS_OK
Close 11049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11051 NT_STATUS_OK
Close 11051 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11053 NT_STATUS_OK
ReadX 11053 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11053 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11054 NT_STATUS_OK
WriteX 11054 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11054 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11054 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11054 1004 NT_STATUS_OK
WriteX 11054 0 51456 51456 NT_STATUS_OK
WriteX 11054 0 4096 4096 NT_STATUS_OK
Flush 11054 NT_STATUS_OK
SET_FILE_INFORMATION 11054 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11054 1004 NT_STATUS_OK
WriteX 11054 0 4096 4096 NT_STATUS_OK
Close 11054 NT_STATUS_OK
Close 11053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11056 NT_STATUS_OK
Close 11056 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11058 NT_STATUS_OK
ReadX 11058 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11058 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11060 NT_STATUS_OK
Close 11060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11063 NT_STATUS_OK
WriteX 11063 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11063 258 NT_STATUS_OK
WriteX 11063 0 53077 53077 NT_STATUS_OK
Close 11063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11064 NT_STATUS_OK
WriteX 11064 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11064 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11064 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11064 1004 NT_STATUS_OK
WriteX 11064 0 65536 65536 NT_STATUS_OK
WriteX 11064 65536 1856 1856 NT_STATUS_OK
WriteX 11064 0 4096 4096 NT_STATUS_OK
Flush 11064 NT_STATUS_OK
SET_FILE_INFORMATION 11064 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11064 1004 NT_STATUS_OK
WriteX 11064 0 4096 4096 NT_STATUS_OK
Close 11064 NT_STATUS_OK
Close 11058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11066 NT_STATUS_OK
Close 11066 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11068 NT_STATUS_OK
ReadX 11068 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11070 NT_STATUS_OK
Close 11070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11073 NT_STATUS_OK
WriteX 11073 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11073 258 NT_STATUS_OK
WriteX 11073 0 7983 7983 NT_STATUS_OK
Close 11073 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11075 NT_STATUS_OK
Close 11075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11078 NT_STATUS_OK
WriteX 11078 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11078 258 NT_STATUS_OK
WriteX 11078 0 65536 65536 NT_STATUS_OK
WriteX 11078 65536 65536 65536 NT_STATUS_OK
WriteX 11078 131072 65536 65536 NT_STATUS_OK
WriteX 11078 196608 65536 65536 NT_STATUS_OK
WriteX 11078 262144 65536 65536 NT_STATUS_OK
WriteX 11078 327680 65536 65536 NT_STATUS_OK
WriteX 11078 393216 65536 65536 NT_STATUS_OK
WriteX 11078 458752 46731 46731 NT_STATUS_OK
Close 11078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11079 NT_STATUS_OK
WriteX 11079 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11079 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11068 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11079 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11079 1004 NT_STATUS_OK
WriteX 11079 0 65536 65536 NT_STATUS_OK
WriteX 11079 65536 22848 22848 NT_STATUS_OK
WriteX 11079 0 4096 4096 NT_STATUS_OK
Flush 11079 NT_STATUS_OK
SET_FILE_INFORMATION 11079 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11079 1004 NT_STATUS_OK
WriteX 11079 0 4096 4096 NT_STATUS_OK
Close 11079 NT_STATUS_OK
Close 11068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11081 NT_STATUS_OK
Close 11081 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11083 NT_STATUS_OK
ReadX 11083 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11083 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11084 NT_STATUS_OK
ReadX 11084 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11084 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11084 1004 NT_STATUS_OK
ReadX 11084 8192 4096 4096 NT_STATUS_OK
ReadX 11084 12288 4096 4096 NT_STATUS_OK
ReadX 11084 16384 4096 4096 NT_STATUS_OK
ReadX 11084 20480 4096 4096 NT_STATUS_OK
ReadX 11084 24576 4096 4096 NT_STATUS_OK
ReadX 11084 28672 4096 4096 NT_STATUS_OK
ReadX 11084 32768 4096 4096 NT_STATUS_OK
ReadX 11084 36864 4096 4096 NT_STATUS_OK
ReadX 11084 40960 4096 4096 NT_STATUS_OK
ReadX 11084 45056 4096 4096 NT_STATUS_OK
ReadX 11084 49152 4096 4096 NT_STATUS_OK
ReadX 11084 53248 4096 4096 NT_STATUS_OK
ReadX 11084 57344 4096 4096 NT_STATUS_OK
ReadX 11084 61440 4096 4096 NT_STATUS_OK
ReadX 11084 65536 4096 4096 NT_STATUS_OK
ReadX 11084 69632 4096 4096 NT_STATUS_OK
ReadX 11084 73728 4096 4096 NT_STATUS_OK
ReadX 11084 77824 4096 4096 NT_STATUS_OK
ReadX 11084 81920 4096 4096 NT_STATUS_OK
ReadX 11084 86016 4096 4096 NT_STATUS_OK
ReadX 11084 90112 4096 4096 NT_STATUS_OK
ReadX 11084 94208 4096 4096 NT_STATUS_OK
ReadX 11084 98304 4096 4096 NT_STATUS_OK
ReadX 11084 102400 4096 4096 NT_STATUS_OK
ReadX 11084 106496 4096 4096 NT_STATUS_OK
ReadX 11084 110592 4096 4096 NT_STATUS_OK
ReadX 11084 114688 4096 4096 NT_STATUS_OK
ReadX 11084 118784 4096 4096 NT_STATUS_OK
ReadX 11084 122880 4096 4096 NT_STATUS_OK
ReadX 11084 126976 4096 4096 NT_STATUS_OK
ReadX 11084 131072 4096 4096 NT_STATUS_OK
ReadX 11084 135168 4096 4096 NT_STATUS_OK
ReadX 11084 139264 4096 4096 NT_STATUS_OK
ReadX 11084 143360 4096 4096 NT_STATUS_OK
ReadX 11084 147456 4096 4096 NT_STATUS_OK
ReadX 11084 151552 4096 4096 NT_STATUS_OK
ReadX 11084 155648 4096 4096 NT_STATUS_OK
ReadX 11084 159744 4096 4096 NT_STATUS_OK
ReadX 11084 163840 4096 4096 NT_STATUS_OK
ReadX 11084 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11084 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11085 NT_STATUS_OK
Close 11085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11083 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11087 NT_STATUS_OK
WriteX 11087 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11087 258 NT_STATUS_OK
Close 11084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11088 NT_STATUS_OK
SET_FILE_INFORMATION 11088 1004 NT_STATUS_OK
Close 11088 NT_STATUS_OK
WriteX 11087 0 42388 42388 NT_STATUS_OK
Close 11087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11089 NT_STATUS_OK
Close 11089 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11091 NT_STATUS_OK
ReadX 11091 0 4096 4096 NT_STATUS_OK
ReadX 11091 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11092 NT_STATUS_OK
WriteX 11092 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11092 258 NT_STATUS_OK
SET_FILE_INFORMATION 11092 1004 NT_STATUS_OK
WriteX 11092 0 42652 42652 NT_STATUS_OK
Close 11092 NT_STATUS_OK
Close 11091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11094 NT_STATUS_OK
Close 11094 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11096 NT_STATUS_OK
ReadX 11096 0 4096 4096 NT_STATUS_OK
ReadX 11096 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11098 NT_STATUS_OK
Close 11098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11101 NT_STATUS_OK
WriteX 11101 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11101 258 NT_STATUS_OK
WriteX 11101 0 65536 65536 NT_STATUS_OK
WriteX 11101 65536 49 49 NT_STATUS_OK
Close 11101 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11102 NT_STATUS_OK
ReadX 11102 0 61440 61440 NT_STATUS_OK
ReadX 11102 61440 4096 4096 NT_STATUS_OK
ReadX 11102 65536 61440 61440 NT_STATUS_OK
ReadX 11102 126976 4096 4096 NT_STATUS_OK
ReadX 11102 131072 61440 61440 NT_STATUS_OK
ReadX 11102 192512 4096 4096 NT_STATUS_OK
ReadX 11102 196608 61440 61440 NT_STATUS_OK
ReadX 11102 258048 4096 4096 NT_STATUS_OK
ReadX 11102 262144 61440 61440 NT_STATUS_OK
ReadX 11102 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11103 NT_STATUS_OK
ReadX 11103 0 61440 61440 NT_STATUS_OK
ReadX 11103 61440 4096 4096 NT_STATUS_OK
ReadX 11103 65536 61440 61440 NT_STATUS_OK
ReadX 11103 126976 4096 4096 NT_STATUS_OK
ReadX 11103 131072 61440 61440 NT_STATUS_OK
ReadX 11103 192512 4096 4096 NT_STATUS_OK
ReadX 11103 196608 61440 61440 NT_STATUS_OK
ReadX 11103 258048 4096 4096 NT_STATUS_OK
ReadX 11103 262144 61440 61440 NT_STATUS_OK
ReadX 11103 323584 4096 4096 NT_STATUS_OK
ReadX 11103 327680 61440 61440 NT_STATUS_OK
ReadX 11103 389120 4096 4096 NT_STATUS_OK
ReadX 11103 393216 61440 61440 NT_STATUS_OK
ReadX 11103 454656 4096 4096 NT_STATUS_OK
ReadX 11103 458752 61440 61440 NT_STATUS_OK
ReadX 11103 520192 4096 4096 NT_STATUS_OK
ReadX 11103 524288 61440 61440 NT_STATUS_OK
ReadX 11103 585728 4096 4096 NT_STATUS_OK
ReadX 11103 589824 61440 61440 NT_STATUS_OK
ReadX 11103 651264 4096 4096 NT_STATUS_OK
ReadX 11103 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11104 NT_STATUS_OK
ReadX 11104 0 61440 61440 NT_STATUS_OK
ReadX 11104 61440 4096 4096 NT_STATUS_OK
ReadX 11104 65536 61440 61440 NT_STATUS_OK
ReadX 11104 126976 4096 4096 NT_STATUS_OK
ReadX 11104 131072 61440 61440 NT_STATUS_OK
ReadX 11104 192512 4096 4096 NT_STATUS_OK
ReadX 11104 196608 61440 61440 NT_STATUS_OK
ReadX 11104 258048 4096 4096 NT_STATUS_OK
ReadX 11104 262144 61440 61440 NT_STATUS_OK
ReadX 11104 323584 4096 4096 NT_STATUS_OK
ReadX 11104 327680 61440 61440 NT_STATUS_OK
ReadX 11104 389120 4096 4096 NT_STATUS_OK
ReadX 11104 393216 61440 61440 NT_STATUS_OK
ReadX 11104 454656 4096 4096 NT_STATUS_OK
ReadX 11104 458752 61440 61440 NT_STATUS_OK
ReadX 11104 520192 4096 4096 NT_STATUS_OK
ReadX 11104 524288 61440 61440 NT_STATUS_OK
ReadX 11104 585728 4096 4096 NT_STATUS_OK
ReadX 11104 589824 61440 61440 NT_STATUS_OK
ReadX 11104 651264 4096 4096 NT_STATUS_OK
ReadX 11104 655360 61440 61440 NT_STATUS_OK
ReadX 11104 716800 4096 4096 NT_STATUS_OK
ReadX 11104 720896 61440 61440 NT_STATUS_OK
ReadX 11104 782336 4096 4096 NT_STATUS_OK
ReadX 11104 786432 61440 61440 NT_STATUS_OK
ReadX 11104 847872 4096 4096 NT_STATUS_OK
ReadX 11104 851968 61440 61440 NT_STATUS_OK
ReadX 11104 913408 4096 4096 NT_STATUS_OK
ReadX 11104 917504 61440 61440 NT_STATUS_OK
ReadX 11104 978944 4096 4096 NT_STATUS_OK
ReadX 11104 983040 61440 61440 NT_STATUS_OK
ReadX 11104 1044480 4096 4096 NT_STATUS_OK
ReadX 11104 1048576 61440 61440 NT_STATUS_OK
ReadX 11104 1110016 4096 4096 NT_STATUS_OK
ReadX 11104 1114112 61440 61440 NT_STATUS_OK
ReadX 11104 1175552 4096 4096 NT_STATUS_OK
ReadX 11104 1179648 61440 61440 NT_STATUS_OK
ReadX 11104 1241088 4096 4096 NT_STATUS_OK
ReadX 11104 1245184 61440 61440 NT_STATUS_OK
ReadX 11104 1306624 4096 4096 NT_STATUS_OK
ReadX 11104 1310720 61440 61440 NT_STATUS_OK
ReadX 11104 1372160 4096 4096 NT_STATUS_OK
ReadX 11104 1376256 61440 61440 NT_STATUS_OK
ReadX 11104 1437696 4096 4096 NT_STATUS_OK
ReadX 11104 1441792 61440 61440 NT_STATUS_OK
ReadX 11104 1503232 4096 4096 NT_STATUS_OK
ReadX 11104 1507328 61440 61440 NT_STATUS_OK
ReadX 11104 1568768 4096 4096 NT_STATUS_OK
ReadX 11104 1572864 61440 61440 NT_STATUS_OK
ReadX 11104 1634304 4096 4096 NT_STATUS_OK
ReadX 11104 1638400 61440 61440 NT_STATUS_OK
ReadX 11104 1699840 4096 4096 NT_STATUS_OK
ReadX 11104 1703936 61440 61440 NT_STATUS_OK
ReadX 11104 1765376 4096 4096 NT_STATUS_OK
ReadX 11104 1769472 61440 61440 NT_STATUS_OK
ReadX 11104 1830912 4096 4096 NT_STATUS_OK
ReadX 11104 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11106 NT_STATUS_OK
QUERY_FILE_INFORMATION 11106 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11106 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11106 1005 NT_STATUS_OK
ReadX 11106 2156 24 24 NT_STATUS_OK
ReadX 11106 2139 276 276 NT_STATUS_OK
ReadX 11106 2136 14 14 NT_STATUS_OK
ReadX 11106 2136 7 7 NT_STATUS_OK
ReadX 11106 2138 12 12 NT_STATUS_OK
ReadX 11106 2137 8 8 NT_STATUS_OK
ReadX 11106 2135 15 15 NT_STATUS_OK
ReadX 11106 0 16 16 NT_STATUS_OK
ReadX 11106 16 2048 2048 NT_STATUS_OK
ReadX 11106 2064 2048 2048 NT_STATUS_OK
ReadX 11106 257 2048 2048 NT_STATUS_OK
ReadX 11106 385 2048 2048 NT_STATUS_OK
ReadX 11106 513 2048 2048 NT_STATUS_OK
ReadX 11106 641 2048 2048 NT_STATUS_OK
ReadX 11106 769 2048 2048 NT_STATUS_OK
ReadX 11106 897 2048 2048 NT_STATUS_OK
ReadX 11106 1025 2048 2048 NT_STATUS_OK
ReadX 11106 1153 2048 2048 NT_STATUS_OK
ReadX 11106 1281 2048 2048 NT_STATUS_OK
ReadX 11106 1409 2048 2048 NT_STATUS_OK
ReadX 11106 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11108 NT_STATUS_OK
Close 11108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11102 NT_STATUS_OK
Close 11103 NT_STATUS_OK
Close 11104 NT_STATUS_OK
Close 11096 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11111 NT_STATUS_OK
WriteX 11111 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11111 258 NT_STATUS_OK
WriteX 11111 0 10575 10575 NT_STATUS_OK
Flush 11111 NT_STATUS_OK
Close 11111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11112 NT_STATUS_OK
Close 11112 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11114 NT_STATUS_OK
ReadX 11114 0 4096 4096 NT_STATUS_OK
Close 11106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11116 NT_STATUS_OK
LockX 11116 2147483538 1 NT_STATUS_OK
UnlockX 11116 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11116 1005 NT_STATUS_OK
ReadX 11116 0 512 512 NT_STATUS_OK
ReadX 11116 512 512 512 NT_STATUS_OK
ReadX 11116 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11116 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11116 1004 NT_STATUS_OK
Close 11116 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11117 NT_STATUS_OK
QUERY_FILE_INFORMATION 11117 1005 NT_STATUS_OK
ReadX 11117 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11118 NT_STATUS_OK
LockX 11118 2147483538 1 NT_STATUS_OK
UnlockX 11118 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11118 1005 NT_STATUS_OK
ReadX 11118 0 512 512 NT_STATUS_OK
ReadX 11118 512 512 512 NT_STATUS_OK
ReadX 11118 1024 512 512 NT_STATUS_OK
ReadX 11118 288 20 20 NT_STATUS_OK
ReadX 11118 308 2084 2084 NT_STATUS_OK
ReadX 11118 388 2084 2084 NT_STATUS_OK
ReadX 11118 388 2084 2084 NT_STATUS_OK
ReadX 11105 2157 1386 1386 NT_STATUS_OK
ReadX 11118 2472 399 399 NT_STATUS_OK
ReadX 11118 3072 1536 1536 NT_STATUS_OK
ReadX 11118 544 149 149 NT_STATUS_OK
ReadX 11118 693 485 485 NT_STATUS_OK
Close 11118 NT_STATUS_OK
ReadX 11105 2157 4096 4096 NT_STATUS_OK
ReadX 11105 6253 4096 4096 NT_STATUS_OK
ReadX 11105 10349 4096 4096 NT_STATUS_OK
ReadX 11105 14445 4096 4096 NT_STATUS_OK
ReadX 11105 18541 4096 4096 NT_STATUS_OK
ReadX 11105 22637 256 256 NT_STATUS_OK
ReadX 11105 22893 4096 4096 NT_STATUS_OK
ReadX 11105 26989 4096 4096 NT_STATUS_OK
ReadX 11105 31085 4096 4096 NT_STATUS_OK
ReadX 11105 35181 4096 4096 NT_STATUS_OK
ReadX 11105 39277 4096 4096 NT_STATUS_OK
ReadX 11105 43373 4096 4096 NT_STATUS_OK
ReadX 11105 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11105 2157 1024 1024 NT_STATUS_OK
ReadX 11105 1667 4688 4688 NT_STATUS_OK
ReadX 11105 6355 3516 3516 NT_STATUS_OK
ReadX 11105 9871 16384 16384 NT_STATUS_OK
ReadX 11105 26255 3771 3771 NT_STATUS_OK
ReadX 11105 30026 2048 2048 NT_STATUS_OK
ReadX 11105 32074 1024 1024 NT_STATUS_OK
ReadX 11105 33098 6652 6652 NT_STATUS_OK
ReadX 11105 39750 16384 16384 NT_STATUS_OK
ReadX 11105 56134 10496 10496 NT_STATUS_OK
ReadX 11105 66630 1784 1784 NT_STATUS_OK
ReadX 11105 68414 90 90 NT_STATUS_OK
ReadX 11105 68504 273 273 NT_STATUS_OK
ReadX 11105 68777 1600 1600 NT_STATUS_OK
ReadX 11105 70377 640 640 NT_STATUS_OK
ReadX 11105 71017 1280 1280 NT_STATUS_OK
ReadX 11105 72297 8464 8464 NT_STATUS_OK
ReadX 11105 80761 158 158 NT_STATUS_OK
ReadX 11105 80919 912 912 NT_STATUS_OK
ReadX 11105 81831 1980 1980 NT_STATUS_OK
ReadX 11105 83811 2256 2256 NT_STATUS_OK
ReadX 11105 86067 400 400 NT_STATUS_OK
ReadX 11105 86467 252 252 NT_STATUS_OK
ReadX 11105 86719 42 42 NT_STATUS_OK
ReadX 11105 86761 725 725 NT_STATUS_OK
ReadX 11105 2009 512 512 NT_STATUS_OK
ReadX 11105 3895 9 9 NT_STATUS_OK
ReadX 11105 3781 46 46 NT_STATUS_OK
ReadX 11105 4059 92 92 NT_STATUS_OK
ReadX 11105 3781 92 92 NT_STATUS_OK
ReadX 11105 3986 184 184 NT_STATUS_OK
ReadX 11105 3987 16384 16384 NT_STATUS_OK
ReadX 11105 3902 16384 16384 NT_STATUS_OK
ReadX 11105 3781 10240 10240 NT_STATUS_OK
ReadX 11105 3821 16384 16384 NT_STATUS_OK
ReadX 11105 3891 935 935 NT_STATUS_OK
ReadX 11105 4060 10240 10240 NT_STATUS_OK
ReadX 11105 4059 184 184 NT_STATUS_OK
ReadX 11105 256 184 184 NT_STATUS_OK
ReadX 11105 256 1026 1026 NT_STATUS_OK
ReadX 11105 3901 326 326 NT_STATUS_OK
ReadX 11105 3899 652 652 NT_STATUS_OK
ReadX 11105 256 2 2 NT_STATUS_OK
ReadX 11105 258 4948 4948 NT_STATUS_OK
Close 11105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11120 NT_STATUS_OK
Close 11120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11123 NT_STATUS_OK
WriteX 11123 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11123 258 NT_STATUS_OK
WriteX 11123 0 65536 65536 NT_STATUS_OK
WriteX 11123 65536 65536 65536 NT_STATUS_OK
WriteX 11123 131072 65536 65536 NT_STATUS_OK
WriteX 11123 196608 65536 65536 NT_STATUS_OK
WriteX 11123 262144 65536 65536 NT_STATUS_OK
WriteX 11123 327680 65536 65536 NT_STATUS_OK
WriteX 11123 393216 65536 65536 NT_STATUS_OK
WriteX 11123 458752 65536 65536 NT_STATUS_OK
WriteX 11123 524288 65536 65536 NT_STATUS_OK
WriteX 11123 589824 35257 35257 NT_STATUS_OK
Close 11123 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11125 NT_STATUS_OK
Close 11125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11128 NT_STATUS_OK
WriteX 11128 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11128 258 NT_STATUS_OK
WriteX 11128 0 65536 65536 NT_STATUS_OK
WriteX 11128 65536 65536 65536 NT_STATUS_OK
WriteX 11128 131072 65536 65536 NT_STATUS_OK
WriteX 11128 196608 65536 65536 NT_STATUS_OK
WriteX 11128 262144 65536 65536 NT_STATUS_OK
WriteX 11128 327680 65536 65536 NT_STATUS_OK
WriteX 11128 393216 65536 65536 NT_STATUS_OK
WriteX 11128 458752 65536 65536 NT_STATUS_OK
WriteX 11128 524288 65536 65536 NT_STATUS_OK
WriteX 11128 589824 57598 57598 NT_STATUS_OK
Close 11128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11130 NT_STATUS_OK
WriteX 11130 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11130 258 NT_STATUS_OK
WriteX 11130 0 12543 12543 NT_STATUS_OK
Flush 11130 NT_STATUS_OK
Close 11130 NT_STATUS_OK
Close 11114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11132 NT_STATUS_OK
Close 11132 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11134 NT_STATUS_OK
ReadX 11134 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11135 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11136 NT_STATUS_OK
QUERY_FILE_INFORMATION 11136 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11136 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11136 1005 NT_STATUS_OK
ReadX 11136 1938 24 24 NT_STATUS_OK
ReadX 11136 1920 276 276 NT_STATUS_OK
ReadX 11136 1918 14 14 NT_STATUS_OK
ReadX 11136 1918 7 7 NT_STATUS_OK
ReadX 11136 1919 12 12 NT_STATUS_OK
ReadX 11136 1919 8 8 NT_STATUS_OK
ReadX 11136 1917 15 15 NT_STATUS_OK
ReadX 11136 0 16 16 NT_STATUS_OK
ReadX 11136 16 2048 2048 NT_STATUS_OK
ReadX 11136 2064 2048 2048 NT_STATUS_OK
ReadX 11136 257 2048 2048 NT_STATUS_OK
ReadX 11136 385 2048 2048 NT_STATUS_OK
ReadX 11136 513 2048 2048 NT_STATUS_OK
ReadX 11136 641 2048 2048 NT_STATUS_OK
ReadX 11136 769 2048 2048 NT_STATUS_OK
ReadX 11136 897 2048 2048 NT_STATUS_OK
ReadX 11136 1025 2048 2048 NT_STATUS_OK
ReadX 11136 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11138 NT_STATUS_OK
Close 11138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11141 NT_STATUS_OK
WriteX 11141 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11141 258 NT_STATUS_OK
WriteX 11141 0 11588 11588 NT_STATUS_OK
Flush 11141 NT_STATUS_OK
Close 11141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11142 NT_STATUS_OK
Close 11142 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11144 NT_STATUS_OK
ReadX 11144 0 4096 4096 NT_STATUS_OK
Close 11136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11146 NT_STATUS_OK
WriteX 11146 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11146 258 NT_STATUS_OK
WriteX 11146 0 11615 11615 NT_STATUS_OK
Flush 11146 NT_STATUS_OK
Close 11146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11148 NT_STATUS_OK
Close 11148 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11150 NT_STATUS_OK
ReadX 11150 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11152 NT_STATUS_OK
Close 11152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11155 NT_STATUS_OK
WriteX 11155 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11155 258 NT_STATUS_OK
WriteX 11155 0 65536 65536 NT_STATUS_OK
WriteX 11155 65536 16050 16050 NT_STATUS_OK
Close 11155 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11135 1939 64 64 NT_STATUS_OK
ReadX 11135 128 248 248 NT_STATUS_OK
ReadX 11135 128 568 568 NT_STATUS_OK
ReadX 11135 3872 1536 1536 NT_STATUS_OK
ReadX 11135 3456 2560 2560 NT_STATUS_OK
ReadX 11135 3136 512 512 NT_STATUS_OK
ReadX 11135 2880 4096 4096 NT_STATUS_OK
ReadX 11135 3264 3072 3072 NT_STATUS_OK
ReadX 11135 320 4096 4096 NT_STATUS_OK
ReadX 11135 1024 4096 4096 NT_STATUS_OK
ReadX 11135 3616 4096 4096 NT_STATUS_OK
ReadX 11135 1939 64 64 NT_STATUS_OK
ReadX 11135 128 248 248 NT_STATUS_OK
ReadX 11135 128 608 608 NT_STATUS_OK
ReadX 11135 2858 1024 1024 NT_STATUS_OK
ReadX 11135 2810 4096 4096 NT_STATUS_OK
ReadX 11135 2826 4096 4096 NT_STATUS_OK
ReadX 11135 2580 2048 2048 NT_STATUS_OK
ReadX 11135 2800 2560 2560 NT_STATUS_OK
ReadX 11135 2100 4096 4096 NT_STATUS_OK
ReadX 11135 2084 4096 4096 NT_STATUS_OK
ReadX 11135 868 4096 4096 NT_STATUS_OK
ReadX 11135 2324 4096 4096 NT_STATUS_OK
ReadX 11135 884 4096 4096 NT_STATUS_OK
ReadX 11135 2604 1024 1024 NT_STATUS_OK
ReadX 11135 580 4096 4096 NT_STATUS_OK
ReadX 11135 596 4096 4096 NT_STATUS_OK
ReadX 11135 2752 4096 4096 NT_STATUS_OK
ReadX 11135 2842 1024 1024 NT_STATUS_OK
ReadX 11135 660 4096 4096 NT_STATUS_OK
ReadX 11135 2720 4096 4096 NT_STATUS_OK
ReadX 11135 2736 4096 4096 NT_STATUS_OK
ReadX 11135 628 4096 4096 NT_STATUS_OK
ReadX 11135 2704 4096 4096 NT_STATUS_OK
ReadX 11135 1556 4096 4096 NT_STATUS_OK
ReadX 11135 576 4096 4096 NT_STATUS_OK
ReadX 11135 3168 1536 1536 NT_STATUS_OK
ReadX 11135 832 4096 4096 NT_STATUS_OK
ReadX 11135 1088 4096 4096 NT_STATUS_OK
ReadX 11135 1344 4096 4096 NT_STATUS_OK
ReadX 11135 1600 4096 4096 NT_STATUS_OK
ReadX 11135 1856 4096 4096 NT_STATUS_OK
ReadX 11135 2112 4096 4096 NT_STATUS_OK
ReadX 11135 1892 4096 4096 NT_STATUS_OK
ReadX 11135 820 4096 4096 NT_STATUS_OK
ReadX 11135 788 4096 4096 NT_STATUS_OK
ReadX 11135 1604 4096 4096 NT_STATUS_OK
ReadX 11135 3648 4096 4096 NT_STATUS_OK
ReadX 11135 2608 4096 4096 NT_STATUS_OK
ReadX 11135 548 4096 4096 NT_STATUS_OK
ReadX 11135 740 4096 4096 NT_STATUS_OK
ReadX 11135 1344 4096 4096 NT_STATUS_OK
ReadX 11135 3392 4096 4096 NT_STATUS_OK
ReadX 11135 3904 4096 4096 NT_STATUS_OK
ReadX 11135 644 4096 4096 NT_STATUS_OK
ReadX 11135 676 4096 4096 NT_STATUS_OK
ReadX 11135 2688 4096 4096 NT_STATUS_OK
ReadX 11135 320 4096 4096 NT_STATUS_OK
ReadX 11135 900 4096 4096 NT_STATUS_OK
ReadX 11135 1908 4096 4096 NT_STATUS_OK
ReadX 11135 852 4096 4096 NT_STATUS_OK
ReadX 11135 724 4096 4096 NT_STATUS_OK
ReadX 11135 2292 4096 4096 NT_STATUS_OK
ReadX 11135 612 4096 4096 NT_STATUS_OK
ReadX 11135 388 4096 4096 NT_STATUS_OK
ReadX 11135 2368 4096 4096 NT_STATUS_OK
ReadX 11135 2624 4096 4096 NT_STATUS_OK
ReadX 11135 500 4096 4096 NT_STATUS_OK
ReadX 11135 356 4096 4096 NT_STATUS_OK
ReadX 11135 1024 4096 4096 NT_STATUS_OK
ReadX 11135 576 4096 4096 NT_STATUS_OK
ReadX 11135 340 4096 4096 NT_STATUS_OK
ReadX 11135 420 4096 4096 NT_STATUS_OK
ReadX 11135 1600 4096 4096 NT_STATUS_OK
ReadX 11135 404 4096 4096 NT_STATUS_OK
ReadX 11135 1428 4096 4096 NT_STATUS_OK
ReadX 11135 2656 4096 4096 NT_STATUS_OK
ReadX 11135 2624 4096 4096 NT_STATUS_OK
ReadX 11135 452 4096 4096 NT_STATUS_OK
ReadX 11135 692 4096 4096 NT_STATUS_OK
ReadX 11135 564 4096 4096 NT_STATUS_OK
ReadX 11135 372 4096 4096 NT_STATUS_OK
ReadX 11135 468 4096 4096 NT_STATUS_OK
ReadX 11135 484 4096 4096 NT_STATUS_OK
ReadX 11135 1088 4096 4096 NT_STATUS_OK
ReadX 11135 1924 4096 4096 NT_STATUS_OK
ReadX 11135 2768 4096 4096 NT_STATUS_OK
ReadX 11135 832 4096 4096 NT_STATUS_OK
ReadX 11135 836 4096 4096 NT_STATUS_OK
ReadX 11135 1856 4096 4096 NT_STATUS_OK
ReadX 11135 2640 4096 4096 NT_STATUS_OK
ReadX 11135 436 4096 4096 NT_STATUS_OK
ReadX 11135 1828 4096 4096 NT_STATUS_OK
ReadX 11135 804 4096 4096 NT_STATUS_OK
ReadX 11135 1860 4096 4096 NT_STATUS_OK
ReadX 11135 1812 4096 4096 NT_STATUS_OK
ReadX 11135 756 4096 4096 NT_STATUS_OK
ReadX 11135 1636 4096 4096 NT_STATUS_OK
ReadX 11135 772 4096 4096 NT_STATUS_OK
ReadX 11135 2036 4096 4096 NT_STATUS_OK
ReadX 11135 1220 4096 4096 NT_STATUS_OK
ReadX 11135 1652 4096 4096 NT_STATUS_OK
ReadX 11135 2588 4096 4096 NT_STATUS_OK
ReadX 11135 916 4096 4096 NT_STATUS_OK
ReadX 11135 260 4096 4096 NT_STATUS_OK
ReadX 11135 932 4096 4096 NT_STATUS_OK
ReadX 11135 2624 4096 4096 NT_STATUS_OK
ReadX 11135 308 4096 4096 NT_STATUS_OK
ReadX 11135 292 4096 4096 NT_STATUS_OK
ReadX 11135 1140 4096 4096 NT_STATUS_OK
ReadX 11135 276 4096 4096 NT_STATUS_OK
ReadX 11135 2020 4096 4096 NT_STATUS_OK
ReadX 11135 2880 4096 4096 NT_STATUS_OK
ReadX 11135 516 4096 4096 NT_STATUS_OK
ReadX 11135 1844 4096 4096 NT_STATUS_OK
ReadX 11135 1124 4096 4096 NT_STATUS_OK
ReadX 11135 3136 4096 4096 NT_STATUS_OK
ReadX 11135 324 4096 4096 NT_STATUS_OK
ReadX 11135 1156 4096 4096 NT_STATUS_OK
ReadX 11135 1172 4096 4096 NT_STATUS_OK
ReadX 11135 2112 4096 4096 NT_STATUS_OK
ReadX 11135 2368 4096 4096 NT_STATUS_OK
ReadX 11135 964 4096 4096 NT_STATUS_OK
ReadX 11135 980 4096 4096 NT_STATUS_OK
ReadX 11135 1012 4096 4096 NT_STATUS_OK
ReadX 11135 532 4096 4096 NT_STATUS_OK
ReadX 11135 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11135 1620 4096 4096 NT_STATUS_OK
ReadX 11135 1604 4096 4096 NT_STATUS_OK
ReadX 11135 2116 4096 4096 NT_STATUS_OK
ReadX 11135 2132 4096 4096 NT_STATUS_OK
ReadX 11135 2148 4096 4096 NT_STATUS_OK
ReadX 11135 2276 4096 4096 NT_STATUS_OK
ReadX 11135 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11157 NT_STATUS_OK
Close 11157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11160 NT_STATUS_OK
QUERY_FILE_INFORMATION 11115 1004 NT_STATUS_OK
Close 11115 NT_STATUS_OK
WriteX 11160 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11160 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11117 1004 NT_STATUS_OK
Close 11117 NT_STATUS_OK
WriteX 11160 0 65536 65536 NT_STATUS_OK
WriteX 11160 65536 64850 64850 NT_STATUS_OK
Close 11160 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11162 NT_STATUS_OK
WriteX 11162 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11162 258 NT_STATUS_OK
ReadX 11135 2068 4096 4096 NT_STATUS_OK
ReadX 11135 1588 4096 4096 NT_STATUS_OK
ReadX 11135 1572 4096 4096 NT_STATUS_OK
WriteX 11162 0 18630 18630 NT_STATUS_OK
Flush 11162 NT_STATUS_OK
Close 11162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11164 NT_STATUS_OK
Close 11164 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11166 NT_STATUS_OK
ReadX 11166 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11135 612 4096 4096 NT_STATUS_OK
ReadX 11135 564 4096 4096 NT_STATUS_OK
ReadX 11135 1876 4096 4096 NT_STATUS_OK
ReadX 11135 628 4096 4096 NT_STATUS_OK
ReadX 11135 740 4096 4096 NT_STATUS_OK
ReadX 11135 724 4096 4096 NT_STATUS_OK
ReadX 11135 644 4096 4096 NT_STATUS_OK
ReadX 11135 2324 4096 4096 NT_STATUS_OK
ReadX 11135 660 4096 4096 NT_STATUS_OK
ReadX 11135 852 4096 4096 NT_STATUS_OK
ReadX 11135 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11135 2368 4096 4096 NT_STATUS_OK
ReadX 11135 1024 4096 4096 NT_STATUS_OK
ReadX 11135 320 4096 4096 NT_STATUS_OK
ReadX 11135 580 4096 4096 NT_STATUS_OK
ReadX 11135 3136 512 512 NT_STATUS_OK
ReadX 11135 2880 4096 4096 NT_STATUS_OK
Close 11135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11167 NT_STATUS_OK
ReadX 11167 61440 4096 4096 NT_STATUS_OK
ReadX 11167 126976 4096 4096 NT_STATUS_OK
WriteX 11167 0 65536 65536 NT_STATUS_OK
WriteX 11167 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11168 NT_STATUS_OK
ReadX 11168 61440 4096 4096 NT_STATUS_OK
ReadX 11168 126976 4096 4096 NT_STATUS_OK
ReadX 11168 192512 4096 4096 NT_STATUS_OK
ReadX 11168 258048 4096 4096 NT_STATUS_OK
WriteX 11168 0 65536 65536 NT_STATUS_OK
WriteX 11168 65536 65536 65536 NT_STATUS_OK
WriteX 11168 131072 65536 65536 NT_STATUS_OK
WriteX 11168 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11169 NT_STATUS_OK
ReadX 11169 61440 4096 4096 NT_STATUS_OK
ReadX 11169 126976 4096 4096 NT_STATUS_OK
ReadX 11169 192512 4096 4096 NT_STATUS_OK
ReadX 11169 258048 4096 4096 NT_STATUS_OK
ReadX 11169 323584 4096 4096 NT_STATUS_OK
ReadX 11169 389120 4096 4096 NT_STATUS_OK
ReadX 11169 454656 4096 4096 NT_STATUS_OK
ReadX 11169 520192 4096 4096 NT_STATUS_OK
WriteX 11169 0 65536 65536 NT_STATUS_OK
WriteX 11169 65536 65536 65536 NT_STATUS_OK
WriteX 11169 131072 65536 65536 NT_STATUS_OK
WriteX 11169 196608 65536 65536 NT_STATUS_OK
WriteX 11169 262144 65536 65536 NT_STATUS_OK
WriteX 11169 327680 65536 65536 NT_STATUS_OK
WriteX 11169 393216 65536 65536 NT_STATUS_OK
WriteX 11169 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11170 NT_STATUS_OK
ReadX 11170 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11171 NT_STATUS_OK
Close 11171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11172 NT_STATUS_OK
WriteX 11172 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11172 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11170 0 8192 8192 NT_STATUS_OK
Flush 11170 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11170 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11170 0 8192 8192 NT_STATUS_OK
Flush 11170 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11170 0 8192 8192 NT_STATUS_OK
Flush 11170 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11170 0 8192 8192 NT_STATUS_OK
Flush 11170 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11174 NT_STATUS_OK
Close 11174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11166 NT_STATUS_OK
Close 11134 NT_STATUS_OK
Close 11167 NT_STATUS_OK
Close 11168 NT_STATUS_OK
Close 11169 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11177 NT_STATUS_OK
WriteX 11177 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11177 258 NT_STATUS_OK
WriteX 11177 0 62591 62591 NT_STATUS_OK
Close 11177 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11179 NT_STATUS_OK
Close 11179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11182 NT_STATUS_OK
WriteX 11182 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11182 258 NT_STATUS_OK
WriteX 11182 0 10845 10845 NT_STATUS_OK
Close 11182 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11184 NT_STATUS_OK
Close 11184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11187 NT_STATUS_OK
WriteX 11187 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11187 258 NT_STATUS_OK
WriteX 11187 0 30118 30118 NT_STATUS_OK
Close 11187 NT_STATUS_OK
WriteX 11170 0 4096 4096 NT_STATUS_OK
WriteX 11172 0 64 64 NT_STATUS_OK
Close 11172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11170 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11189 NT_STATUS_OK
ReadX 11189 0 61440 61440 NT_STATUS_OK
ReadX 11189 61440 4096 4096 NT_STATUS_OK
ReadX 11189 65536 61440 61440 NT_STATUS_OK
ReadX 11189 126976 4096 4096 NT_STATUS_OK
ReadX 11189 131072 61440 61440 NT_STATUS_OK
ReadX 11189 192512 4096 4096 NT_STATUS_OK
ReadX 11189 196608 61440 61440 NT_STATUS_OK
ReadX 11189 258048 4096 4096 NT_STATUS_OK
ReadX 11189 262144 61440 61440 NT_STATUS_OK
ReadX 11189 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11190 NT_STATUS_OK
ReadX 11190 0 61440 61440 NT_STATUS_OK
ReadX 11190 61440 4096 4096 NT_STATUS_OK
ReadX 11190 65536 61440 61440 NT_STATUS_OK
ReadX 11190 126976 4096 4096 NT_STATUS_OK
ReadX 11190 131072 61440 61440 NT_STATUS_OK
ReadX 11190 192512 4096 4096 NT_STATUS_OK
ReadX 11190 196608 61440 61440 NT_STATUS_OK
ReadX 11190 258048 4096 4096 NT_STATUS_OK
ReadX 11190 262144 61440 61440 NT_STATUS_OK
ReadX 11190 323584 4096 4096 NT_STATUS_OK
ReadX 11190 327680 61440 61440 NT_STATUS_OK
ReadX 11190 389120 4096 4096 NT_STATUS_OK
ReadX 11190 393216 61440 61440 NT_STATUS_OK
ReadX 11190 454656 4096 4096 NT_STATUS_OK
ReadX 11190 458752 61440 61440 NT_STATUS_OK
ReadX 11190 520192 4096 4096 NT_STATUS_OK
ReadX 11190 524288 61440 61440 NT_STATUS_OK
ReadX 11190 585728 4096 4096 NT_STATUS_OK
ReadX 11190 589824 61440 61440 NT_STATUS_OK
ReadX 11190 651264 4096 4096 NT_STATUS_OK
ReadX 11190 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11191 NT_STATUS_OK
ReadX 11191 0 61440 61440 NT_STATUS_OK
ReadX 11191 61440 4096 4096 NT_STATUS_OK
ReadX 11191 65536 61440 61440 NT_STATUS_OK
ReadX 11191 126976 4096 4096 NT_STATUS_OK
ReadX 11191 131072 61440 61440 NT_STATUS_OK
ReadX 11191 192512 4096 4096 NT_STATUS_OK
ReadX 11191 196608 61440 61440 NT_STATUS_OK
ReadX 11191 258048 4096 4096 NT_STATUS_OK
ReadX 11191 262144 61440 61440 NT_STATUS_OK
ReadX 11191 323584 4096 4096 NT_STATUS_OK
ReadX 11191 327680 61440 61440 NT_STATUS_OK
ReadX 11191 389120 4096 4096 NT_STATUS_OK
ReadX 11191 393216 61440 61440 NT_STATUS_OK
ReadX 11191 454656 4096 4096 NT_STATUS_OK
ReadX 11191 458752 61440 61440 NT_STATUS_OK
ReadX 11191 520192 4096 4096 NT_STATUS_OK
ReadX 11191 524288 61440 61440 NT_STATUS_OK
ReadX 11191 585728 4096 4096 NT_STATUS_OK
ReadX 11191 589824 61440 61440 NT_STATUS_OK
ReadX 11191 651264 4096 4096 NT_STATUS_OK
ReadX 11191 655360 61440 61440 NT_STATUS_OK
ReadX 11191 716800 4096 4096 NT_STATUS_OK
ReadX 11191 720896 61440 61440 NT_STATUS_OK
ReadX 11191 782336 4096 4096 NT_STATUS_OK
ReadX 11191 786432 61440 61440 NT_STATUS_OK
ReadX 11191 847872 4096 4096 NT_STATUS_OK
ReadX 11191 851968 61440 61440 NT_STATUS_OK
ReadX 11191 913408 4096 4096 NT_STATUS_OK
ReadX 11191 917504 61440 61440 NT_STATUS_OK
ReadX 11191 978944 4096 4096 NT_STATUS_OK
ReadX 11191 983040 61440 61440 NT_STATUS_OK
ReadX 11191 1044480 4096 4096 NT_STATUS_OK
ReadX 11191 1048576 61440 61440 NT_STATUS_OK
ReadX 11191 1110016 4096 4096 NT_STATUS_OK
ReadX 11191 1114112 61440 61440 NT_STATUS_OK
ReadX 11191 1175552 4096 4096 NT_STATUS_OK
ReadX 11191 1179648 61440 61440 NT_STATUS_OK
ReadX 11191 1241088 4096 4096 NT_STATUS_OK
ReadX 11191 1245184 61440 61440 NT_STATUS_OK
ReadX 11191 1306624 4096 4096 NT_STATUS_OK
ReadX 11191 1310720 61440 61440 NT_STATUS_OK
ReadX 11191 1372160 4096 4096 NT_STATUS_OK
ReadX 11191 1376256 61440 61440 NT_STATUS_OK
ReadX 11191 1437696 4096 4096 NT_STATUS_OK
ReadX 11191 1441792 61440 61440 NT_STATUS_OK
ReadX 11191 1503232 4096 4096 NT_STATUS_OK
ReadX 11191 1507328 61440 61440 NT_STATUS_OK
ReadX 11191 1568768 4096 4096 NT_STATUS_OK
ReadX 11191 1572864 61440 61440 NT_STATUS_OK
ReadX 11191 1634304 4096 4096 NT_STATUS_OK
ReadX 11191 1638400 61440 61440 NT_STATUS_OK
ReadX 11191 1699840 4096 4096 NT_STATUS_OK
ReadX 11191 1703936 61440 61440 NT_STATUS_OK
ReadX 11191 1765376 4096 4096 NT_STATUS_OK
ReadX 11191 1769472 61440 61440 NT_STATUS_OK
ReadX 11191 1830912 4096 4096 NT_STATUS_OK
ReadX 11191 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11192 NT_STATUS_OK
Close 11192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11189 NT_STATUS_OK
Close 11190 NT_STATUS_OK
Close 11191 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11194 NT_STATUS_OK
ReadX 11194 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11195 NT_STATUS_OK
ReadX 11195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11196 NT_STATUS_OK
ReadX 11196 0 4096 4096 NT_STATUS_OK
ReadX 11196 4096 4096 4096 NT_STATUS_OK
ReadX 11196 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11197 NT_STATUS_OK
Close 11197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11194 NT_STATUS_OK
Close 11195 NT_STATUS_OK
Close 11196 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11199 NT_STATUS_OK
ReadX 11199 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11200 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11200 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11201 NT_STATUS_OK
Close 11201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Close 11200 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11203 NT_STATUS_OK
ReadX 11203 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11204 NT_STATUS_OK
ReadX 11204 0 8192 8192 NT_STATUS_OK
ReadX 11204 8192 8192 8192 NT_STATUS_OK
ReadX 11204 16384 8192 8192 NT_STATUS_OK
ReadX 11204 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11206 NT_STATUS_OK
Close 11206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11204 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11209 NT_STATUS_OK
WriteX 11209 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11209 258 NT_STATUS_OK
WriteX 11209 0 10438 10438 NT_STATUS_OK
Close 11209 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11210 NT_STATUS_OK
Close 11210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11211 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11212 NT_STATUS_OK
Close 11212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11213 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11214 NT_STATUS_OK
Close 11214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11215 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11216 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11217 NT_STATUS_OK
Close 11217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11218 NT_STATUS_OK
ReadX 11218 0 4096 4096 NT_STATUS_OK
ReadX 11218 4096 4096 4096 NT_STATUS_OK
ReadX 11218 8192 4096 4096 NT_STATUS_OK
ReadX 11218 12288 8192 8192 NT_STATUS_OK
ReadX 11218 20480 8192 8192 NT_STATUS_OK
ReadX 11218 28672 8192 8192 NT_STATUS_OK
ReadX 11218 36864 8192 8192 NT_STATUS_OK
ReadX 11218 45056 8192 8192 NT_STATUS_OK
ReadX 11218 53248 8192 8192 NT_STATUS_OK
ReadX 11218 61440 8192 8192 NT_STATUS_OK
ReadX 11218 69632 8192 8192 NT_STATUS_OK
ReadX 11218 77824 8192 8192 NT_STATUS_OK
ReadX 11218 86016 8192 8192 NT_STATUS_OK
ReadX 11218 94208 8192 8192 NT_STATUS_OK
ReadX 11218 102400 8192 8192 NT_STATUS_OK
ReadX 11218 110592 8192 8192 NT_STATUS_OK
ReadX 11218 118784 8192 8192 NT_STATUS_OK
ReadX 11218 126976 8192 8192 NT_STATUS_OK
ReadX 11218 135168 8192 8192 NT_STATUS_OK
ReadX 11218 143360 8192 8192 NT_STATUS_OK
ReadX 11218 151552 8192 8192 NT_STATUS_OK
ReadX 11218 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11218 NT_STATUS_OK
Close 11211 NT_STATUS_OK
Close 11213 NT_STATUS_OK
Close 11215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11220 NT_STATUS_OK
Close 11220 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11223 NT_STATUS_OK
WriteX 11223 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11223 258 NT_STATUS_OK
WriteX 11223 0 28489 28489 NT_STATUS_OK
Close 11223 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11224 NT_STATUS_OK
Close 11224 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11226 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11226 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11227 NT_STATUS_OK
Close 11227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11226 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11229 NT_STATUS_OK
ReadX 11229 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11230 NT_STATUS_OK
ReadX 11230 0 8192 8192 NT_STATUS_OK
ReadX 11230 8192 8192 8192 NT_STATUS_OK
ReadX 11230 16384 8192 8192 NT_STATUS_OK
ReadX 11230 24576 8192 8192 NT_STATUS_OK
ReadX 11230 32768 16384 16384 NT_STATUS_OK
ReadX 11230 49152 8192 8192 NT_STATUS_OK
ReadX 11230 57344 8192 8192 NT_STATUS_OK
ReadX 11230 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11232 NT_STATUS_OK
Close 11232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11230 NT_STATUS_OK
Close 11229 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11235 NT_STATUS_OK
WriteX 11235 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11235 258 NT_STATUS_OK
WriteX 11235 0 29253 29253 NT_STATUS_OK
Close 11235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11236 NT_STATUS_OK
Close 11236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11237 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11239 NT_STATUS_OK
Close 11239 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11242 NT_STATUS_OK
WriteX 11242 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11242 258 NT_STATUS_OK
WriteX 11242 0 30183 30183 NT_STATUS_OK
Close 11242 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11243 NT_STATUS_OK
Close 11243 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11245 NT_STATUS_OK
WriteX 11245 0 510 510 NT_STATUS_OK
WriteX 11245 510 512 512 NT_STATUS_OK
WriteX 11245 1022 510 510 NT_STATUS_OK
WriteX 11245 1532 510 510 NT_STATUS_OK
WriteX 11245 2042 168 168 NT_STATUS_OK
Close 11245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11246 NT_STATUS_OK
Close 11246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11248 NT_STATUS_OK
ReadX 11248 0 4096 4096 NT_STATUS_OK
WriteX 11248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11249 NT_STATUS_OK
ReadX 11249 61440 4096 4096 NT_STATUS_OK
ReadX 11249 126976 4096 4096 NT_STATUS_OK
WriteX 11249 0 65536 65536 NT_STATUS_OK
WriteX 11249 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11250 NT_STATUS_OK
ReadX 11250 61440 4096 4096 NT_STATUS_OK
ReadX 11250 126976 4096 4096 NT_STATUS_OK
ReadX 11250 192512 4096 4096 NT_STATUS_OK
ReadX 11250 258048 4096 4096 NT_STATUS_OK
WriteX 11250 0 65536 65536 NT_STATUS_OK
WriteX 11250 65536 65536 65536 NT_STATUS_OK
WriteX 11250 131072 65536 65536 NT_STATUS_OK
WriteX 11250 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11251 NT_STATUS_OK
ReadX 11251 61440 4096 4096 NT_STATUS_OK
ReadX 11251 126976 4096 4096 NT_STATUS_OK
ReadX 11251 192512 4096 4096 NT_STATUS_OK
ReadX 11251 258048 4096 4096 NT_STATUS_OK
ReadX 11251 323584 4096 4096 NT_STATUS_OK
ReadX 11251 389120 4096 4096 NT_STATUS_OK
ReadX 11251 454656 4096 4096 NT_STATUS_OK
ReadX 11251 520192 4096 4096 NT_STATUS_OK
WriteX 11251 0 65536 65536 NT_STATUS_OK
WriteX 11251 65536 65536 65536 NT_STATUS_OK
WriteX 11251 131072 65536 65536 NT_STATUS_OK
WriteX 11251 196608 65536 65536 NT_STATUS_OK
WriteX 11251 262144 65536 65536 NT_STATUS_OK
WriteX 11251 327680 65536 65536 NT_STATUS_OK
WriteX 11251 393216 65536 65536 NT_STATUS_OK
WriteX 11251 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11252 NT_STATUS_OK
Close 11252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11248 NT_STATUS_OK
Close 11249 NT_STATUS_OK
Close 11250 NT_STATUS_OK
Close 11251 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11254 NT_STATUS_OK
Close 11254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11258 NT_STATUS_OK
Close 11258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11261 NT_STATUS_OK
Close 11261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11263 NT_STATUS_OK
Close 11263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11267 NT_STATUS_OK
Close 11267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11270 NT_STATUS_OK
Close 11270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11272 NT_STATUS_OK
Close 11272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11276 NT_STATUS_OK
Close 11276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11281 NT_STATUS_OK
Close 11281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11286 NT_STATUS_OK
Close 11286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11291 NT_STATUS_OK
Close 11291 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11296 NT_STATUS_OK
Close 11296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11301 NT_STATUS_OK
Close 11301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11306 NT_STATUS_OK
Close 11306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11311 NT_STATUS_OK
Close 11311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11314 NT_STATUS_OK
Close 11314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11317 NT_STATUS_OK
Close 11317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11320 NT_STATUS_OK
WriteX 11320 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11320 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11320 0 65536 65536 NT_STATUS_OK
WriteX 11320 65536 65536 65536 NT_STATUS_OK
WriteX 11320 131072 65536 65536 NT_STATUS_OK
WriteX 11320 196608 65536 65536 NT_STATUS_OK
WriteX 11320 262144 26634 26634 NT_STATUS_OK
Close 11320 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11325 NT_STATUS_OK
Close 11325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11326 NT_STATUS_OK
Close 11326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11327 NT_STATUS_OK
ReadX 11327 0 4096 4096 NT_STATUS_OK
Close 11327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11328 NT_STATUS_OK
ReadX 11328 0 4096 4096 NT_STATUS_OK
ReadX 11328 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11329 NT_STATUS_OK
Close 11329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11328 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11333 NT_STATUS_OK
Close 11333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11336 NT_STATUS_OK
Close 11336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11338 NT_STATUS_OK
Close 11338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11342 NT_STATUS_OK
Close 11342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11345 NT_STATUS_OK
Close 11345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11347 NT_STATUS_OK
Close 11347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11351 NT_STATUS_OK
Close 11351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11356 NT_STATUS_OK
Close 11356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11361 NT_STATUS_OK
Close 11361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11366 NT_STATUS_OK
Close 11366 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11371 NT_STATUS_OK
Close 11371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11376 NT_STATUS_OK
Close 11376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11380 NT_STATUS_OK
Close 11380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11385 NT_STATUS_OK
Close 11385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11390 NT_STATUS_OK
Close 11390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11393 NT_STATUS_OK
Close 11393 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11395 NT_STATUS_OK
Close 11395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11405 NT_STATUS_OK
Close 11405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11406 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11407 NT_STATUS_OK
ReadX 11407 0 4096 4096 NT_STATUS_OK
Close 11407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11408 NT_STATUS_OK
ReadX 11408 0 4096 4096 NT_STATUS_OK
Close 11408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11409 NT_STATUS_OK
ReadX 11409 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11419 NT_STATUS_OK
Close 11419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11420 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11421 NT_STATUS_OK
ReadX 11421 0 4096 4096 NT_STATUS_OK
Close 11421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11422 NT_STATUS_OK
ReadX 11422 0 4096 4096 NT_STATUS_OK
Close 11422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11423 NT_STATUS_OK
ReadX 11423 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11409 NT_STATUS_OK
Close 11423 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11452 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11452 0 4096 4096 NT_STATUS_OK
Close 11452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11453 NT_STATUS_OK
ReadX 11453 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11454 NT_STATUS_OK
ReadX 11454 0 4096 4096 NT_STATUS_OK
ReadX 11454 4096 4096 4096 NT_STATUS_OK
ReadX 11454 8192 4096 4096 NT_STATUS_OK
ReadX 11454 12288 4096 4096 NT_STATUS_OK
ReadX 11454 16384 4096 4096 NT_STATUS_OK
ReadX 11454 20480 4096 4096 NT_STATUS_OK
ReadX 11454 24576 4096 4096 NT_STATUS_OK
ReadX 11454 28672 4096 4096 NT_STATUS_OK
ReadX 11454 32768 4096 4096 NT_STATUS_OK
ReadX 11454 36864 4096 4096 NT_STATUS_OK
ReadX 11454 40960 4096 4096 NT_STATUS_OK
ReadX 11454 45056 4096 4096 NT_STATUS_OK
ReadX 11454 49152 4096 4096 NT_STATUS_OK
ReadX 11454 53248 4096 4096 NT_STATUS_OK
ReadX 11454 57344 4096 4096 NT_STATUS_OK
ReadX 11454 61440 4096 4096 NT_STATUS_OK
ReadX 11454 65536 4096 4096 NT_STATUS_OK
ReadX 11454 69632 4096 4096 NT_STATUS_OK
ReadX 11454 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11454 1004 NT_STATUS_OK
WriteX 11454 0 4096 4096 NT_STATUS_OK
Close 11454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11455 NT_STATUS_OK
SET_FILE_INFORMATION 11455 1004 NT_STATUS_OK
Close 11455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11456 NT_STATUS_OK
ReadX 11456 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11457 NT_STATUS_OK
Close 11457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11460 NT_STATUS_OK
WriteX 11460 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11460 258 NT_STATUS_OK
WriteX 11460 0 65536 65536 NT_STATUS_OK
WriteX 11460 65536 19979 19979 NT_STATUS_OK
Close 11460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11461 NT_STATUS_OK
ReadX 11461 0 4096 4096 NT_STATUS_OK
WriteX 11461 0 4096 4096 NT_STATUS_OK
Flush 11461 NT_STATUS_OK
WriteX 11461 0 4096 4096 NT_STATUS_OK
Flush 11461 NT_STATUS_OK
QUERY_FILE_INFORMATION 11461 1004 NT_STATUS_OK
WriteX 11461 0 4096 4096 NT_STATUS_OK
Flush 11461 NT_STATUS_OK
WriteX 11461 0 4096 4096 NT_STATUS_OK
Flush 11461 NT_STATUS_OK
WriteX 11461 0 4096 4096 NT_STATUS_OK
Flush 11461 NT_STATUS_OK
SET_FILE_INFORMATION 11461 1004 NT_STATUS_OK
WriteX 11461 0 4096 4096 NT_STATUS_OK
Flush 11461 NT_STATUS_OK
Close 11461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11462 NT_STATUS_OK
ReadX 11462 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11463 NT_STATUS_OK
ReadX 11463 0 4096 4096 NT_STATUS_OK
Close 11462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11464 NT_STATUS_OK
ReadX 11464 0 4096 4096 NT_STATUS_OK
Close 11464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11465 NT_STATUS_OK
ReadX 11465 0 4096 4096 NT_STATUS_OK
Close 11465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11466 NT_STATUS_OK
ReadX 11466 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11466 1004 NT_STATUS_OK
WriteX 11466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11467 NT_STATUS_OK
Close 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11463 NT_STATUS_OK
Close 11466 NT_STATUS_OK
Close 11456 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11469 NT_STATUS_OK
Close 11469 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11472 NT_STATUS_OK
WriteX 11472 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11472 258 NT_STATUS_OK
WriteX 11472 0 65536 65536 NT_STATUS_OK
WriteX 11472 65536 17654 17654 NT_STATUS_OK
Close 11472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11473 NT_STATUS_OK
ReadX 11473 0 4096 4096 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
QUERY_FILE_INFORMATION 11473 1004 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
SET_FILE_INFORMATION 11473 1004 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
Close 11473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11474 NT_STATUS_OK
SET_FILE_INFORMATION 11474 1004 NT_STATUS_OK
Close 11474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11475 NT_STATUS_OK
ReadX 11475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11476 NT_STATUS_OK
Close 11476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11478 NT_STATUS_OK
ReadX 11478 0 4096 4096 NT_STATUS_OK
ReadX 11478 4096 4096 4096 NT_STATUS_OK
ReadX 11478 8192 4096 4096 NT_STATUS_OK
ReadX 11478 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11478 16384 4096 4096 NT_STATUS_OK
ReadX 11478 20480 4096 4096 NT_STATUS_OK
ReadX 11478 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11479 NT_STATUS_OK
ReadX 11479 0 4096 4096 NT_STATUS_OK
Close 11479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11480 NT_STATUS_OK
ReadX 11480 0 4096 4096 NT_STATUS_OK
Close 11480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11481 NT_STATUS_OK
ReadX 11481 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11481 1004 NT_STATUS_OK
WriteX 11481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11482 NT_STATUS_OK
Close 11482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11481 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11484 NT_STATUS_OK
Close 11484 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11487 NT_STATUS_OK
WriteX 11487 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11487 258 NT_STATUS_OK
WriteX 11487 0 65536 65536 NT_STATUS_OK
WriteX 11487 65536 19490 19490 NT_STATUS_OK
Close 11487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11488 NT_STATUS_OK
ReadX 11488 0 4096 4096 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
QUERY_FILE_INFORMATION 11488 1004 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
SET_FILE_INFORMATION 11488 1004 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
Close 11488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11489 NT_STATUS_OK
SET_FILE_INFORMATION 11489 1004 NT_STATUS_OK
Close 11489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11490 NT_STATUS_OK
ReadX 11490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11491 NT_STATUS_OK
Close 11491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11493 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11493 0 4096 4096 NT_STATUS_OK
Close 11493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11494 NT_STATUS_OK
ReadX 11494 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11495 NT_STATUS_OK
ReadX 11495 0 4096 4096 NT_STATUS_OK
ReadX 11495 4096 4096 4096 NT_STATUS_OK
ReadX 11495 8192 4096 4096 NT_STATUS_OK
ReadX 11495 12288 4096 4096 NT_STATUS_OK
ReadX 11495 16384 4096 4096 NT_STATUS_OK
ReadX 11495 20480 4096 4096 NT_STATUS_OK
ReadX 11495 24576 4096 4096 NT_STATUS_OK
ReadX 11495 28672 4096 4096 NT_STATUS_OK
ReadX 11495 32768 4096 4096 NT_STATUS_OK
ReadX 11495 36864 4096 4096 NT_STATUS_OK
ReadX 11495 40960 4096 4096 NT_STATUS_OK
ReadX 11495 45056 4096 4096 NT_STATUS_OK
ReadX 11495 49152 4096 4096 NT_STATUS_OK
ReadX 11495 53248 4096 4096 NT_STATUS_OK
ReadX 11495 57344 4096 4096 NT_STATUS_OK
ReadX 11495 61440 4096 4096 NT_STATUS_OK
ReadX 11495 65536 4096 4096 NT_STATUS_OK
ReadX 11495 69632 4096 4096 NT_STATUS_OK
ReadX 11495 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11495 1004 NT_STATUS_OK
WriteX 11495 0 4096 4096 NT_STATUS_OK
Close 11495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11496 NT_STATUS_OK
SET_FILE_INFORMATION 11496 1004 NT_STATUS_OK
Close 11496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11497 NT_STATUS_OK
ReadX 11497 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11498 NT_STATUS_OK
Close 11498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11490 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11501 NT_STATUS_OK
WriteX 11501 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11501 258 NT_STATUS_OK
WriteX 11501 0 65536 65536 NT_STATUS_OK
WriteX 11501 65536 8866 8866 NT_STATUS_OK
Close 11501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11502 NT_STATUS_OK
ReadX 11502 0 4096 4096 NT_STATUS_OK
WriteX 11502 0 4096 4096 NT_STATUS_OK
Flush 11502 NT_STATUS_OK
SET_FILE_INFORMATION 11502 1004 NT_STATUS_OK
WriteX 11502 0 4096 4096 NT_STATUS_OK
Flush 11502 NT_STATUS_OK
Close 11502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11503 NT_STATUS_OK
ReadX 11503 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11504 NT_STATUS_OK
ReadX 11504 0 4096 4096 NT_STATUS_OK
Close 11504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11505 NT_STATUS_OK
ReadX 11505 0 4096 4096 NT_STATUS_OK
Close 11505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11506 NT_STATUS_OK
ReadX 11506 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11506 1004 NT_STATUS_OK
WriteX 11506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11507 NT_STATUS_OK
Close 11507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11506 NT_STATUS_OK
Close 11497 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11509 NT_STATUS_OK
Close 11509 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11512 NT_STATUS_OK
WriteX 11512 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11512 258 NT_STATUS_OK
WriteX 11512 0 65536 65536 NT_STATUS_OK
WriteX 11512 65536 9298 9298 NT_STATUS_OK
Close 11512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11513 NT_STATUS_OK
ReadX 11513 0 4096 4096 NT_STATUS_OK
WriteX 11513 0 4096 4096 NT_STATUS_OK
Flush 11513 NT_STATUS_OK
SET_FILE_INFORMATION 11513 1004 NT_STATUS_OK
WriteX 11513 0 4096 4096 NT_STATUS_OK
Flush 11513 NT_STATUS_OK
Close 11513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11514 NT_STATUS_OK
SET_FILE_INFORMATION 11514 1004 NT_STATUS_OK
Close 11514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11515 NT_STATUS_OK
ReadX 11515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11516 NT_STATUS_OK
Close 11516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11519 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11519 0 4096 4096 NT_STATUS_OK
Close 11519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11520 NT_STATUS_OK
ReadX 11520 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11520 4096 4096 4096 NT_STATUS_OK
ReadX 11520 8192 4096 4096 NT_STATUS_OK
ReadX 11520 12288 4096 4096 NT_STATUS_OK
ReadX 11520 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11521 NT_STATUS_OK
ReadX 11521 0 4096 4096 NT_STATUS_OK
Close 11521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11522 NT_STATUS_OK
ReadX 11522 0 4096 4096 NT_STATUS_OK
Close 11522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11523 NT_STATUS_OK
ReadX 11523 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11523 1004 NT_STATUS_OK
WriteX 11523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11524 NT_STATUS_OK
Close 11524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11520 NT_STATUS_OK
Close 11523 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11526 NT_STATUS_OK
Close 11526 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11529 NT_STATUS_OK
WriteX 11529 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11529 258 NT_STATUS_OK
WriteX 11529 0 65536 65536 NT_STATUS_OK
WriteX 11529 65536 11540 11540 NT_STATUS_OK
Close 11529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11530 NT_STATUS_OK
ReadX 11530 0 4096 4096 NT_STATUS_OK
WriteX 11530 0 4096 4096 NT_STATUS_OK
Flush 11530 NT_STATUS_OK
SET_FILE_INFORMATION 11530 1004 NT_STATUS_OK
WriteX 11530 0 4096 4096 NT_STATUS_OK
Flush 11530 NT_STATUS_OK
Close 11530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11531 NT_STATUS_OK
SET_FILE_INFORMATION 11531 1004 NT_STATUS_OK
Close 11531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11532 NT_STATUS_OK
ReadX 11532 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11533 NT_STATUS_OK
Close 11533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11535 NT_STATUS_OK
ReadX 11535 61440 4096 4096 NT_STATUS_OK
ReadX 11535 126976 4096 4096 NT_STATUS_OK
WriteX 11535 0 65536 65536 NT_STATUS_OK
WriteX 11535 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11536 NT_STATUS_OK
ReadX 11536 61440 4096 4096 NT_STATUS_OK
ReadX 11536 126976 4096 4096 NT_STATUS_OK
ReadX 11536 192512 4096 4096 NT_STATUS_OK
ReadX 11536 258048 4096 4096 NT_STATUS_OK
WriteX 11536 0 65536 65536 NT_STATUS_OK
WriteX 11536 65536 65536 65536 NT_STATUS_OK
WriteX 11536 131072 65536 65536 NT_STATUS_OK
WriteX 11536 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11537 NT_STATUS_OK
ReadX 11537 61440 4096 4096 NT_STATUS_OK
ReadX 11537 126976 4096 4096 NT_STATUS_OK
ReadX 11537 192512 4096 4096 NT_STATUS_OK
ReadX 11537 258048 4096 4096 NT_STATUS_OK
ReadX 11537 323584 4096 4096 NT_STATUS_OK
ReadX 11537 389120 4096 4096 NT_STATUS_OK
ReadX 11537 454656 4096 4096 NT_STATUS_OK
ReadX 11537 520192 4096 4096 NT_STATUS_OK
WriteX 11537 0 65536 65536 NT_STATUS_OK
WriteX 11537 65536 65536 65536 NT_STATUS_OK
WriteX 11537 131072 65536 65536 NT_STATUS_OK
WriteX 11537 196608 65536 65536 NT_STATUS_OK
WriteX 11537 262144 65536 65536 NT_STATUS_OK
WriteX 11537 327680 65536 65536 NT_STATUS_OK
WriteX 11537 393216 65536 65536 NT_STATUS_OK
WriteX 11537 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11538 NT_STATUS_OK
ReadX 11538 0 4096 4096 NT_STATUS_OK
ReadX 11538 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11539 NT_STATUS_OK
WriteX 11539 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11539 258 NT_STATUS_OK
WriteX 11539 0 53 53 NT_STATUS_OK
Close 11539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11540 NT_STATUS_OK
Close 11540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11532 NT_STATUS_OK
Close 11478 NT_STATUS_OK
Close 11535 NT_STATUS_OK
Close 11536 NT_STATUS_OK
Close 11537 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11538 8192 4096 4096 NT_STATUS_OK
ReadX 11538 12288 4096 4096 NT_STATUS_OK
WriteX 11542 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11542 258 NT_STATUS_OK
ReadX 11538 16384 4096 4096 NT_STATUS_OK
ReadX 11538 20480 4096 4096 NT_STATUS_OK
WriteX 11542 0 15360 15360 NT_STATUS_OK
Close 11542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11543 NT_STATUS_OK
ReadX 11543 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11543 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11543 1004 NT_STATUS_OK
WriteX 11543 0 4096 4096 NT_STATUS_OK
Close 11543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11544 NT_STATUS_OK
Close 11544 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11546 NT_STATUS_OK
ReadX 11546 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11547 NT_STATUS_OK
Close 11547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11546 4096 4096 4096 NT_STATUS_OK
ReadX 11546 8192 4096 4096 NT_STATUS_OK
ReadX 11546 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11549 NT_STATUS_OK
ReadX 11549 0 4096 4096 NT_STATUS_OK
ReadX 11549 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11550 NT_STATUS_OK
ReadX 11550 0 4096 4096 NT_STATUS_OK
ReadX 11550 4096 4096 4096 NT_STATUS_OK
ReadX 11550 8192 4096 4096 NT_STATUS_OK
Close 11549 NT_STATUS_OK
Close 11550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11551 NT_STATUS_OK
WriteX 11551 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11551 258 NT_STATUS_OK
WriteX 11551 0 15360 15360 NT_STATUS_OK
Close 11551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11552 NT_STATUS_OK
ReadX 11552 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11552 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11552 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11553 NT_STATUS_OK
Close 11553 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11555 NT_STATUS_OK
ReadX 11555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11556 NT_STATUS_OK
SET_FILE_INFORMATION 11556 1004 NT_STATUS_OK
Close 11556 NT_STATUS_OK
WriteX 11552 0 4096 4096 NT_STATUS_OK
Close 11552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11557 NT_STATUS_OK
Close 11557 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11559 NT_STATUS_OK
ReadX 11559 0 4096 4096 NT_STATUS_OK
ReadX 11559 4096 4096 4096 NT_STATUS_OK
ReadX 11559 8192 4096 4096 NT_STATUS_OK
ReadX 11559 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11559 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11559 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11560 NT_STATUS_OK
ReadX 11560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11561 NT_STATUS_OK
WriteX 11561 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11561 258 NT_STATUS_OK
WriteX 11561 0 53 53 NT_STATUS_OK
Close 11561 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11562 NT_STATUS_OK
Close 11562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11560 4096 4096 4096 NT_STATUS_OK
ReadX 11560 8192 4096 4096 NT_STATUS_OK
ReadX 11560 12288 4096 4096 NT_STATUS_OK
WriteX 11564 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11564 258 NT_STATUS_OK
WriteX 11564 0 12006 12006 NT_STATUS_OK
Close 11564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11565 NT_STATUS_OK
ReadX 11565 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11565 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11565 1004 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Close 11565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11566 NT_STATUS_OK
Close 11566 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11568 NT_STATUS_OK
ReadX 11568 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11569 NT_STATUS_OK
Close 11569 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11568 4096 4096 4096 NT_STATUS_OK
ReadX 11568 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11571 NT_STATUS_OK
WriteX 11571 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11571 258 NT_STATUS_OK
WriteX 11571 0 11991 11991 NT_STATUS_OK
Close 11571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11572 NT_STATUS_OK
ReadX 11572 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11572 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11572 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11560 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11573 NT_STATUS_OK
Close 11573 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11575 NT_STATUS_OK
ReadX 11575 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11576 NT_STATUS_OK
SET_FILE_INFORMATION 11576 1004 NT_STATUS_OK
Close 11576 NT_STATUS_OK
WriteX 11572 0 4096 4096 NT_STATUS_OK
Close 11572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11577 NT_STATUS_OK
Close 11577 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11579 NT_STATUS_OK
ReadX 11579 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11580 NT_STATUS_OK
Close 11580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11579 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11579 1004 NT_STATUS_OK
ReadX 11579 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11579 1004 NT_STATUS_OK
WriteX 11579 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11579 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11579 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11579 1004 NT_STATUS_OK
Close 11555 NT_STATUS_OK
WriteX 11559 0 19054 19054 NT_STATUS_OK
WriteX 11579 0 12288 12288 NT_STATUS_OK
Close 11575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11582 NT_STATUS_OK
Close 11582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11559 NT_STATUS_OK
Close 11579 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11584 NT_STATUS_OK
Close 11584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11586 NT_STATUS_OK
ReadX 11586 0 61440 61440 NT_STATUS_OK
ReadX 11586 61440 4096 4096 NT_STATUS_OK
ReadX 11586 65536 61440 61440 NT_STATUS_OK
ReadX 11586 126976 4096 4096 NT_STATUS_OK
ReadX 11586 131072 61440 61440 NT_STATUS_OK
ReadX 11586 192512 4096 4096 NT_STATUS_OK
ReadX 11586 196608 61440 61440 NT_STATUS_OK
ReadX 11586 258048 4096 4096 NT_STATUS_OK
ReadX 11586 262144 61440 61440 NT_STATUS_OK
ReadX 11586 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11587 NT_STATUS_OK
ReadX 11587 0 61440 61440 NT_STATUS_OK
ReadX 11587 61440 4096 4096 NT_STATUS_OK
ReadX 11587 65536 61440 61440 NT_STATUS_OK
ReadX 11587 126976 4096 4096 NT_STATUS_OK
ReadX 11587 131072 61440 61440 NT_STATUS_OK
ReadX 11587 192512 4096 4096 NT_STATUS_OK
ReadX 11587 196608 61440 61440 NT_STATUS_OK
ReadX 11587 258048 4096 4096 NT_STATUS_OK
ReadX 11587 262144 61440 61440 NT_STATUS_OK
ReadX 11587 323584 4096 4096 NT_STATUS_OK
ReadX 11587 327680 61440 61440 NT_STATUS_OK
ReadX 11587 389120 4096 4096 NT_STATUS_OK
ReadX 11587 393216 61440 61440 NT_STATUS_OK
ReadX 11587 454656 4096 4096 NT_STATUS_OK
ReadX 11587 458752 61440 61440 NT_STATUS_OK
ReadX 11587 520192 4096 4096 NT_STATUS_OK
ReadX 11587 524288 61440 61440 NT_STATUS_OK
ReadX 11587 585728 4096 4096 NT_STATUS_OK
ReadX 11587 589824 61440 61440 NT_STATUS_OK
ReadX 11587 651264 4096 4096 NT_STATUS_OK
ReadX 11587 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11588 NT_STATUS_OK
ReadX 11588 0 61440 61440 NT_STATUS_OK
ReadX 11588 61440 4096 4096 NT_STATUS_OK
ReadX 11588 65536 61440 61440 NT_STATUS_OK
ReadX 11588 126976 4096 4096 NT_STATUS_OK
ReadX 11588 131072 61440 61440 NT_STATUS_OK
ReadX 11588 192512 4096 4096 NT_STATUS_OK
ReadX 11588 196608 61440 61440 NT_STATUS_OK
ReadX 11588 258048 4096 4096 NT_STATUS_OK
ReadX 11588 262144 61440 61440 NT_STATUS_OK
ReadX 11588 323584 4096 4096 NT_STATUS_OK
ReadX 11588 327680 61440 61440 NT_STATUS_OK
ReadX 11588 389120 4096 4096 NT_STATUS_OK
ReadX 11588 393216 61440 61440 NT_STATUS_OK
ReadX 11588 454656 4096 4096 NT_STATUS_OK
ReadX 11588 458752 61440 61440 NT_STATUS_OK
ReadX 11588 520192 4096 4096 NT_STATUS_OK
ReadX 11588 524288 61440 61440 NT_STATUS_OK
ReadX 11588 585728 4096 4096 NT_STATUS_OK
ReadX 11588 589824 61440 61440 NT_STATUS_OK
ReadX 11588 651264 4096 4096 NT_STATUS_OK
ReadX 11588 655360 61440 61440 NT_STATUS_OK
ReadX 11588 716800 4096 4096 NT_STATUS_OK
ReadX 11588 720896 61440 61440 NT_STATUS_OK
ReadX 11588 782336 4096 4096 NT_STATUS_OK
ReadX 11588 786432 61440 61440 NT_STATUS_OK
ReadX 11588 847872 4096 4096 NT_STATUS_OK
ReadX 11588 851968 61440 61440 NT_STATUS_OK
ReadX 11588 913408 4096 4096 NT_STATUS_OK
ReadX 11588 917504 61440 61440 NT_STATUS_OK
ReadX 11588 978944 4096 4096 NT_STATUS_OK
ReadX 11588 983040 61440 61440 NT_STATUS_OK
ReadX 11588 1044480 4096 4096 NT_STATUS_OK
ReadX 11588 1048576 61440 61440 NT_STATUS_OK
ReadX 11588 1110016 4096 4096 NT_STATUS_OK
ReadX 11588 1114112 61440 61440 NT_STATUS_OK
ReadX 11588 1175552 4096 4096 NT_STATUS_OK
ReadX 11588 1179648 61440 61440 NT_STATUS_OK
ReadX 11588 1241088 4096 4096 NT_STATUS_OK
ReadX 11588 1245184 61440 61440 NT_STATUS_OK
ReadX 11588 1306624 4096 4096 NT_STATUS_OK
ReadX 11588 1310720 61440 61440 NT_STATUS_OK
ReadX 11588 1372160 4096 4096 NT_STATUS_OK
ReadX 11588 1376256 61440 61440 NT_STATUS_OK
ReadX 11588 1437696 4096 4096 NT_STATUS_OK
ReadX 11588 1441792 61440 61440 NT_STATUS_OK
ReadX 11588 1503232 4096 4096 NT_STATUS_OK
ReadX 11588 1507328 61440 61440 NT_STATUS_OK
ReadX 11588 1568768 4096 4096 NT_STATUS_OK
ReadX 11588 1572864 61440 61440 NT_STATUS_OK
ReadX 11588 1634304 4096 4096 NT_STATUS_OK
ReadX 11588 1638400 61440 61440 NT_STATUS_OK
ReadX 11588 1699840 4096 4096 NT_STATUS_OK
ReadX 11588 1703936 61440 61440 NT_STATUS_OK
ReadX 11588 1765376 4096 4096 NT_STATUS_OK
ReadX 11588 1769472 61440 61440 NT_STATUS_OK
ReadX 11588 1830912 4096 4096 NT_STATUS_OK
ReadX 11588 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11589 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11590 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11591 NT_STATUS_OK
ReadX 11591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11592 NT_STATUS_OK
ReadX 11592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11593 NT_STATUS_OK
ReadX 11593 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11594 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11595 NT_STATUS_OK
QUERY_FILE_INFORMATION 11595 1004 NT_STATUS_OK
WriteX 11595 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11595 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11596 NT_STATUS_OK
Close 11596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11597 NT_STATUS_OK
WriteX 11597 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11597 258 NT_STATUS_OK
WriteX 11597 0 491 491 NT_STATUS_OK
Close 11597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11598 NT_STATUS_OK
ReadX 11598 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11595 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11600 NT_STATUS_OK
Close 11600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11601 NT_STATUS_OK
WriteX 11601 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11601 258 NT_STATUS_OK
WriteX 11601 0 543 543 NT_STATUS_OK
Close 11601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11602 NT_STATUS_OK
ReadX 11602 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11586 NT_STATUS_OK
Close 11587 NT_STATUS_OK
Close 11588 NT_STATUS_OK
Close 11602 NT_STATUS_OK
Close 11590 NT_STATUS_OK
Close 11591 NT_STATUS_OK
Close 11592 NT_STATUS_OK
Close 11593 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11605 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11606 NT_STATUS_OK
ReadX 11606 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11607 NT_STATUS_OK
ReadX 11607 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11608 NT_STATUS_OK
ReadX 11608 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11609 NT_STATUS_OK
ReadX 11609 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11610 NT_STATUS_OK
ReadX 11610 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11614 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11615 NT_STATUS_OK
QUERY_FILE_INFORMATION 11615 1004 NT_STATUS_OK
WriteX 11615 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11615 258 NT_STATUS_OK
WriteX 11615 0 2048 2048 NT_STATUS_OK
Close 11615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11616 NT_STATUS_OK
ReadX 11616 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11616 0 4096 4096 NT_STATUS_OK
Flush 11616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11616 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11620 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11620 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11621 NT_STATUS_OK
WriteX 11621 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11621 258 NT_STATUS_OK
WriteX 11621 0 2048 2048 NT_STATUS_OK
Close 11621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11622 NT_STATUS_OK
ReadX 11622 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11626 NT_STATUS_OK
Close 11626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11627 NT_STATUS_OK
WriteX 11627 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11627 258 NT_STATUS_OK
WriteX 11627 0 2048 2048 NT_STATUS_OK
Close 11627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11628 NT_STATUS_OK
ReadX 11628 0 2048 2048 NT_STATUS_OK
ReadX 11606 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11610 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11622 0 4096 4096 NT_STATUS_OK
WriteX 11606 0 8192 8192 NT_STATUS_OK
WriteX 11607 0 4096 4096 NT_STATUS_OK
WriteX 11608 0 4096 4096 NT_STATUS_OK
ReadX 11622 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11606 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11631 NT_STATUS_OK
ReadX 11631 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11632 NT_STATUS_OK
QUERY_FILE_INFORMATION 11632 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11631 NT_STATUS_OK
Close 11607 NT_STATUS_OK
Close 11608 NT_STATUS_OK
Close 11609 NT_STATUS_OK
Close 11622 NT_STATUS_OK
Close 11606 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11634 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11635 NT_STATUS_OK
ReadX 11635 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11636 NT_STATUS_OK
ReadX 11636 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11637 NT_STATUS_OK
ReadX 11637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11638 NT_STATUS_OK
ReadX 11638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11639 NT_STATUS_OK
ReadX 11639 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11640 NT_STATUS_OK
ReadX 11640 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11641 NT_STATUS_OK
ReadX 11641 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11642 NT_STATUS_OK
ReadX 11642 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11643 NT_STATUS_OK
ReadX 11643 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11644 NT_STATUS_OK
ReadX 11644 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11645 NT_STATUS_OK
ReadX 11645 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11646 NT_STATUS_OK
ReadX 11646 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11647 NT_STATUS_OK
ReadX 11647 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11651 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11652 NT_STATUS_OK
QUERY_FILE_INFORMATION 11652 1004 NT_STATUS_OK
WriteX 11652 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11652 258 NT_STATUS_OK
WriteX 11652 0 2048 2048 NT_STATUS_OK
Close 11652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11653 NT_STATUS_OK
ReadX 11653 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11654 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11655 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11655 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11659 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11660 NT_STATUS_OK
QUERY_FILE_INFORMATION 11660 1004 NT_STATUS_OK
WriteX 11660 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11660 258 NT_STATUS_OK
WriteX 11660 0 2048 2048 NT_STATUS_OK
Close 11660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11661 NT_STATUS_OK
ReadX 11661 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11653 0 4096 4096 NT_STATUS_OK
Flush 11653 NT_STATUS_OK
WriteX 11661 0 4096 4096 NT_STATUS_OK
Flush 11661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11653 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11661 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11655 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11662 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11663 NT_STATUS_OK
WriteX 11663 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11663 258 NT_STATUS_OK
WriteX 11663 0 4096 4096 NT_STATUS_OK
Close 11663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11664 NT_STATUS_OK
ReadX 11664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11665 NT_STATUS_OK
Close 11665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11666 NT_STATUS_OK
WriteX 11666 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11666 258 NT_STATUS_OK
WriteX 11666 0 4096 4096 NT_STATUS_OK
Close 11666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11667 NT_STATUS_OK
ReadX 11667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11667 0 4096 4096 NT_STATUS_OK
Close 11664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11647 NT_STATUS_OK
Close 11641 NT_STATUS_OK
Close 11655 NT_STATUS_OK
Close 11644 NT_STATUS_OK
Close 11645 NT_STATUS_OK
Close 11646 NT_STATUS_OK
Close 11642 NT_STATUS_OK
Close 11635 NT_STATUS_OK
Close 11636 NT_STATUS_OK
Close 11639 NT_STATUS_OK
Close 11640 NT_STATUS_OK
Close 11637 NT_STATUS_OK
Close 11638 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11670 NT_STATUS_OK
Close 11670 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11672 NT_STATUS_OK
ReadX 11672 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11673 NT_STATUS_OK
Close 11673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11674 NT_STATUS_OK
WriteX 11674 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11674 258 NT_STATUS_OK
WriteX 11674 0 2048 2048 NT_STATUS_OK
Close 11674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11675 NT_STATUS_OK
ReadX 11675 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11676 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11676 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11677 NT_STATUS_OK
ReadX 11677 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11678 NT_STATUS_OK
ReadX 11678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11679 NT_STATUS_OK
ReadX 11679 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11680 NT_STATUS_OK
ReadX 11680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11681 NT_STATUS_OK
ReadX 11681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11682 NT_STATUS_OK
ReadX 11682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11684 NT_STATUS_OK
ReadX 11684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11685 NT_STATUS_OK
ReadX 11685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11686 NT_STATUS_OK
ReadX 11686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11687 NT_STATUS_OK
ReadX 11687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11688 NT_STATUS_OK
ReadX 11688 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11689 NT_STATUS_OK
QUERY_FILE_INFORMATION 11689 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11672 NT_STATUS_OK
Close 11675 NT_STATUS_OK
Close 11687 NT_STATUS_OK
Close 11682 NT_STATUS_OK
Close 11683 NT_STATUS_OK
Close 11684 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Close 11686 NT_STATUS_OK
Close 11688 NT_STATUS_OK
Close 11676 NT_STATUS_OK
Close 11677 NT_STATUS_OK
Close 11680 NT_STATUS_OK
Close 11681 NT_STATUS_OK
Close 11678 NT_STATUS_OK
Close 11679 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11691 NT_STATUS_OK
QUERY_FILE_INFORMATION 11691 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11693 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11694 NT_STATUS_OK
ReadX 11694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11695 NT_STATUS_OK
ReadX 11695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11696 NT_STATUS_OK
ReadX 11696 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11697 NT_STATUS_OK
ReadX 11697 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11698 NT_STATUS_OK
ReadX 11698 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11699 NT_STATUS_OK
ReadX 11699 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11700 NT_STATUS_OK
ReadX 11700 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11701 NT_STATUS_OK
ReadX 11701 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11702 NT_STATUS_OK
ReadX 11702 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11703 NT_STATUS_OK
ReadX 11703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11704 NT_STATUS_OK
ReadX 11704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11705 NT_STATUS_OK
ReadX 11705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11706 NT_STATUS_OK
ReadX 11706 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11710 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11711 NT_STATUS_OK
QUERY_FILE_INFORMATION 11711 1004 NT_STATUS_OK
WriteX 11711 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11711 258 NT_STATUS_OK
WriteX 11711 0 2048 2048 NT_STATUS_OK
Close 11711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11712 NT_STATUS_OK
ReadX 11712 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11713 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11714 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11715 NT_STATUS_OK
ReadX 11715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11716 NT_STATUS_OK
ReadX 11716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11717 NT_STATUS_OK
ReadX 11717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11718 NT_STATUS_OK
ReadX 11718 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11722 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11723 NT_STATUS_OK
QUERY_FILE_INFORMATION 11723 1004 NT_STATUS_OK
WriteX 11723 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11723 258 NT_STATUS_OK
WriteX 11723 0 2048 2048 NT_STATUS_OK
Close 11723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11724 NT_STATUS_OK
ReadX 11724 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11725 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11726 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11726 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11730 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11731 NT_STATUS_OK
QUERY_FILE_INFORMATION 11731 1004 NT_STATUS_OK
WriteX 11731 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11731 258 NT_STATUS_OK
WriteX 11731 0 2048 2048 NT_STATUS_OK
Close 11731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11732 NT_STATUS_OK
ReadX 11732 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11712 0 4096 4096 NT_STATUS_OK
Flush 11712 NT_STATUS_OK
WriteX 11724 0 4096 4096 NT_STATUS_OK
Flush 11724 NT_STATUS_OK
WriteX 11732 0 4096 4096 NT_STATUS_OK
Flush 11732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11712 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11724 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11732 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11714 4096 16384 16384 NT_STATUS_OK
ReadX 11694 4096 16384 16384 NT_STATUS_OK
ReadX 11726 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11733 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11734 NT_STATUS_OK
ReadX 11734 0 2048 2048 NT_STATUS_OK
WriteX 11734 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11735 NT_STATUS_OK
QUERY_FILE_INFORMATION 11735 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11734 NT_STATUS_OK
Close 11718 NT_STATUS_OK
Close 11706 NT_STATUS_OK
Close 11698 NT_STATUS_OK
Close 11714 NT_STATUS_OK
Close 11715 NT_STATUS_OK
Close 11716 NT_STATUS_OK
Close 11717 NT_STATUS_OK
Close 11705 NT_STATUS_OK
Close 11726 NT_STATUS_OK
Close 11700 NT_STATUS_OK
Close 11703 NT_STATUS_OK
Close 11704 NT_STATUS_OK
Close 11701 NT_STATUS_OK
Close 11702 NT_STATUS_OK
Close 11694 NT_STATUS_OK
Close 11695 NT_STATUS_OK
Close 11696 NT_STATUS_OK
Close 11697 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11737 NT_STATUS_OK
QUERY_FILE_INFORMATION 11737 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11739 NT_STATUS_OK
QUERY_FILE_INFORMATION 11739 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11741 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11742 NT_STATUS_OK
ReadX 11742 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11743 NT_STATUS_OK
ReadX 11743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11744 NT_STATUS_OK
ReadX 11744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11745 NT_STATUS_OK
ReadX 11745 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11746 NT_STATUS_OK
ReadX 11746 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11742 4096 16384 16384 NT_STATUS_OK
WriteX 11742 0 4096 4096 NT_STATUS_OK
WriteX 11743 0 4096 4096 NT_STATUS_OK
WriteX 11744 0 4096 4096 NT_STATUS_OK
WriteX 11745 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11747 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11748 NT_STATUS_OK
ReadX 11748 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11749 NT_STATUS_OK
ReadX 11749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11750 NT_STATUS_OK
ReadX 11750 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11751 NT_STATUS_OK
ReadX 11751 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11753 NT_STATUS_OK
ReadX 11753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11754 NT_STATUS_OK
ReadX 11754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11755 NT_STATUS_OK
ReadX 11755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11756 NT_STATUS_OK
ReadX 11756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11758 NT_STATUS_OK
ReadX 11758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11760 NT_STATUS_OK
ReadX 11760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11761 NT_STATUS_OK
ReadX 11761 0 8192 8192 NT_STATUS_OK
ReadX 11748 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11762 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11762 0 4096 4096 NT_STATUS_OK
ReadX 11762 4096 4096 4096 NT_STATUS_OK
ReadX 11762 8192 4096 4096 NT_STATUS_OK
WriteX 11748 0 4096 4096 NT_STATUS_OK
WriteX 11749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11763 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
ReadX 11763 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11742 0 4096 4096 NT_STATUS_OK
WriteX 11743 0 4096 4096 NT_STATUS_OK
WriteX 11744 0 4096 4096 NT_STATUS_OK
WriteX 11745 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11767 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11768 NT_STATUS_OK
QUERY_FILE_INFORMATION 11768 1004 NT_STATUS_OK
WriteX 11768 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11768 258 NT_STATUS_OK
WriteX 11768 0 2048 2048 NT_STATUS_OK
Close 11768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11769 NT_STATUS_OK
ReadX 11769 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11769 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11769 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11770 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11771 NT_STATUS_OK
ReadX 11771 0 4096 4096 NT_STATUS_OK
ReadX 11771 4096 4096 4096 NT_STATUS_OK
WriteX 11771 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11769 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11772 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11773 NT_STATUS_OK
ReadX 11773 0 4096 4096 NT_STATUS_OK
ReadX 11773 4096 4096 4096 NT_STATUS_OK
WriteX 11773 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11774 NT_STATUS_OK
QUERY_FILE_INFORMATION 11774 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11761 NT_STATUS_OK
Close 11746 NT_STATUS_OK
Close 11742 NT_STATUS_OK
Close 11743 NT_STATUS_OK
Close 11744 NT_STATUS_OK
Close 11745 NT_STATUS_OK
Close 11754 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Close 11755 NT_STATUS_OK
Close 11756 NT_STATUS_OK
Close 11757 NT_STATUS_OK
Close 11758 NT_STATUS_OK
Close 11760 NT_STATUS_OK
Close 11748 NT_STATUS_OK
Close 11749 NT_STATUS_OK
Close 11752 NT_STATUS_OK
Close 11753 NT_STATUS_OK
Close 11750 NT_STATUS_OK
Close 11751 NT_STATUS_OK
Close 11773 NT_STATUS_OK
Close 11762 NT_STATUS_OK
Close 11763 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11776 0 4096 4096 NT_STATUS_OK
ReadX 11776 4096 4096 4096 NT_STATUS_OK
ReadX 11776 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11777 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11778 NT_STATUS_OK
ReadX 11778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11779 NT_STATUS_OK
ReadX 11779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11780 NT_STATUS_OK
ReadX 11780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11781 NT_STATUS_OK
ReadX 11781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11782 NT_STATUS_OK
ReadX 11782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11783 NT_STATUS_OK
ReadX 11783 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11784 NT_STATUS_OK
ReadX 11784 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11785 NT_STATUS_OK
ReadX 11785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11786 NT_STATUS_OK
ReadX 11786 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11787 NT_STATUS_OK
ReadX 11787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11788 NT_STATUS_OK
ReadX 11788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11789 NT_STATUS_OK
ReadX 11789 0 4096 4096 NT_STATUS_OK
ReadX 11777 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11793 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11794 NT_STATUS_OK
QUERY_FILE_INFORMATION 11794 1004 NT_STATUS_OK
WriteX 11794 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11794 258 NT_STATUS_OK
WriteX 11794 0 2048 2048 NT_STATUS_OK
Close 11794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11795 NT_STATUS_OK
ReadX 11795 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11795 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11799 NT_STATUS_OK
Close 11799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11800 NT_STATUS_OK
QUERY_FILE_INFORMATION 11800 1004 NT_STATUS_OK
WriteX 11800 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11800 258 NT_STATUS_OK
WriteX 11800 0 2048 2048 NT_STATUS_OK
Close 11800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11801 NT_STATUS_OK
ReadX 11801 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11801 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11784 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11802 NT_STATUS_OK
QUERY_FILE_INFORMATION 11802 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11788 NT_STATUS_OK
Close 11783 NT_STATUS_OK
Close 11789 NT_STATUS_OK
Close 11777 NT_STATUS_OK
Close 11778 NT_STATUS_OK
Close 11781 NT_STATUS_OK
Close 11782 NT_STATUS_OK
Close 11779 NT_STATUS_OK
Close 11780 NT_STATUS_OK
Close 11784 NT_STATUS_OK
Close 11785 NT_STATUS_OK
Close 11786 NT_STATUS_OK
Close 11787 NT_STATUS_OK
Close 11776 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11804 NT_STATUS_OK
QUERY_FILE_INFORMATION 11804 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11806 NT_STATUS_OK
ReadX 11806 61440 4096 4096 NT_STATUS_OK
ReadX 11806 126976 4096 4096 NT_STATUS_OK
WriteX 11806 0 65536 65536 NT_STATUS_OK
WriteX 11806 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11807 NT_STATUS_OK
ReadX 11807 61440 4096 4096 NT_STATUS_OK
ReadX 11807 126976 4096 4096 NT_STATUS_OK
ReadX 11807 192512 4096 4096 NT_STATUS_OK
ReadX 11807 258048 4096 4096 NT_STATUS_OK
WriteX 11807 0 65536 65536 NT_STATUS_OK
WriteX 11807 65536 65536 65536 NT_STATUS_OK
WriteX 11807 131072 65536 65536 NT_STATUS_OK
WriteX 11807 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11808 NT_STATUS_OK
ReadX 11808 61440 4096 4096 NT_STATUS_OK
ReadX 11808 126976 4096 4096 NT_STATUS_OK
ReadX 11808 192512 4096 4096 NT_STATUS_OK
ReadX 11808 258048 4096 4096 NT_STATUS_OK
ReadX 11808 323584 4096 4096 NT_STATUS_OK
ReadX 11808 389120 4096 4096 NT_STATUS_OK
ReadX 11808 454656 4096 4096 NT_STATUS_OK
ReadX 11808 520192 4096 4096 NT_STATUS_OK
WriteX 11808 0 65536 65536 NT_STATUS_OK
WriteX 11808 65536 65536 65536 NT_STATUS_OK
WriteX 11808 131072 65536 65536 NT_STATUS_OK
WriteX 11808 196608 65536 65536 NT_STATUS_OK
WriteX 11808 262144 65536 65536 NT_STATUS_OK
WriteX 11808 327680 65536 65536 NT_STATUS_OK
WriteX 11808 393216 65536 65536 NT_STATUS_OK
WriteX 11808 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11809 NT_STATUS_OK
ReadX 11809 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11809 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11809 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11809 8192 4096 4096 NT_STATUS_OK
ReadX 11809 12288 4096 4096 NT_STATUS_OK
ReadX 11809 16384 4096 4096 NT_STATUS_OK
ReadX 11809 20480 4096 4096 NT_STATUS_OK
ReadX 11809 24576 4096 4096 NT_STATUS_OK
ReadX 11809 28672 4096 4096 NT_STATUS_OK
ReadX 11809 32768 4096 4096 NT_STATUS_OK
ReadX 11809 36864 4096 4096 NT_STATUS_OK
ReadX 11809 40960 4096 4096 NT_STATUS_OK
ReadX 11809 45056 4096 4096 NT_STATUS_OK
ReadX 11809 49152 4096 4096 NT_STATUS_OK
ReadX 11809 53248 4096 4096 NT_STATUS_OK
ReadX 11809 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11809 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11810 NT_STATUS_OK
Close 11810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11806 NT_STATUS_OK
Close 11807 NT_STATUS_OK
Close 11808 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11812 NT_STATUS_OK
WriteX 11812 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11812 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11812 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11812 1004 NT_STATUS_OK
WriteX 11812 0 57088 57088 NT_STATUS_OK
WriteX 11812 0 4096 4096 NT_STATUS_OK
Flush 11812 NT_STATUS_OK
Close 11809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11813 NT_STATUS_OK
SET_FILE_INFORMATION 11813 1004 NT_STATUS_OK
Close 11813 NT_STATUS_OK
SET_FILE_INFORMATION 11812 1004 NT_STATUS_OK
WriteX 11812 0 4096 4096 NT_STATUS_OK
Close 11812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11814 NT_STATUS_OK
Close 11814 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11816 NT_STATUS_OK
ReadX 11816 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11816 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11817 NT_STATUS_OK
WriteX 11817 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11817 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11817 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11817 1004 NT_STATUS_OK
WriteX 11817 0 51456 51456 NT_STATUS_OK
WriteX 11817 0 4096 4096 NT_STATUS_OK
Flush 11817 NT_STATUS_OK
SET_FILE_INFORMATION 11817 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11817 1004 NT_STATUS_OK
WriteX 11817 0 4096 4096 NT_STATUS_OK
Close 11817 NT_STATUS_OK
Close 11816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11819 NT_STATUS_OK
Close 11819 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11821 NT_STATUS_OK
ReadX 11821 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11821 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11823 NT_STATUS_OK
Close 11823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11826 NT_STATUS_OK
WriteX 11826 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11826 258 NT_STATUS_OK
WriteX 11826 0 53077 53077 NT_STATUS_OK
Close 11826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11827 NT_STATUS_OK
WriteX 11827 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11827 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11827 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
WriteX 11827 0 65536 65536 NT_STATUS_OK
WriteX 11827 65536 1856 1856 NT_STATUS_OK
WriteX 11827 0 4096 4096 NT_STATUS_OK
Flush 11827 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
WriteX 11827 0 4096 4096 NT_STATUS_OK
Close 11827 NT_STATUS_OK
Close 11821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11829 NT_STATUS_OK
Close 11829 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11831 NT_STATUS_OK
ReadX 11831 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11833 NT_STATUS_OK
Close 11833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11836 NT_STATUS_OK
WriteX 11836 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11836 258 NT_STATUS_OK
WriteX 11836 0 7983 7983 NT_STATUS_OK
Close 11836 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11838 NT_STATUS_OK
Close 11838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11841 NT_STATUS_OK
WriteX 11841 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11841 258 NT_STATUS_OK
WriteX 11841 0 65536 65536 NT_STATUS_OK
WriteX 11841 65536 65536 65536 NT_STATUS_OK
WriteX 11841 131072 65536 65536 NT_STATUS_OK
WriteX 11841 196608 65536 65536 NT_STATUS_OK
WriteX 11841 262144 65536 65536 NT_STATUS_OK
WriteX 11841 327680 65536 65536 NT_STATUS_OK
WriteX 11841 393216 65536 65536 NT_STATUS_OK
WriteX 11841 458752 46731 46731 NT_STATUS_OK
Close 11841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11842 NT_STATUS_OK
WriteX 11842 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11842 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11831 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11842 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11842 1004 NT_STATUS_OK
WriteX 11842 0 65536 65536 NT_STATUS_OK
WriteX 11842 65536 22848 22848 NT_STATUS_OK
WriteX 11842 0 4096 4096 NT_STATUS_OK
Flush 11842 NT_STATUS_OK
SET_FILE_INFORMATION 11842 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11842 1004 NT_STATUS_OK
WriteX 11842 0 4096 4096 NT_STATUS_OK
Close 11842 NT_STATUS_OK
Close 11831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11844 NT_STATUS_OK
Close 11844 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11846 NT_STATUS_OK
ReadX 11846 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11846 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11847 NT_STATUS_OK
ReadX 11847 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11847 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11847 1004 NT_STATUS_OK
ReadX 11847 8192 4096 4096 NT_STATUS_OK
ReadX 11847 12288 4096 4096 NT_STATUS_OK
ReadX 11847 16384 4096 4096 NT_STATUS_OK
ReadX 11847 20480 4096 4096 NT_STATUS_OK
ReadX 11847 24576 4096 4096 NT_STATUS_OK
ReadX 11847 28672 4096 4096 NT_STATUS_OK
ReadX 11847 32768 4096 4096 NT_STATUS_OK
ReadX 11847 36864 4096 4096 NT_STATUS_OK
ReadX 11847 40960 4096 4096 NT_STATUS_OK
ReadX 11847 45056 4096 4096 NT_STATUS_OK
ReadX 11847 49152 4096 4096 NT_STATUS_OK
ReadX 11847 53248 4096 4096 NT_STATUS_OK
ReadX 11847 57344 4096 4096 NT_STATUS_OK
ReadX 11847 61440 4096 4096 NT_STATUS_OK
ReadX 11847 65536 4096 4096 NT_STATUS_OK
ReadX 11847 69632 4096 4096 NT_STATUS_OK
ReadX 11847 73728 4096 4096 NT_STATUS_OK
ReadX 11847 77824 4096 4096 NT_STATUS_OK
ReadX 11847 81920 4096 4096 NT_STATUS_OK
ReadX 11847 86016 4096 4096 NT_STATUS_OK
ReadX 11847 90112 4096 4096 NT_STATUS_OK
ReadX 11847 94208 4096 4096 NT_STATUS_OK
ReadX 11847 98304 4096 4096 NT_STATUS_OK
ReadX 11847 102400 4096 4096 NT_STATUS_OK
ReadX 11847 106496 4096 4096 NT_STATUS_OK
ReadX 11847 110592 4096 4096 NT_STATUS_OK
ReadX 11847 114688 4096 4096 NT_STATUS_OK
ReadX 11847 118784 4096 4096 NT_STATUS_OK
ReadX 11847 122880 4096 4096 NT_STATUS_OK
ReadX 11847 126976 4096 4096 NT_STATUS_OK
ReadX 11847 131072 4096 4096 NT_STATUS_OK
ReadX 11847 135168 4096 4096 NT_STATUS_OK
ReadX 11847 139264 4096 4096 NT_STATUS_OK
ReadX 11847 143360 4096 4096 NT_STATUS_OK
ReadX 11847 147456 4096 4096 NT_STATUS_OK
ReadX 11847 151552 4096 4096 NT_STATUS_OK
ReadX 11847 155648 4096 4096 NT_STATUS_OK
ReadX 11847 159744 4096 4096 NT_STATUS_OK
ReadX 11847 163840 4096 4096 NT_STATUS_OK
ReadX 11847 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11847 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11848 NT_STATUS_OK
Close 11848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11846 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11850 NT_STATUS_OK
WriteX 11850 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11850 258 NT_STATUS_OK
Close 11847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11851 NT_STATUS_OK
SET_FILE_INFORMATION 11851 1004 NT_STATUS_OK
Close 11851 NT_STATUS_OK
WriteX 11850 0 42388 42388 NT_STATUS_OK
Close 11850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11852 NT_STATUS_OK
Close 11852 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11854 NT_STATUS_OK
ReadX 11854 0 4096 4096 NT_STATUS_OK
ReadX 11854 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11855 NT_STATUS_OK
WriteX 11855 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11855 258 NT_STATUS_OK
SET_FILE_INFORMATION 11855 1004 NT_STATUS_OK
WriteX 11855 0 42652 42652 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Close 11854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11857 NT_STATUS_OK
Close 11857 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11859 NT_STATUS_OK
ReadX 11859 0 4096 4096 NT_STATUS_OK
ReadX 11859 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11861 NT_STATUS_OK
Close 11861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11864 NT_STATUS_OK
WriteX 11864 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11864 258 NT_STATUS_OK
WriteX 11864 0 65536 65536 NT_STATUS_OK
WriteX 11864 65536 49 49 NT_STATUS_OK
Close 11864 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11865 NT_STATUS_OK
ReadX 11865 0 61440 61440 NT_STATUS_OK
ReadX 11865 61440 4096 4096 NT_STATUS_OK
ReadX 11865 65536 61440 61440 NT_STATUS_OK
ReadX 11865 126976 4096 4096 NT_STATUS_OK
ReadX 11865 131072 61440 61440 NT_STATUS_OK
ReadX 11865 192512 4096 4096 NT_STATUS_OK
ReadX 11865 196608 61440 61440 NT_STATUS_OK
ReadX 11865 258048 4096 4096 NT_STATUS_OK
ReadX 11865 262144 61440 61440 NT_STATUS_OK
ReadX 11865 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11866 NT_STATUS_OK
ReadX 11866 0 61440 61440 NT_STATUS_OK
ReadX 11866 61440 4096 4096 NT_STATUS_OK
ReadX 11866 65536 61440 61440 NT_STATUS_OK
ReadX 11866 126976 4096 4096 NT_STATUS_OK
ReadX 11866 131072 61440 61440 NT_STATUS_OK
ReadX 11866 192512 4096 4096 NT_STATUS_OK
ReadX 11866 196608 61440 61440 NT_STATUS_OK
ReadX 11866 258048 4096 4096 NT_STATUS_OK
ReadX 11866 262144 61440 61440 NT_STATUS_OK
ReadX 11866 323584 4096 4096 NT_STATUS_OK
ReadX 11866 327680 61440 61440 NT_STATUS_OK
ReadX 11866 389120 4096 4096 NT_STATUS_OK
ReadX 11866 393216 61440 61440 NT_STATUS_OK
ReadX 11866 454656 4096 4096 NT_STATUS_OK
ReadX 11866 458752 61440 61440 NT_STATUS_OK
ReadX 11866 520192 4096 4096 NT_STATUS_OK
ReadX 11866 524288 61440 61440 NT_STATUS_OK
ReadX 11866 585728 4096 4096 NT_STATUS_OK
ReadX 11866 589824 61440 61440 NT_STATUS_OK
ReadX 11866 651264 4096 4096 NT_STATUS_OK
ReadX 11866 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11867 NT_STATUS_OK
ReadX 11867 0 61440 61440 NT_STATUS_OK
ReadX 11867 61440 4096 4096 NT_STATUS_OK
ReadX 11867 65536 61440 61440 NT_STATUS_OK
ReadX 11867 126976 4096 4096 NT_STATUS_OK
ReadX 11867 131072 61440 61440 NT_STATUS_OK
ReadX 11867 192512 4096 4096 NT_STATUS_OK
ReadX 11867 196608 61440 61440 NT_STATUS_OK
ReadX 11867 258048 4096 4096 NT_STATUS_OK
ReadX 11867 262144 61440 61440 NT_STATUS_OK
ReadX 11867 323584 4096 4096 NT_STATUS_OK
ReadX 11867 327680 61440 61440 NT_STATUS_OK
ReadX 11867 389120 4096 4096 NT_STATUS_OK
ReadX 11867 393216 61440 61440 NT_STATUS_OK
ReadX 11867 454656 4096 4096 NT_STATUS_OK
ReadX 11867 458752 61440 61440 NT_STATUS_OK
ReadX 11867 520192 4096 4096 NT_STATUS_OK
ReadX 11867 524288 61440 61440 NT_STATUS_OK
ReadX 11867 585728 4096 4096 NT_STATUS_OK
ReadX 11867 589824 61440 61440 NT_STATUS_OK
ReadX 11867 651264 4096 4096 NT_STATUS_OK
ReadX 11867 655360 61440 61440 NT_STATUS_OK
ReadX 11867 716800 4096 4096 NT_STATUS_OK
ReadX 11867 720896 61440 61440 NT_STATUS_OK
ReadX 11867 782336 4096 4096 NT_STATUS_OK
ReadX 11867 786432 61440 61440 NT_STATUS_OK
ReadX 11867 847872 4096 4096 NT_STATUS_OK
ReadX 11867 851968 61440 61440 NT_STATUS_OK
ReadX 11867 913408 4096 4096 NT_STATUS_OK
ReadX 11867 917504 61440 61440 NT_STATUS_OK
ReadX 11867 978944 4096 4096 NT_STATUS_OK
ReadX 11867 983040 61440 61440 NT_STATUS_OK
ReadX 11867 1044480 4096 4096 NT_STATUS_OK
ReadX 11867 1048576 61440 61440 NT_STATUS_OK
ReadX 11867 1110016 4096 4096 NT_STATUS_OK
ReadX 11867 1114112 61440 61440 NT_STATUS_OK
ReadX 11867 1175552 4096 4096 NT_STATUS_OK
ReadX 11867 1179648 61440 61440 NT_STATUS_OK
ReadX 11867 1241088 4096 4096 NT_STATUS_OK
ReadX 11867 1245184 61440 61440 NT_STATUS_OK
ReadX 11867 1306624 4096 4096 NT_STATUS_OK
ReadX 11867 1310720 61440 61440 NT_STATUS_OK
ReadX 11867 1372160 4096 4096 NT_STATUS_OK
ReadX 11867 1376256 61440 61440 NT_STATUS_OK
ReadX 11867 1437696 4096 4096 NT_STATUS_OK
ReadX 11867 1441792 61440 61440 NT_STATUS_OK
ReadX 11867 1503232 4096 4096 NT_STATUS_OK
ReadX 11867 1507328 61440 61440 NT_STATUS_OK
ReadX 11867 1568768 4096 4096 NT_STATUS_OK
ReadX 11867 1572864 61440 61440 NT_STATUS_OK
ReadX 11867 1634304 4096 4096 NT_STATUS_OK
ReadX 11867 1638400 61440 61440 NT_STATUS_OK
ReadX 11867 1699840 4096 4096 NT_STATUS_OK
ReadX 11867 1703936 61440 61440 NT_STATUS_OK
ReadX 11867 1765376 4096 4096 NT_STATUS_OK
ReadX 11867 1769472 61440 61440 NT_STATUS_OK
ReadX 11867 1830912 4096 4096 NT_STATUS_OK
ReadX 11867 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11869 NT_STATUS_OK
QUERY_FILE_INFORMATION 11869 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11869 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11869 1005 NT_STATUS_OK
ReadX 11869 2156 24 24 NT_STATUS_OK
ReadX 11869 2139 276 276 NT_STATUS_OK
ReadX 11869 2136 14 14 NT_STATUS_OK
ReadX 11869 2136 7 7 NT_STATUS_OK
ReadX 11869 2138 12 12 NT_STATUS_OK
ReadX 11869 2137 8 8 NT_STATUS_OK
ReadX 11869 2135 15 15 NT_STATUS_OK
ReadX 11869 0 16 16 NT_STATUS_OK
ReadX 11869 16 2048 2048 NT_STATUS_OK
ReadX 11869 2064 2048 2048 NT_STATUS_OK
ReadX 11869 257 2048 2048 NT_STATUS_OK
ReadX 11869 385 2048 2048 NT_STATUS_OK
ReadX 11869 513 2048 2048 NT_STATUS_OK
ReadX 11869 641 2048 2048 NT_STATUS_OK
ReadX 11869 769 2048 2048 NT_STATUS_OK
ReadX 11869 897 2048 2048 NT_STATUS_OK
ReadX 11869 1025 2048 2048 NT_STATUS_OK
ReadX 11869 1153 2048 2048 NT_STATUS_OK
ReadX 11869 1281 2048 2048 NT_STATUS_OK
ReadX 11869 1409 2048 2048 NT_STATUS_OK
ReadX 11869 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11871 NT_STATUS_OK
Close 11871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11865 NT_STATUS_OK
Close 11866 NT_STATUS_OK
Close 11867 NT_STATUS_OK
Close 11859 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11874 NT_STATUS_OK
WriteX 11874 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11874 258 NT_STATUS_OK
WriteX 11874 0 10575 10575 NT_STATUS_OK
Flush 11874 NT_STATUS_OK
Close 11874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11875 NT_STATUS_OK
Close 11875 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11877 NT_STATUS_OK
ReadX 11877 0 4096 4096 NT_STATUS_OK
Close 11869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11879 NT_STATUS_OK
LockX 11879 2147483538 1 NT_STATUS_OK
UnlockX 11879 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11879 1005 NT_STATUS_OK
ReadX 11879 0 512 512 NT_STATUS_OK
ReadX 11879 512 512 512 NT_STATUS_OK
ReadX 11879 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11879 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11879 1004 NT_STATUS_OK
Close 11879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11880 NT_STATUS_OK
QUERY_FILE_INFORMATION 11880 1005 NT_STATUS_OK
ReadX 11880 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11881 NT_STATUS_OK
LockX 11881 2147483538 1 NT_STATUS_OK
UnlockX 11881 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11881 1005 NT_STATUS_OK
ReadX 11881 0 512 512 NT_STATUS_OK
ReadX 11881 512 512 512 NT_STATUS_OK
ReadX 11881 1024 512 512 NT_STATUS_OK
ReadX 11881 288 20 20 NT_STATUS_OK
ReadX 11881 308 2084 2084 NT_STATUS_OK
ReadX 11881 388 2084 2084 NT_STATUS_OK
ReadX 11881 388 2084 2084 NT_STATUS_OK
ReadX 11868 2157 1386 1386 NT_STATUS_OK
ReadX 11881 2472 399 399 NT_STATUS_OK
ReadX 11881 3072 1536 1536 NT_STATUS_OK
ReadX 11881 544 149 149 NT_STATUS_OK
ReadX 11881 693 485 485 NT_STATUS_OK
Close 11881 NT_STATUS_OK
ReadX 11868 2157 4096 4096 NT_STATUS_OK
ReadX 11868 6253 4096 4096 NT_STATUS_OK
ReadX 11868 10349 4096 4096 NT_STATUS_OK
ReadX 11868 14445 4096 4096 NT_STATUS_OK
ReadX 11868 18541 4096 4096 NT_STATUS_OK
ReadX 11868 22637 256 256 NT_STATUS_OK
ReadX 11868 22893 4096 4096 NT_STATUS_OK
ReadX 11868 26989 4096 4096 NT_STATUS_OK
ReadX 11868 31085 4096 4096 NT_STATUS_OK
ReadX 11868 35181 4096 4096 NT_STATUS_OK
ReadX 11868 39277 4096 4096 NT_STATUS_OK
ReadX 11868 43373 4096 4096 NT_STATUS_OK
ReadX 11868 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11868 2157 1024 1024 NT_STATUS_OK
ReadX 11868 1667 4688 4688 NT_STATUS_OK
ReadX 11868 6355 3516 3516 NT_STATUS_OK
ReadX 11868 9871 16384 16384 NT_STATUS_OK
ReadX 11868 26255 3771 3771 NT_STATUS_OK
ReadX 11868 30026 2048 2048 NT_STATUS_OK
ReadX 11868 32074 1024 1024 NT_STATUS_OK
ReadX 11868 33098 6652 6652 NT_STATUS_OK
ReadX 11868 39750 16384 16384 NT_STATUS_OK
ReadX 11868 56134 10496 10496 NT_STATUS_OK
ReadX 11868 66630 1784 1784 NT_STATUS_OK
ReadX 11868 68414 90 90 NT_STATUS_OK
ReadX 11868 68504 273 273 NT_STATUS_OK
ReadX 11868 68777 1600 1600 NT_STATUS_OK
ReadX 11868 70377 640 640 NT_STATUS_OK
ReadX 11868 71017 1280 1280 NT_STATUS_OK
ReadX 11868 72297 8464 8464 NT_STATUS_OK
ReadX 11868 80761 158 158 NT_STATUS_OK
ReadX 11868 80919 912 912 NT_STATUS_OK
ReadX 11868 81831 1980 1980 NT_STATUS_OK
ReadX 11868 83811 2256 2256 NT_STATUS_OK
ReadX 11868 86067 400 400 NT_STATUS_OK
ReadX 11868 86467 252 252 NT_STATUS_OK
ReadX 11868 86719 42 42 NT_STATUS_OK
ReadX 11868 86761 725 725 NT_STATUS_OK
ReadX 11868 2009 512 512 NT_STATUS_OK
ReadX 11868 3895 9 9 NT_STATUS_OK
ReadX 11868 3781 46 46 NT_STATUS_OK
ReadX 11868 4059 92 92 NT_STATUS_OK
ReadX 11868 3781 92 92 NT_STATUS_OK
ReadX 11868 3986 184 184 NT_STATUS_OK
ReadX 11868 3987 16384 16384 NT_STATUS_OK
ReadX 11868 3902 16384 16384 NT_STATUS_OK
ReadX 11868 3781 10240 10240 NT_STATUS_OK
ReadX 11868 3821 16384 16384 NT_STATUS_OK
ReadX 11868 3891 935 935 NT_STATUS_OK
ReadX 11868 4060 10240 10240 NT_STATUS_OK
ReadX 11868 4059 184 184 NT_STATUS_OK
ReadX 11868 256 184 184 NT_STATUS_OK
ReadX 11868 256 1026 1026 NT_STATUS_OK
ReadX 11868 3901 326 326 NT_STATUS_OK
ReadX 11868 3899 652 652 NT_STATUS_OK
ReadX 11868 256 2 2 NT_STATUS_OK
ReadX 11868 258 4948 4948 NT_STATUS_OK
Close 11868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11883 NT_STATUS_OK
Close 11883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11886 NT_STATUS_OK
WriteX 11886 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11886 258 NT_STATUS_OK
WriteX 11886 0 65536 65536 NT_STATUS_OK
WriteX 11886 65536 65536 65536 NT_STATUS_OK
WriteX 11886 131072 65536 65536 NT_STATUS_OK
WriteX 11886 196608 65536 65536 NT_STATUS_OK
WriteX 11886 262144 65536 65536 NT_STATUS_OK
WriteX 11886 327680 65536 65536 NT_STATUS_OK
WriteX 11886 393216 65536 65536 NT_STATUS_OK
WriteX 11886 458752 65536 65536 NT_STATUS_OK
WriteX 11886 524288 65536 65536 NT_STATUS_OK
WriteX 11886 589824 35257 35257 NT_STATUS_OK
Close 11886 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11888 NT_STATUS_OK
Close 11888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11891 NT_STATUS_OK
WriteX 11891 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11891 258 NT_STATUS_OK
WriteX 11891 0 65536 65536 NT_STATUS_OK
WriteX 11891 65536 65536 65536 NT_STATUS_OK
WriteX 11891 131072 65536 65536 NT_STATUS_OK
WriteX 11891 196608 65536 65536 NT_STATUS_OK
WriteX 11891 262144 65536 65536 NT_STATUS_OK
WriteX 11891 327680 65536 65536 NT_STATUS_OK
WriteX 11891 393216 65536 65536 NT_STATUS_OK
WriteX 11891 458752 65536 65536 NT_STATUS_OK
WriteX 11891 524288 65536 65536 NT_STATUS_OK
WriteX 11891 589824 57598 57598 NT_STATUS_OK
Close 11891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11893 NT_STATUS_OK
WriteX 11893 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11893 258 NT_STATUS_OK
WriteX 11893 0 12543 12543 NT_STATUS_OK
Flush 11893 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Close 11877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11895 NT_STATUS_OK
Close 11895 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11897 NT_STATUS_OK
ReadX 11897 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11898 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11899 NT_STATUS_OK
QUERY_FILE_INFORMATION 11899 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11899 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11899 1005 NT_STATUS_OK
ReadX 11899 1938 24 24 NT_STATUS_OK
ReadX 11899 1920 276 276 NT_STATUS_OK
ReadX 11899 1918 14 14 NT_STATUS_OK
ReadX 11899 1918 7 7 NT_STATUS_OK
ReadX 11899 1919 12 12 NT_STATUS_OK
ReadX 11899 1919 8 8 NT_STATUS_OK
ReadX 11899 1917 15 15 NT_STATUS_OK
ReadX 11899 0 16 16 NT_STATUS_OK
ReadX 11899 16 2048 2048 NT_STATUS_OK
ReadX 11899 2064 2048 2048 NT_STATUS_OK
ReadX 11899 257 2048 2048 NT_STATUS_OK
ReadX 11899 385 2048 2048 NT_STATUS_OK
ReadX 11899 513 2048 2048 NT_STATUS_OK
ReadX 11899 641 2048 2048 NT_STATUS_OK
ReadX 11899 769 2048 2048 NT_STATUS_OK
ReadX 11899 897 2048 2048 NT_STATUS_OK
ReadX 11899 1025 2048 2048 NT_STATUS_OK
ReadX 11899 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11901 NT_STATUS_OK
Close 11901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11904 NT_STATUS_OK
WriteX 11904 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11904 258 NT_STATUS_OK
WriteX 11904 0 11588 11588 NT_STATUS_OK
Flush 11904 NT_STATUS_OK
Close 11904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11905 NT_STATUS_OK
Close 11905 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11907 NT_STATUS_OK
ReadX 11907 0 4096 4096 NT_STATUS_OK
Close 11899 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11909 NT_STATUS_OK
WriteX 11909 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11909 258 NT_STATUS_OK
WriteX 11909 0 11615 11615 NT_STATUS_OK
Flush 11909 NT_STATUS_OK
Close 11909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11911 NT_STATUS_OK
Close 11911 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11913 NT_STATUS_OK
ReadX 11913 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11915 NT_STATUS_OK
Close 11915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11918 NT_STATUS_OK
WriteX 11918 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11918 258 NT_STATUS_OK
WriteX 11918 0 65536 65536 NT_STATUS_OK
WriteX 11918 65536 16050 16050 NT_STATUS_OK
Close 11918 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11898 1939 64 64 NT_STATUS_OK
ReadX 11898 128 248 248 NT_STATUS_OK
ReadX 11898 128 568 568 NT_STATUS_OK
ReadX 11898 3872 1536 1536 NT_STATUS_OK
ReadX 11898 3456 2560 2560 NT_STATUS_OK
ReadX 11898 3136 512 512 NT_STATUS_OK
ReadX 11898 2880 4096 4096 NT_STATUS_OK
ReadX 11898 3264 3072 3072 NT_STATUS_OK
ReadX 11898 320 4096 4096 NT_STATUS_OK
ReadX 11898 1024 4096 4096 NT_STATUS_OK
ReadX 11898 3616 4096 4096 NT_STATUS_OK
ReadX 11898 1939 64 64 NT_STATUS_OK
ReadX 11898 128 248 248 NT_STATUS_OK
ReadX 11898 128 608 608 NT_STATUS_OK
ReadX 11898 2858 1024 1024 NT_STATUS_OK
ReadX 11898 2810 4096 4096 NT_STATUS_OK
ReadX 11898 2826 4096 4096 NT_STATUS_OK
ReadX 11898 2580 2048 2048 NT_STATUS_OK
ReadX 11898 2800 2560 2560 NT_STATUS_OK
ReadX 11898 2100 4096 4096 NT_STATUS_OK
ReadX 11898 2084 4096 4096 NT_STATUS_OK
ReadX 11898 868 4096 4096 NT_STATUS_OK
ReadX 11898 2324 4096 4096 NT_STATUS_OK
ReadX 11898 884 4096 4096 NT_STATUS_OK
ReadX 11898 2604 1024 1024 NT_STATUS_OK
ReadX 11898 580 4096 4096 NT_STATUS_OK
ReadX 11898 596 4096 4096 NT_STATUS_OK
ReadX 11898 2752 4096 4096 NT_STATUS_OK
ReadX 11898 2842 1024 1024 NT_STATUS_OK
ReadX 11898 660 4096 4096 NT_STATUS_OK
ReadX 11898 2720 4096 4096 NT_STATUS_OK
ReadX 11898 2736 4096 4096 NT_STATUS_OK
ReadX 11898 628 4096 4096 NT_STATUS_OK
ReadX 11898 2704 4096 4096 NT_STATUS_OK
ReadX 11898 1556 4096 4096 NT_STATUS_OK
ReadX 11898 576 4096 4096 NT_STATUS_OK
ReadX 11898 3168 1536 1536 NT_STATUS_OK
ReadX 11898 832 4096 4096 NT_STATUS_OK
ReadX 11898 1088 4096 4096 NT_STATUS_OK
ReadX 11898 1344 4096 4096 NT_STATUS_OK
ReadX 11898 1600 4096 4096 NT_STATUS_OK
ReadX 11898 1856 4096 4096 NT_STATUS_OK
ReadX 11898 2112 4096 4096 NT_STATUS_OK
ReadX 11898 1892 4096 4096 NT_STATUS_OK
ReadX 11898 820 4096 4096 NT_STATUS_OK
ReadX 11898 788 4096 4096 NT_STATUS_OK
ReadX 11898 1604 4096 4096 NT_STATUS_OK
ReadX 11898 3648 4096 4096 NT_STATUS_OK
ReadX 11898 2608 4096 4096 NT_STATUS_OK
ReadX 11898 548 4096 4096 NT_STATUS_OK
ReadX 11898 740 4096 4096 NT_STATUS_OK
ReadX 11898 1344 4096 4096 NT_STATUS_OK
ReadX 11898 3392 4096 4096 NT_STATUS_OK
ReadX 11898 3904 4096 4096 NT_STATUS_OK
ReadX 11898 644 4096 4096 NT_STATUS_OK
ReadX 11898 676 4096 4096 NT_STATUS_OK
ReadX 11898 2688 4096 4096 NT_STATUS_OK
ReadX 11898 320 4096 4096 NT_STATUS_OK
ReadX 11898 900 4096 4096 NT_STATUS_OK
ReadX 11898 1908 4096 4096 NT_STATUS_OK
ReadX 11898 852 4096 4096 NT_STATUS_OK
ReadX 11898 724 4096 4096 NT_STATUS_OK
ReadX 11898 2292 4096 4096 NT_STATUS_OK
ReadX 11898 612 4096 4096 NT_STATUS_OK
ReadX 11898 388 4096 4096 NT_STATUS_OK
ReadX 11898 2368 4096 4096 NT_STATUS_OK
ReadX 11898 2624 4096 4096 NT_STATUS_OK
ReadX 11898 500 4096 4096 NT_STATUS_OK
ReadX 11898 356 4096 4096 NT_STATUS_OK
ReadX 11898 1024 4096 4096 NT_STATUS_OK
ReadX 11898 576 4096 4096 NT_STATUS_OK
ReadX 11898 340 4096 4096 NT_STATUS_OK
ReadX 11898 420 4096 4096 NT_STATUS_OK
ReadX 11898 1600 4096 4096 NT_STATUS_OK
ReadX 11898 404 4096 4096 NT_STATUS_OK
ReadX 11898 1428 4096 4096 NT_STATUS_OK
ReadX 11898 2656 4096 4096 NT_STATUS_OK
ReadX 11898 2624 4096 4096 NT_STATUS_OK
ReadX 11898 452 4096 4096 NT_STATUS_OK
ReadX 11898 692 4096 4096 NT_STATUS_OK
ReadX 11898 564 4096 4096 NT_STATUS_OK
ReadX 11898 372 4096 4096 NT_STATUS_OK
ReadX 11898 468 4096 4096 NT_STATUS_OK
ReadX 11898 484 4096 4096 NT_STATUS_OK
ReadX 11898 1088 4096 4096 NT_STATUS_OK
ReadX 11898 1924 4096 4096 NT_STATUS_OK
ReadX 11898 2768 4096 4096 NT_STATUS_OK
ReadX 11898 832 4096 4096 NT_STATUS_OK
ReadX 11898 836 4096 4096 NT_STATUS_OK
ReadX 11898 1856 4096 4096 NT_STATUS_OK
ReadX 11898 2640 4096 4096 NT_STATUS_OK
ReadX 11898 436 4096 4096 NT_STATUS_OK
ReadX 11898 1828 4096 4096 NT_STATUS_OK
ReadX 11898 804 4096 4096 NT_STATUS_OK
ReadX 11898 1860 4096 4096 NT_STATUS_OK
ReadX 11898 1812 4096 4096 NT_STATUS_OK
ReadX 11898 756 4096 4096 NT_STATUS_OK
ReadX 11898 1636 4096 4096 NT_STATUS_OK
ReadX 11898 772 4096 4096 NT_STATUS_OK
ReadX 11898 2036 4096 4096 NT_STATUS_OK
ReadX 11898 1220 4096 4096 NT_STATUS_OK
ReadX 11898 1652 4096 4096 NT_STATUS_OK
ReadX 11898 2588 4096 4096 NT_STATUS_OK
ReadX 11898 916 4096 4096 NT_STATUS_OK
ReadX 11898 260 4096 4096 NT_STATUS_OK
ReadX 11898 932 4096 4096 NT_STATUS_OK
ReadX 11898 2624 4096 4096 NT_STATUS_OK
ReadX 11898 308 4096 4096 NT_STATUS_OK
ReadX 11898 292 4096 4096 NT_STATUS_OK
ReadX 11898 1140 4096 4096 NT_STATUS_OK
ReadX 11898 276 4096 4096 NT_STATUS_OK
ReadX 11898 2020 4096 4096 NT_STATUS_OK
ReadX 11898 2880 4096 4096 NT_STATUS_OK
ReadX 11898 516 4096 4096 NT_STATUS_OK
ReadX 11898 1844 4096 4096 NT_STATUS_OK
ReadX 11898 1124 4096 4096 NT_STATUS_OK
ReadX 11898 3136 4096 4096 NT_STATUS_OK
ReadX 11898 324 4096 4096 NT_STATUS_OK
ReadX 11898 1156 4096 4096 NT_STATUS_OK
ReadX 11898 1172 4096 4096 NT_STATUS_OK
ReadX 11898 2112 4096 4096 NT_STATUS_OK
ReadX 11898 2368 4096 4096 NT_STATUS_OK
ReadX 11898 964 4096 4096 NT_STATUS_OK
ReadX 11898 980 4096 4096 NT_STATUS_OK
ReadX 11898 1012 4096 4096 NT_STATUS_OK
ReadX 11898 532 4096 4096 NT_STATUS_OK
ReadX 11898 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11898 1620 4096 4096 NT_STATUS_OK
ReadX 11898 1604 4096 4096 NT_STATUS_OK
ReadX 11898 2116 4096 4096 NT_STATUS_OK
ReadX 11898 2132 4096 4096 NT_STATUS_OK
ReadX 11898 2148 4096 4096 NT_STATUS_OK
ReadX 11898 2276 4096 4096 NT_STATUS_OK
ReadX 11898 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11920 NT_STATUS_OK
Close 11920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11923 NT_STATUS_OK
QUERY_FILE_INFORMATION 11878 1004 NT_STATUS_OK
Close 11878 NT_STATUS_OK
WriteX 11923 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11923 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11880 1004 NT_STATUS_OK
Close 11880 NT_STATUS_OK
WriteX 11923 0 65536 65536 NT_STATUS_OK
WriteX 11923 65536 64850 64850 NT_STATUS_OK
Close 11923 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11925 NT_STATUS_OK
WriteX 11925 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11925 258 NT_STATUS_OK
ReadX 11898 2068 4096 4096 NT_STATUS_OK
ReadX 11898 1588 4096 4096 NT_STATUS_OK
ReadX 11898 1572 4096 4096 NT_STATUS_OK
WriteX 11925 0 18630 18630 NT_STATUS_OK
Flush 11925 NT_STATUS_OK
Close 11925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11927 NT_STATUS_OK
Close 11927 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11929 NT_STATUS_OK
ReadX 11929 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11898 612 4096 4096 NT_STATUS_OK
ReadX 11898 564 4096 4096 NT_STATUS_OK
ReadX 11898 1876 4096 4096 NT_STATUS_OK
ReadX 11898 628 4096 4096 NT_STATUS_OK
ReadX 11898 740 4096 4096 NT_STATUS_OK
ReadX 11898 724 4096 4096 NT_STATUS_OK
ReadX 11898 644 4096 4096 NT_STATUS_OK
ReadX 11898 2324 4096 4096 NT_STATUS_OK
ReadX 11898 660 4096 4096 NT_STATUS_OK
ReadX 11898 852 4096 4096 NT_STATUS_OK
ReadX 11898 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11898 2368 4096 4096 NT_STATUS_OK
ReadX 11898 1024 4096 4096 NT_STATUS_OK
ReadX 11898 320 4096 4096 NT_STATUS_OK
ReadX 11898 580 4096 4096 NT_STATUS_OK
ReadX 11898 3136 512 512 NT_STATUS_OK
ReadX 11898 2880 4096 4096 NT_STATUS_OK
Close 11898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11930 NT_STATUS_OK
ReadX 11930 61440 4096 4096 NT_STATUS_OK
ReadX 11930 126976 4096 4096 NT_STATUS_OK
WriteX 11930 0 65536 65536 NT_STATUS_OK
WriteX 11930 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11931 NT_STATUS_OK
ReadX 11931 61440 4096 4096 NT_STATUS_OK
ReadX 11931 126976 4096 4096 NT_STATUS_OK
ReadX 11931 192512 4096 4096 NT_STATUS_OK
ReadX 11931 258048 4096 4096 NT_STATUS_OK
WriteX 11931 0 65536 65536 NT_STATUS_OK
WriteX 11931 65536 65536 65536 NT_STATUS_OK
WriteX 11931 131072 65536 65536 NT_STATUS_OK
WriteX 11931 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11932 NT_STATUS_OK
ReadX 11932 61440 4096 4096 NT_STATUS_OK
ReadX 11932 126976 4096 4096 NT_STATUS_OK
ReadX 11932 192512 4096 4096 NT_STATUS_OK
ReadX 11932 258048 4096 4096 NT_STATUS_OK
ReadX 11932 323584 4096 4096 NT_STATUS_OK
ReadX 11932 389120 4096 4096 NT_STATUS_OK
ReadX 11932 454656 4096 4096 NT_STATUS_OK
ReadX 11932 520192 4096 4096 NT_STATUS_OK
WriteX 11932 0 65536 65536 NT_STATUS_OK
WriteX 11932 65536 65536 65536 NT_STATUS_OK
WriteX 11932 131072 65536 65536 NT_STATUS_OK
WriteX 11932 196608 65536 65536 NT_STATUS_OK
WriteX 11932 262144 65536 65536 NT_STATUS_OK
WriteX 11932 327680 65536 65536 NT_STATUS_OK
WriteX 11932 393216 65536 65536 NT_STATUS_OK
WriteX 11932 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11933 NT_STATUS_OK
ReadX 11933 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11934 NT_STATUS_OK
Close 11934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11935 NT_STATUS_OK
WriteX 11935 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11935 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11933 0 8192 8192 NT_STATUS_OK
Flush 11933 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11933 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11933 0 8192 8192 NT_STATUS_OK
Flush 11933 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11933 0 8192 8192 NT_STATUS_OK
Flush 11933 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11933 0 8192 8192 NT_STATUS_OK
Flush 11933 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11937 NT_STATUS_OK
Close 11937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11929 NT_STATUS_OK
Close 11897 NT_STATUS_OK
Close 11930 NT_STATUS_OK
Close 11931 NT_STATUS_OK
Close 11932 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11940 NT_STATUS_OK
WriteX 11940 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11940 258 NT_STATUS_OK
WriteX 11940 0 62591 62591 NT_STATUS_OK
Close 11940 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11942 NT_STATUS_OK
Close 11942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11945 NT_STATUS_OK
WriteX 11945 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11945 258 NT_STATUS_OK
WriteX 11945 0 10845 10845 NT_STATUS_OK
Close 11945 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11947 NT_STATUS_OK
Close 11947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11950 NT_STATUS_OK
WriteX 11950 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11950 258 NT_STATUS_OK
WriteX 11950 0 30118 30118 NT_STATUS_OK
Close 11950 NT_STATUS_OK
WriteX 11933 0 4096 4096 NT_STATUS_OK
WriteX 11935 0 64 64 NT_STATUS_OK
Close 11935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11933 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11952 NT_STATUS_OK
ReadX 11952 0 61440 61440 NT_STATUS_OK
ReadX 11952 61440 4096 4096 NT_STATUS_OK
ReadX 11952 65536 61440 61440 NT_STATUS_OK
ReadX 11952 126976 4096 4096 NT_STATUS_OK
ReadX 11952 131072 61440 61440 NT_STATUS_OK
ReadX 11952 192512 4096 4096 NT_STATUS_OK
ReadX 11952 196608 61440 61440 NT_STATUS_OK
ReadX 11952 258048 4096 4096 NT_STATUS_OK
ReadX 11952 262144 61440 61440 NT_STATUS_OK
ReadX 11952 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11953 NT_STATUS_OK
ReadX 11953 0 61440 61440 NT_STATUS_OK
ReadX 11953 61440 4096 4096 NT_STATUS_OK
ReadX 11953 65536 61440 61440 NT_STATUS_OK
ReadX 11953 126976 4096 4096 NT_STATUS_OK
ReadX 11953 131072 61440 61440 NT_STATUS_OK
ReadX 11953 192512 4096 4096 NT_STATUS_OK
ReadX 11953 196608 61440 61440 NT_STATUS_OK
ReadX 11953 258048 4096 4096 NT_STATUS_OK
ReadX 11953 262144 61440 61440 NT_STATUS_OK
ReadX 11953 323584 4096 4096 NT_STATUS_OK
ReadX 11953 327680 61440 61440 NT_STATUS_OK
ReadX 11953 389120 4096 4096 NT_STATUS_OK
ReadX 11953 393216 61440 61440 NT_STATUS_OK
ReadX 11953 454656 4096 4096 NT_STATUS_OK
ReadX 11953 458752 61440 61440 NT_STATUS_OK
ReadX 11953 520192 4096 4096 NT_STATUS_OK
ReadX 11953 524288 61440 61440 NT_STATUS_OK
ReadX 11953 585728 4096 4096 NT_STATUS_OK
ReadX 11953 589824 61440 61440 NT_STATUS_OK
ReadX 11953 651264 4096 4096 NT_STATUS_OK
ReadX 11953 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11954 NT_STATUS_OK
ReadX 11954 0 61440 61440 NT_STATUS_OK
ReadX 11954 61440 4096 4096 NT_STATUS_OK
ReadX 11954 65536 61440 61440 NT_STATUS_OK
ReadX 11954 126976 4096 4096 NT_STATUS_OK
ReadX 11954 131072 61440 61440 NT_STATUS_OK
ReadX 11954 192512 4096 4096 NT_STATUS_OK
ReadX 11954 196608 61440 61440 NT_STATUS_OK
ReadX 11954 258048 4096 4096 NT_STATUS_OK
ReadX 11954 262144 61440 61440 NT_STATUS_OK
ReadX 11954 323584 4096 4096 NT_STATUS_OK
ReadX 11954 327680 61440 61440 NT_STATUS_OK
ReadX 11954 389120 4096 4096 NT_STATUS_OK
ReadX 11954 393216 61440 61440 NT_STATUS_OK
ReadX 11954 454656 4096 4096 NT_STATUS_OK
ReadX 11954 458752 61440 61440 NT_STATUS_OK
ReadX 11954 520192 4096 4096 NT_STATUS_OK
ReadX 11954 524288 61440 61440 NT_STATUS_OK
ReadX 11954 585728 4096 4096 NT_STATUS_OK
ReadX 11954 589824 61440 61440 NT_STATUS_OK
ReadX 11954 651264 4096 4096 NT_STATUS_OK
ReadX 11954 655360 61440 61440 NT_STATUS_OK
ReadX 11954 716800 4096 4096 NT_STATUS_OK
ReadX 11954 720896 61440 61440 NT_STATUS_OK
ReadX 11954 782336 4096 4096 NT_STATUS_OK
ReadX 11954 786432 61440 61440 NT_STATUS_OK
ReadX 11954 847872 4096 4096 NT_STATUS_OK
ReadX 11954 851968 61440 61440 NT_STATUS_OK
ReadX 11954 913408 4096 4096 NT_STATUS_OK
ReadX 11954 917504 61440 61440 NT_STATUS_OK
ReadX 11954 978944 4096 4096 NT_STATUS_OK
ReadX 11954 983040 61440 61440 NT_STATUS_OK
ReadX 11954 1044480 4096 4096 NT_STATUS_OK
ReadX 11954 1048576 61440 61440 NT_STATUS_OK
ReadX 11954 1110016 4096 4096 NT_STATUS_OK
ReadX 11954 1114112 61440 61440 NT_STATUS_OK
ReadX 11954 1175552 4096 4096 NT_STATUS_OK
ReadX 11954 1179648 61440 61440 NT_STATUS_OK
ReadX 11954 1241088 4096 4096 NT_STATUS_OK
ReadX 11954 1245184 61440 61440 NT_STATUS_OK
ReadX 11954 1306624 4096 4096 NT_STATUS_OK
ReadX 11954 1310720 61440 61440 NT_STATUS_OK
ReadX 11954 1372160 4096 4096 NT_STATUS_OK
ReadX 11954 1376256 61440 61440 NT_STATUS_OK
ReadX 11954 1437696 4096 4096 NT_STATUS_OK
ReadX 11954 1441792 61440 61440 NT_STATUS_OK
ReadX 11954 1503232 4096 4096 NT_STATUS_OK
ReadX 11954 1507328 61440 61440 NT_STATUS_OK
ReadX 11954 1568768 4096 4096 NT_STATUS_OK
ReadX 11954 1572864 61440 61440 NT_STATUS_OK
ReadX 11954 1634304 4096 4096 NT_STATUS_OK
ReadX 11954 1638400 61440 61440 NT_STATUS_OK
ReadX 11954 1699840 4096 4096 NT_STATUS_OK
ReadX 11954 1703936 61440 61440 NT_STATUS_OK
ReadX 11954 1765376 4096 4096 NT_STATUS_OK
ReadX 11954 1769472 61440 61440 NT_STATUS_OK
ReadX 11954 1830912 4096 4096 NT_STATUS_OK
ReadX 11954 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11955 NT_STATUS_OK
Close 11955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11952 NT_STATUS_OK
Close 11953 NT_STATUS_OK
Close 11954 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11957 NT_STATUS_OK
ReadX 11957 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11958 NT_STATUS_OK
ReadX 11958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11959 NT_STATUS_OK
ReadX 11959 0 4096 4096 NT_STATUS_OK
ReadX 11959 4096 4096 4096 NT_STATUS_OK
ReadX 11959 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11960 NT_STATUS_OK
Close 11960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11957 NT_STATUS_OK
Close 11958 NT_STATUS_OK
Close 11959 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11962 NT_STATUS_OK
ReadX 11962 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11963 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11963 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11964 NT_STATUS_OK
Close 11964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Close 11963 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11966 NT_STATUS_OK
ReadX 11966 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11967 NT_STATUS_OK
ReadX 11967 0 8192 8192 NT_STATUS_OK
ReadX 11967 8192 8192 8192 NT_STATUS_OK
ReadX 11967 16384 8192 8192 NT_STATUS_OK
ReadX 11967 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11969 NT_STATUS_OK
Close 11969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11967 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11972 NT_STATUS_OK
WriteX 11972 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11972 258 NT_STATUS_OK
WriteX 11972 0 10438 10438 NT_STATUS_OK
Close 11972 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11973 NT_STATUS_OK
Close 11973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11974 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11975 NT_STATUS_OK
Close 11975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11976 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11977 NT_STATUS_OK
Close 11977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11978 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11979 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11980 NT_STATUS_OK
Close 11980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11981 NT_STATUS_OK
ReadX 11981 0 4096 4096 NT_STATUS_OK
ReadX 11981 4096 4096 4096 NT_STATUS_OK
ReadX 11981 8192 4096 4096 NT_STATUS_OK
ReadX 11981 12288 8192 8192 NT_STATUS_OK
ReadX 11981 20480 8192 8192 NT_STATUS_OK
ReadX 11981 28672 8192 8192 NT_STATUS_OK
ReadX 11981 36864 8192 8192 NT_STATUS_OK
ReadX 11981 45056 8192 8192 NT_STATUS_OK
ReadX 11981 53248 8192 8192 NT_STATUS_OK
ReadX 11981 61440 8192 8192 NT_STATUS_OK
ReadX 11981 69632 8192 8192 NT_STATUS_OK
ReadX 11981 77824 8192 8192 NT_STATUS_OK
ReadX 11981 86016 8192 8192 NT_STATUS_OK
ReadX 11981 94208 8192 8192 NT_STATUS_OK
ReadX 11981 102400 8192 8192 NT_STATUS_OK
ReadX 11981 110592 8192 8192 NT_STATUS_OK
ReadX 11981 118784 8192 8192 NT_STATUS_OK
ReadX 11981 126976 8192 8192 NT_STATUS_OK
ReadX 11981 135168 8192 8192 NT_STATUS_OK
ReadX 11981 143360 8192 8192 NT_STATUS_OK
ReadX 11981 151552 8192 8192 NT_STATUS_OK
ReadX 11981 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11981 NT_STATUS_OK
Close 11974 NT_STATUS_OK
Close 11976 NT_STATUS_OK
Close 11978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11983 NT_STATUS_OK
Close 11983 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11986 NT_STATUS_OK
WriteX 11986 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11986 258 NT_STATUS_OK
WriteX 11986 0 28489 28489 NT_STATUS_OK
Close 11986 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11987 NT_STATUS_OK
Close 11987 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11989 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11989 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11990 NT_STATUS_OK
Close 11990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11989 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11992 NT_STATUS_OK
ReadX 11992 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11993 NT_STATUS_OK
ReadX 11993 0 8192 8192 NT_STATUS_OK
ReadX 11993 8192 8192 8192 NT_STATUS_OK
ReadX 11993 16384 8192 8192 NT_STATUS_OK
ReadX 11993 24576 8192 8192 NT_STATUS_OK
ReadX 11993 32768 16384 16384 NT_STATUS_OK
ReadX 11993 49152 8192 8192 NT_STATUS_OK
ReadX 11993 57344 8192 8192 NT_STATUS_OK
ReadX 11993 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11995 NT_STATUS_OK
Close 11995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11993 NT_STATUS_OK
Close 11992 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11998 NT_STATUS_OK
WriteX 11998 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11998 258 NT_STATUS_OK
WriteX 11998 0 29253 29253 NT_STATUS_OK
Close 11998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11999 NT_STATUS_OK
Close 11999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12000 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12002 NT_STATUS_OK
Close 12002 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12005 NT_STATUS_OK
WriteX 12005 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12005 258 NT_STATUS_OK
WriteX 12005 0 30183 30183 NT_STATUS_OK
Close 12005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12006 NT_STATUS_OK
Close 12006 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12008 NT_STATUS_OK
WriteX 12008 0 510 510 NT_STATUS_OK
WriteX 12008 510 512 512 NT_STATUS_OK
WriteX 12008 1022 510 510 NT_STATUS_OK
WriteX 12008 1532 510 510 NT_STATUS_OK
WriteX 12008 2042 168 168 NT_STATUS_OK
Close 12008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12009 NT_STATUS_OK
Close 12009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12011 NT_STATUS_OK
ReadX 12011 0 4096 4096 NT_STATUS_OK
WriteX 12011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12012 NT_STATUS_OK
ReadX 12012 61440 4096 4096 NT_STATUS_OK
ReadX 12012 126976 4096 4096 NT_STATUS_OK
WriteX 12012 0 65536 65536 NT_STATUS_OK
WriteX 12012 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12013 NT_STATUS_OK
ReadX 12013 61440 4096 4096 NT_STATUS_OK
ReadX 12013 126976 4096 4096 NT_STATUS_OK
ReadX 12013 192512 4096 4096 NT_STATUS_OK
ReadX 12013 258048 4096 4096 NT_STATUS_OK
WriteX 12013 0 65536 65536 NT_STATUS_OK
WriteX 12013 65536 65536 65536 NT_STATUS_OK
WriteX 12013 131072 65536 65536 NT_STATUS_OK
WriteX 12013 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12014 NT_STATUS_OK
ReadX 12014 61440 4096 4096 NT_STATUS_OK
ReadX 12014 126976 4096 4096 NT_STATUS_OK
ReadX 12014 192512 4096 4096 NT_STATUS_OK
ReadX 12014 258048 4096 4096 NT_STATUS_OK
ReadX 12014 323584 4096 4096 NT_STATUS_OK
ReadX 12014 389120 4096 4096 NT_STATUS_OK
ReadX 12014 454656 4096 4096 NT_STATUS_OK
ReadX 12014 520192 4096 4096 NT_STATUS_OK
WriteX 12014 0 65536 65536 NT_STATUS_OK
WriteX 12014 65536 65536 65536 NT_STATUS_OK
WriteX 12014 131072 65536 65536 NT_STATUS_OK
WriteX 12014 196608 65536 65536 NT_STATUS_OK
WriteX 12014 262144 65536 65536 NT_STATUS_OK
WriteX 12014 327680 65536 65536 NT_STATUS_OK
WriteX 12014 393216 65536 65536 NT_STATUS_OK
WriteX 12014 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12015 NT_STATUS_OK
Close 12015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12011 NT_STATUS_OK
Close 12012 NT_STATUS_OK
Close 12013 NT_STATUS_OK
Close 12014 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12017 NT_STATUS_OK
Close 12017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12021 NT_STATUS_OK
Close 12021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12024 NT_STATUS_OK
Close 12024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12026 NT_STATUS_OK
Close 12026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12030 NT_STATUS_OK
Close 12030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12033 NT_STATUS_OK
Close 12033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12035 NT_STATUS_OK
Close 12035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12039 NT_STATUS_OK
Close 12039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12044 NT_STATUS_OK
Close 12044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12049 NT_STATUS_OK
Close 12049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12054 NT_STATUS_OK
Close 12054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12059 NT_STATUS_OK
Close 12059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12064 NT_STATUS_OK
Close 12064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12069 NT_STATUS_OK
Close 12069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12074 NT_STATUS_OK
Close 12074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12077 NT_STATUS_OK
Close 12077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12080 NT_STATUS_OK
Close 12080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12083 NT_STATUS_OK
WriteX 12083 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12083 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12083 0 65536 65536 NT_STATUS_OK
WriteX 12083 65536 65536 65536 NT_STATUS_OK
WriteX 12083 131072 65536 65536 NT_STATUS_OK
WriteX 12083 196608 65536 65536 NT_STATUS_OK
WriteX 12083 262144 26634 26634 NT_STATUS_OK
Close 12083 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12088 NT_STATUS_OK
Close 12088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12089 NT_STATUS_OK
Close 12089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12090 NT_STATUS_OK
ReadX 12090 0 4096 4096 NT_STATUS_OK
Close 12090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12091 NT_STATUS_OK
ReadX 12091 0 4096 4096 NT_STATUS_OK
ReadX 12091 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12092 NT_STATUS_OK
Close 12092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12091 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12096 NT_STATUS_OK
Close 12096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12099 NT_STATUS_OK
Close 12099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12101 NT_STATUS_OK
Close 12101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12105 NT_STATUS_OK
Close 12105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12108 NT_STATUS_OK
Close 12108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12110 NT_STATUS_OK
Close 12110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12114 NT_STATUS_OK
Close 12114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12119 NT_STATUS_OK
Close 12119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12124 NT_STATUS_OK
Close 12124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12129 NT_STATUS_OK
Close 12129 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12134 NT_STATUS_OK
Close 12134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12139 NT_STATUS_OK
Close 12139 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12143 NT_STATUS_OK
Close 12143 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12148 NT_STATUS_OK
Close 12148 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12153 NT_STATUS_OK
Close 12153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12156 NT_STATUS_OK
Close 12156 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12158 NT_STATUS_OK
Close 12158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12168 NT_STATUS_OK
Close 12168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12169 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12170 NT_STATUS_OK
ReadX 12170 0 4096 4096 NT_STATUS_OK
Close 12170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12171 NT_STATUS_OK
ReadX 12171 0 4096 4096 NT_STATUS_OK
Close 12171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12172 NT_STATUS_OK
ReadX 12172 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12182 NT_STATUS_OK
Close 12182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12183 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12183 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12184 NT_STATUS_OK
ReadX 12184 0 4096 4096 NT_STATUS_OK
Close 12184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12185 NT_STATUS_OK
ReadX 12185 0 4096 4096 NT_STATUS_OK
Close 12185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12186 NT_STATUS_OK
ReadX 12186 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12172 NT_STATUS_OK
Close 12186 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12215 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12215 0 4096 4096 NT_STATUS_OK
Close 12215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12216 NT_STATUS_OK
ReadX 12216 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12217 NT_STATUS_OK
ReadX 12217 0 4096 4096 NT_STATUS_OK
ReadX 12217 4096 4096 4096 NT_STATUS_OK
ReadX 12217 8192 4096 4096 NT_STATUS_OK
ReadX 12217 12288 4096 4096 NT_STATUS_OK
ReadX 12217 16384 4096 4096 NT_STATUS_OK
ReadX 12217 20480 4096 4096 NT_STATUS_OK
ReadX 12217 24576 4096 4096 NT_STATUS_OK
ReadX 12217 28672 4096 4096 NT_STATUS_OK
ReadX 12217 32768 4096 4096 NT_STATUS_OK
ReadX 12217 36864 4096 4096 NT_STATUS_OK
ReadX 12217 40960 4096 4096 NT_STATUS_OK
ReadX 12217 45056 4096 4096 NT_STATUS_OK
ReadX 12217 49152 4096 4096 NT_STATUS_OK
ReadX 12217 53248 4096 4096 NT_STATUS_OK
ReadX 12217 57344 4096 4096 NT_STATUS_OK
ReadX 12217 61440 4096 4096 NT_STATUS_OK
ReadX 12217 65536 4096 4096 NT_STATUS_OK
ReadX 12217 69632 4096 4096 NT_STATUS_OK
ReadX 12217 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12217 1004 NT_STATUS_OK
WriteX 12217 0 4096 4096 NT_STATUS_OK
Close 12217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12218 NT_STATUS_OK
SET_FILE_INFORMATION 12218 1004 NT_STATUS_OK
Close 12218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12219 NT_STATUS_OK
ReadX 12219 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12220 NT_STATUS_OK
Close 12220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12223 NT_STATUS_OK
WriteX 12223 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12223 258 NT_STATUS_OK
WriteX 12223 0 65536 65536 NT_STATUS_OK
WriteX 12223 65536 19979 19979 NT_STATUS_OK
Close 12223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12224 NT_STATUS_OK
ReadX 12224 0 4096 4096 NT_STATUS_OK
WriteX 12224 0 4096 4096 NT_STATUS_OK
Flush 12224 NT_STATUS_OK
WriteX 12224 0 4096 4096 NT_STATUS_OK
Flush 12224 NT_STATUS_OK
QUERY_FILE_INFORMATION 12224 1004 NT_STATUS_OK
WriteX 12224 0 4096 4096 NT_STATUS_OK
Flush 12224 NT_STATUS_OK
WriteX 12224 0 4096 4096 NT_STATUS_OK
Flush 12224 NT_STATUS_OK
WriteX 12224 0 4096 4096 NT_STATUS_OK
Flush 12224 NT_STATUS_OK
SET_FILE_INFORMATION 12224 1004 NT_STATUS_OK
WriteX 12224 0 4096 4096 NT_STATUS_OK
Flush 12224 NT_STATUS_OK
Close 12224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12225 NT_STATUS_OK
ReadX 12225 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12226 NT_STATUS_OK
ReadX 12226 0 4096 4096 NT_STATUS_OK
Close 12225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12227 NT_STATUS_OK
ReadX 12227 0 4096 4096 NT_STATUS_OK
Close 12227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12228 NT_STATUS_OK
Close 12226 NT_STATUS_OK
ReadX 12228 0 4096 4096 NT_STATUS_OK
Close 12219 NT_STATUS_OK
Close 12228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12229 NT_STATUS_OK
ReadX 12229 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12229 1004 NT_STATUS_OK
WriteX 12229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12230 NT_STATUS_OK
Close 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12229 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12232 NT_STATUS_OK
Close 12232 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12235 NT_STATUS_OK
WriteX 12235 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12235 258 NT_STATUS_OK
WriteX 12235 0 65536 65536 NT_STATUS_OK
WriteX 12235 65536 17654 17654 NT_STATUS_OK
Close 12235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12236 NT_STATUS_OK
ReadX 12236 0 4096 4096 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
QUERY_FILE_INFORMATION 12236 1004 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
SET_FILE_INFORMATION 12236 1004 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
Close 12236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12237 NT_STATUS_OK
SET_FILE_INFORMATION 12237 1004 NT_STATUS_OK
Close 12237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12238 NT_STATUS_OK
ReadX 12238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12239 NT_STATUS_OK
Close 12239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12241 NT_STATUS_OK
ReadX 12241 0 4096 4096 NT_STATUS_OK
ReadX 12241 4096 4096 4096 NT_STATUS_OK
ReadX 12241 8192 4096 4096 NT_STATUS_OK
ReadX 12241 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12241 16384 4096 4096 NT_STATUS_OK
ReadX 12241 20480 4096 4096 NT_STATUS_OK
ReadX 12241 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12242 NT_STATUS_OK
ReadX 12242 0 4096 4096 NT_STATUS_OK
Close 12242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12243 NT_STATUS_OK
ReadX 12243 0 4096 4096 NT_STATUS_OK
Close 12243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12244 NT_STATUS_OK
ReadX 12244 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12244 1004 NT_STATUS_OK
WriteX 12244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12245 NT_STATUS_OK
Close 12245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12244 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12247 NT_STATUS_OK
Close 12247 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12250 NT_STATUS_OK
WriteX 12250 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12250 258 NT_STATUS_OK
WriteX 12250 0 65536 65536 NT_STATUS_OK
WriteX 12250 65536 19490 19490 NT_STATUS_OK
Close 12250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12251 NT_STATUS_OK
ReadX 12251 0 4096 4096 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
QUERY_FILE_INFORMATION 12251 1004 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
SET_FILE_INFORMATION 12251 1004 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
Close 12251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12252 NT_STATUS_OK
SET_FILE_INFORMATION 12252 1004 NT_STATUS_OK
Close 12252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12253 NT_STATUS_OK
ReadX 12253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12254 NT_STATUS_OK
Close 12254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12256 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12256 0 4096 4096 NT_STATUS_OK
Close 12256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12257 NT_STATUS_OK
ReadX 12257 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12258 NT_STATUS_OK
ReadX 12258 0 4096 4096 NT_STATUS_OK
ReadX 12258 4096 4096 4096 NT_STATUS_OK
ReadX 12258 8192 4096 4096 NT_STATUS_OK
ReadX 12258 12288 4096 4096 NT_STATUS_OK
ReadX 12258 16384 4096 4096 NT_STATUS_OK
ReadX 12258 20480 4096 4096 NT_STATUS_OK
ReadX 12258 24576 4096 4096 NT_STATUS_OK
ReadX 12258 28672 4096 4096 NT_STATUS_OK
ReadX 12258 32768 4096 4096 NT_STATUS_OK
ReadX 12258 36864 4096 4096 NT_STATUS_OK
ReadX 12258 40960 4096 4096 NT_STATUS_OK
ReadX 12258 45056 4096 4096 NT_STATUS_OK
ReadX 12258 49152 4096 4096 NT_STATUS_OK
ReadX 12258 53248 4096 4096 NT_STATUS_OK
ReadX 12258 57344 4096 4096 NT_STATUS_OK
ReadX 12258 61440 4096 4096 NT_STATUS_OK
ReadX 12258 65536 4096 4096 NT_STATUS_OK
ReadX 12258 69632 4096 4096 NT_STATUS_OK
ReadX 12258 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12258 1004 NT_STATUS_OK
WriteX 12258 0 4096 4096 NT_STATUS_OK
Close 12258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12259 NT_STATUS_OK
SET_FILE_INFORMATION 12259 1004 NT_STATUS_OK
Close 12259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12260 NT_STATUS_OK
ReadX 12260 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12261 NT_STATUS_OK
Close 12261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12253 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12264 NT_STATUS_OK
WriteX 12264 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12264 258 NT_STATUS_OK
WriteX 12264 0 65536 65536 NT_STATUS_OK
WriteX 12264 65536 8866 8866 NT_STATUS_OK
Close 12264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12265 NT_STATUS_OK
ReadX 12265 0 4096 4096 NT_STATUS_OK
WriteX 12265 0 4096 4096 NT_STATUS_OK
Flush 12265 NT_STATUS_OK
SET_FILE_INFORMATION 12265 1004 NT_STATUS_OK
WriteX 12265 0 4096 4096 NT_STATUS_OK
Flush 12265 NT_STATUS_OK
Close 12265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12266 NT_STATUS_OK
ReadX 12266 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12267 NT_STATUS_OK
ReadX 12267 0 4096 4096 NT_STATUS_OK
Close 12267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12268 NT_STATUS_OK
ReadX 12268 0 4096 4096 NT_STATUS_OK
Close 12268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12269 NT_STATUS_OK
ReadX 12269 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12269 1004 NT_STATUS_OK
WriteX 12269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12270 NT_STATUS_OK
Close 12270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12269 NT_STATUS_OK
Close 12260 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12272 NT_STATUS_OK
Close 12272 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12275 NT_STATUS_OK
WriteX 12275 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12275 258 NT_STATUS_OK
WriteX 12275 0 65536 65536 NT_STATUS_OK
WriteX 12275 65536 9298 9298 NT_STATUS_OK
Close 12275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12276 NT_STATUS_OK
ReadX 12276 0 4096 4096 NT_STATUS_OK
WriteX 12276 0 4096 4096 NT_STATUS_OK
Flush 12276 NT_STATUS_OK
SET_FILE_INFORMATION 12276 1004 NT_STATUS_OK
WriteX 12276 0 4096 4096 NT_STATUS_OK
Flush 12276 NT_STATUS_OK
Close 12276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12277 NT_STATUS_OK
SET_FILE_INFORMATION 12277 1004 NT_STATUS_OK
Close 12277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12278 NT_STATUS_OK
ReadX 12278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12279 NT_STATUS_OK
Close 12279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12282 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12282 0 4096 4096 NT_STATUS_OK
Close 12282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12283 NT_STATUS_OK
ReadX 12283 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12283 4096 4096 4096 NT_STATUS_OK
ReadX 12283 8192 4096 4096 NT_STATUS_OK
ReadX 12283 12288 4096 4096 NT_STATUS_OK
ReadX 12283 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12284 NT_STATUS_OK
ReadX 12284 0 4096 4096 NT_STATUS_OK
Close 12284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12285 NT_STATUS_OK
ReadX 12285 0 4096 4096 NT_STATUS_OK
Close 12285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12286 NT_STATUS_OK
ReadX 12286 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12286 1004 NT_STATUS_OK
WriteX 12286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12287 NT_STATUS_OK
Close 12287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12283 NT_STATUS_OK
Close 12286 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12289 NT_STATUS_OK
Close 12289 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12292 NT_STATUS_OK
WriteX 12292 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12292 258 NT_STATUS_OK
WriteX 12292 0 65536 65536 NT_STATUS_OK
WriteX 12292 65536 11540 11540 NT_STATUS_OK
Close 12292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12293 NT_STATUS_OK
ReadX 12293 0 4096 4096 NT_STATUS_OK
WriteX 12293 0 4096 4096 NT_STATUS_OK
Flush 12293 NT_STATUS_OK
SET_FILE_INFORMATION 12293 1004 NT_STATUS_OK
WriteX 12293 0 4096 4096 NT_STATUS_OK
Flush 12293 NT_STATUS_OK
Close 12293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12294 NT_STATUS_OK
SET_FILE_INFORMATION 12294 1004 NT_STATUS_OK
Close 12294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12295 NT_STATUS_OK
ReadX 12295 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12296 NT_STATUS_OK
Close 12296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12298 NT_STATUS_OK
ReadX 12298 61440 4096 4096 NT_STATUS_OK
ReadX 12298 126976 4096 4096 NT_STATUS_OK
WriteX 12298 0 65536 65536 NT_STATUS_OK
WriteX 12298 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12299 NT_STATUS_OK
ReadX 12299 61440 4096 4096 NT_STATUS_OK
ReadX 12299 126976 4096 4096 NT_STATUS_OK
ReadX 12299 192512 4096 4096 NT_STATUS_OK
ReadX 12299 258048 4096 4096 NT_STATUS_OK
WriteX 12299 0 65536 65536 NT_STATUS_OK
WriteX 12299 65536 65536 65536 NT_STATUS_OK
WriteX 12299 131072 65536 65536 NT_STATUS_OK
WriteX 12299 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12300 NT_STATUS_OK
ReadX 12300 61440 4096 4096 NT_STATUS_OK
ReadX 12300 126976 4096 4096 NT_STATUS_OK
ReadX 12300 192512 4096 4096 NT_STATUS_OK
ReadX 12300 258048 4096 4096 NT_STATUS_OK
ReadX 12300 323584 4096 4096 NT_STATUS_OK
ReadX 12300 389120 4096 4096 NT_STATUS_OK
ReadX 12300 454656 4096 4096 NT_STATUS_OK
ReadX 12300 520192 4096 4096 NT_STATUS_OK
WriteX 12300 0 65536 65536 NT_STATUS_OK
WriteX 12300 65536 65536 65536 NT_STATUS_OK
WriteX 12300 131072 65536 65536 NT_STATUS_OK
WriteX 12300 196608 65536 65536 NT_STATUS_OK
WriteX 12300 262144 65536 65536 NT_STATUS_OK
WriteX 12300 327680 65536 65536 NT_STATUS_OK
WriteX 12300 393216 65536 65536 NT_STATUS_OK
WriteX 12300 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12301 NT_STATUS_OK
ReadX 12301 0 4096 4096 NT_STATUS_OK
ReadX 12301 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12302 NT_STATUS_OK
WriteX 12302 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12302 258 NT_STATUS_OK
WriteX 12302 0 53 53 NT_STATUS_OK
Close 12302 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12303 NT_STATUS_OK
Close 12303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12295 NT_STATUS_OK
Close 12241 NT_STATUS_OK
Close 12298 NT_STATUS_OK
Close 12299 NT_STATUS_OK
Close 12300 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12301 8192 4096 4096 NT_STATUS_OK
ReadX 12301 12288 4096 4096 NT_STATUS_OK
WriteX 12305 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12305 258 NT_STATUS_OK
ReadX 12301 16384 4096 4096 NT_STATUS_OK
ReadX 12301 20480 4096 4096 NT_STATUS_OK
WriteX 12305 0 15360 15360 NT_STATUS_OK
Close 12305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12306 NT_STATUS_OK
ReadX 12306 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12306 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12306 1004 NT_STATUS_OK
WriteX 12306 0 4096 4096 NT_STATUS_OK
Close 12306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12307 NT_STATUS_OK
Close 12307 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12309 NT_STATUS_OK
ReadX 12309 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12310 NT_STATUS_OK
Close 12310 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12309 4096 4096 4096 NT_STATUS_OK
ReadX 12309 8192 4096 4096 NT_STATUS_OK
ReadX 12309 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12312 NT_STATUS_OK
ReadX 12312 0 4096 4096 NT_STATUS_OK
ReadX 12312 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12313 NT_STATUS_OK
ReadX 12313 0 4096 4096 NT_STATUS_OK
ReadX 12313 4096 4096 4096 NT_STATUS_OK
ReadX 12313 8192 4096 4096 NT_STATUS_OK
Close 12312 NT_STATUS_OK
Close 12313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12314 NT_STATUS_OK
WriteX 12314 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12314 258 NT_STATUS_OK
WriteX 12314 0 15360 15360 NT_STATUS_OK
Close 12314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12315 NT_STATUS_OK
ReadX 12315 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12315 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12315 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12316 NT_STATUS_OK
Close 12316 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12318 NT_STATUS_OK
ReadX 12318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12319 NT_STATUS_OK
SET_FILE_INFORMATION 12319 1004 NT_STATUS_OK
Close 12319 NT_STATUS_OK
WriteX 12315 0 4096 4096 NT_STATUS_OK
Close 12315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12320 NT_STATUS_OK
Close 12320 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12322 NT_STATUS_OK
ReadX 12322 0 4096 4096 NT_STATUS_OK
ReadX 12322 4096 4096 4096 NT_STATUS_OK
ReadX 12322 8192 4096 4096 NT_STATUS_OK
ReadX 12322 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12322 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12322 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12323 NT_STATUS_OK
ReadX 12323 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12324 NT_STATUS_OK
WriteX 12324 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12324 258 NT_STATUS_OK
WriteX 12324 0 53 53 NT_STATUS_OK
Close 12324 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12325 NT_STATUS_OK
Close 12325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12323 4096 4096 4096 NT_STATUS_OK
ReadX 12323 8192 4096 4096 NT_STATUS_OK
ReadX 12323 12288 4096 4096 NT_STATUS_OK
WriteX 12327 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12327 258 NT_STATUS_OK
WriteX 12327 0 12006 12006 NT_STATUS_OK
Close 12327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12328 NT_STATUS_OK
ReadX 12328 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12328 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12328 1004 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Close 12328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12329 NT_STATUS_OK
Close 12329 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12331 NT_STATUS_OK
ReadX 12331 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12332 NT_STATUS_OK
Close 12332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
WriteX 12322 0 19054 19054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12331 4096 4096 4096 NT_STATUS_OK
ReadX 12331 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12334 NT_STATUS_OK
WriteX 12334 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12334 258 NT_STATUS_OK
WriteX 12334 0 11991 11991 NT_STATUS_OK
Close 12334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12335 NT_STATUS_OK
ReadX 12335 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12335 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12335 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12336 NT_STATUS_OK
Close 12336 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12338 NT_STATUS_OK
ReadX 12338 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12339 NT_STATUS_OK
SET_FILE_INFORMATION 12339 1004 NT_STATUS_OK
Close 12339 NT_STATUS_OK
WriteX 12335 0 4096 4096 NT_STATUS_OK
Close 12335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12340 NT_STATUS_OK
Close 12340 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12342 NT_STATUS_OK
ReadX 12342 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12343 NT_STATUS_OK
Close 12343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12342 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12342 1004 NT_STATUS_OK
ReadX 12342 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12342 1004 NT_STATUS_OK
WriteX 12342 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12342 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12342 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12342 1004 NT_STATUS_OK
Close 12318 NT_STATUS_OK
WriteX 12342 0 12288 12288 NT_STATUS_OK
Close 12338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12345 NT_STATUS_OK
Close 12345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12322 NT_STATUS_OK
Close 12342 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12347 NT_STATUS_OK
Close 12347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12349 NT_STATUS_OK
ReadX 12349 0 61440 61440 NT_STATUS_OK
ReadX 12349 61440 4096 4096 NT_STATUS_OK
ReadX 12349 65536 61440 61440 NT_STATUS_OK
ReadX 12349 126976 4096 4096 NT_STATUS_OK
ReadX 12349 131072 61440 61440 NT_STATUS_OK
ReadX 12349 192512 4096 4096 NT_STATUS_OK
ReadX 12349 196608 61440 61440 NT_STATUS_OK
ReadX 12349 258048 4096 4096 NT_STATUS_OK
ReadX 12349 262144 61440 61440 NT_STATUS_OK
ReadX 12349 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12350 NT_STATUS_OK
ReadX 12350 0 61440 61440 NT_STATUS_OK
ReadX 12350 61440 4096 4096 NT_STATUS_OK
ReadX 12350 65536 61440 61440 NT_STATUS_OK
ReadX 12350 126976 4096 4096 NT_STATUS_OK
ReadX 12350 131072 61440 61440 NT_STATUS_OK
ReadX 12350 192512 4096 4096 NT_STATUS_OK
ReadX 12350 196608 61440 61440 NT_STATUS_OK
ReadX 12350 258048 4096 4096 NT_STATUS_OK
ReadX 12350 262144 61440 61440 NT_STATUS_OK
ReadX 12350 323584 4096 4096 NT_STATUS_OK
ReadX 12350 327680 61440 61440 NT_STATUS_OK
ReadX 12350 389120 4096 4096 NT_STATUS_OK
ReadX 12350 393216 61440 61440 NT_STATUS_OK
ReadX 12350 454656 4096 4096 NT_STATUS_OK
ReadX 12350 458752 61440 61440 NT_STATUS_OK
ReadX 12350 520192 4096 4096 NT_STATUS_OK
ReadX 12350 524288 61440 61440 NT_STATUS_OK
ReadX 12350 585728 4096 4096 NT_STATUS_OK
ReadX 12350 589824 61440 61440 NT_STATUS_OK
ReadX 12350 651264 4096 4096 NT_STATUS_OK
ReadX 12350 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12351 NT_STATUS_OK
ReadX 12351 0 61440 61440 NT_STATUS_OK
ReadX 12351 61440 4096 4096 NT_STATUS_OK
ReadX 12351 65536 61440 61440 NT_STATUS_OK
ReadX 12351 126976 4096 4096 NT_STATUS_OK
ReadX 12351 131072 61440 61440 NT_STATUS_OK
ReadX 12351 192512 4096 4096 NT_STATUS_OK
ReadX 12351 196608 61440 61440 NT_STATUS_OK
ReadX 12351 258048 4096 4096 NT_STATUS_OK
ReadX 12351 262144 61440 61440 NT_STATUS_OK
ReadX 12351 323584 4096 4096 NT_STATUS_OK
ReadX 12351 327680 61440 61440 NT_STATUS_OK
ReadX 12351 389120 4096 4096 NT_STATUS_OK
ReadX 12351 393216 61440 61440 NT_STATUS_OK
ReadX 12351 454656 4096 4096 NT_STATUS_OK
ReadX 12351 458752 61440 61440 NT_STATUS_OK
ReadX 12351 520192 4096 4096 NT_STATUS_OK
ReadX 12351 524288 61440 61440 NT_STATUS_OK
ReadX 12351 585728 4096 4096 NT_STATUS_OK
ReadX 12351 589824 61440 61440 NT_STATUS_OK
ReadX 12351 651264 4096 4096 NT_STATUS_OK
ReadX 12351 655360 61440 61440 NT_STATUS_OK
ReadX 12351 716800 4096 4096 NT_STATUS_OK
ReadX 12351 720896 61440 61440 NT_STATUS_OK
ReadX 12351 782336 4096 4096 NT_STATUS_OK
ReadX 12351 786432 61440 61440 NT_STATUS_OK
ReadX 12351 847872 4096 4096 NT_STATUS_OK
ReadX 12351 851968 61440 61440 NT_STATUS_OK
ReadX 12351 913408 4096 4096 NT_STATUS_OK
ReadX 12351 917504 61440 61440 NT_STATUS_OK
ReadX 12351 978944 4096 4096 NT_STATUS_OK
ReadX 12351 983040 61440 61440 NT_STATUS_OK
ReadX 12351 1044480 4096 4096 NT_STATUS_OK
ReadX 12351 1048576 61440 61440 NT_STATUS_OK
ReadX 12351 1110016 4096 4096 NT_STATUS_OK
ReadX 12351 1114112 61440 61440 NT_STATUS_OK
ReadX 12351 1175552 4096 4096 NT_STATUS_OK
ReadX 12351 1179648 61440 61440 NT_STATUS_OK
ReadX 12351 1241088 4096 4096 NT_STATUS_OK
ReadX 12351 1245184 61440 61440 NT_STATUS_OK
ReadX 12351 1306624 4096 4096 NT_STATUS_OK
ReadX 12351 1310720 61440 61440 NT_STATUS_OK
ReadX 12351 1372160 4096 4096 NT_STATUS_OK
ReadX 12351 1376256 61440 61440 NT_STATUS_OK
ReadX 12351 1437696 4096 4096 NT_STATUS_OK
ReadX 12351 1441792 61440 61440 NT_STATUS_OK
ReadX 12351 1503232 4096 4096 NT_STATUS_OK
ReadX 12351 1507328 61440 61440 NT_STATUS_OK
ReadX 12351 1568768 4096 4096 NT_STATUS_OK
ReadX 12351 1572864 61440 61440 NT_STATUS_OK
ReadX 12351 1634304 4096 4096 NT_STATUS_OK
ReadX 12351 1638400 61440 61440 NT_STATUS_OK
ReadX 12351 1699840 4096 4096 NT_STATUS_OK
ReadX 12351 1703936 61440 61440 NT_STATUS_OK
ReadX 12351 1765376 4096 4096 NT_STATUS_OK
ReadX 12351 1769472 61440 61440 NT_STATUS_OK
ReadX 12351 1830912 4096 4096 NT_STATUS_OK
ReadX 12351 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12352 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12353 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12354 NT_STATUS_OK
ReadX 12354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12355 NT_STATUS_OK
ReadX 12355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12356 NT_STATUS_OK
ReadX 12356 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12357 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12358 NT_STATUS_OK
QUERY_FILE_INFORMATION 12358 1004 NT_STATUS_OK
WriteX 12358 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12358 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12359 NT_STATUS_OK
Close 12359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12360 NT_STATUS_OK
WriteX 12360 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12360 258 NT_STATUS_OK
WriteX 12360 0 491 491 NT_STATUS_OK
Close 12360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12361 NT_STATUS_OK
ReadX 12361 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12358 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12363 NT_STATUS_OK
Close 12363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12364 NT_STATUS_OK
WriteX 12364 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12364 258 NT_STATUS_OK
WriteX 12364 0 543 543 NT_STATUS_OK
Close 12364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12365 NT_STATUS_OK
ReadX 12365 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12349 NT_STATUS_OK
Close 12350 NT_STATUS_OK
Close 12351 NT_STATUS_OK
Close 12365 NT_STATUS_OK
Close 12353 NT_STATUS_OK
Close 12354 NT_STATUS_OK
Close 12355 NT_STATUS_OK
Close 12356 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12368 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12369 NT_STATUS_OK
ReadX 12369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12370 NT_STATUS_OK
ReadX 12370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12371 NT_STATUS_OK
ReadX 12371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12372 NT_STATUS_OK
ReadX 12372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12373 NT_STATUS_OK
ReadX 12373 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12377 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12378 NT_STATUS_OK
QUERY_FILE_INFORMATION 12378 1004 NT_STATUS_OK
WriteX 12378 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12378 258 NT_STATUS_OK
WriteX 12378 0 2048 2048 NT_STATUS_OK
Close 12378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12379 NT_STATUS_OK
ReadX 12379 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12379 0 4096 4096 NT_STATUS_OK
Flush 12379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12379 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12383 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12384 NT_STATUS_OK
WriteX 12384 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12384 258 NT_STATUS_OK
WriteX 12384 0 2048 2048 NT_STATUS_OK
Close 12384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12385 NT_STATUS_OK
ReadX 12385 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12389 NT_STATUS_OK
Close 12389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12390 NT_STATUS_OK
WriteX 12390 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12390 258 NT_STATUS_OK
WriteX 12390 0 2048 2048 NT_STATUS_OK
Close 12390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12391 NT_STATUS_OK
ReadX 12391 0 2048 2048 NT_STATUS_OK
ReadX 12369 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12373 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12385 0 4096 4096 NT_STATUS_OK
WriteX 12369 0 8192 8192 NT_STATUS_OK
WriteX 12370 0 4096 4096 NT_STATUS_OK
WriteX 12371 0 4096 4096 NT_STATUS_OK
ReadX 12385 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12394 NT_STATUS_OK
ReadX 12394 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12395 NT_STATUS_OK
QUERY_FILE_INFORMATION 12395 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12394 NT_STATUS_OK
Close 12370 NT_STATUS_OK
Close 12371 NT_STATUS_OK
Close 12372 NT_STATUS_OK
Close 12385 NT_STATUS_OK
Close 12369 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12397 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12398 NT_STATUS_OK
ReadX 12398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12399 NT_STATUS_OK
ReadX 12399 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12400 NT_STATUS_OK
ReadX 12400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12401 NT_STATUS_OK
ReadX 12401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12402 NT_STATUS_OK
ReadX 12402 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12403 NT_STATUS_OK
ReadX 12403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12404 NT_STATUS_OK
ReadX 12404 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12405 NT_STATUS_OK
ReadX 12405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12406 NT_STATUS_OK
ReadX 12406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12407 NT_STATUS_OK
ReadX 12407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12408 NT_STATUS_OK
ReadX 12408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12409 NT_STATUS_OK
ReadX 12409 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12410 NT_STATUS_OK
ReadX 12410 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12414 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12415 NT_STATUS_OK
QUERY_FILE_INFORMATION 12415 1004 NT_STATUS_OK
WriteX 12415 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12415 258 NT_STATUS_OK
WriteX 12415 0 2048 2048 NT_STATUS_OK
Close 12415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12416 NT_STATUS_OK
ReadX 12416 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12417 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12418 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12418 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12422 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12423 NT_STATUS_OK
QUERY_FILE_INFORMATION 12423 1004 NT_STATUS_OK
WriteX 12423 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12423 258 NT_STATUS_OK
WriteX 12423 0 2048 2048 NT_STATUS_OK
Close 12423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12424 NT_STATUS_OK
ReadX 12424 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12416 0 4096 4096 NT_STATUS_OK
Flush 12416 NT_STATUS_OK
WriteX 12424 0 4096 4096 NT_STATUS_OK
Flush 12424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12416 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12424 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12418 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12425 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12426 NT_STATUS_OK
WriteX 12426 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12426 258 NT_STATUS_OK
WriteX 12426 0 4096 4096 NT_STATUS_OK
Close 12426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12427 NT_STATUS_OK
ReadX 12427 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12428 NT_STATUS_OK
Close 12428 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12429 NT_STATUS_OK
WriteX 12429 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12429 258 NT_STATUS_OK
WriteX 12429 0 4096 4096 NT_STATUS_OK
Close 12429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12430 NT_STATUS_OK
ReadX 12430 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12430 0 4096 4096 NT_STATUS_OK
Close 12427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12410 NT_STATUS_OK
Close 12404 NT_STATUS_OK
Close 12418 NT_STATUS_OK
Close 12407 NT_STATUS_OK
Close 12408 NT_STATUS_OK
Close 12409 NT_STATUS_OK
Close 12405 NT_STATUS_OK
Close 12398 NT_STATUS_OK
Close 12399 NT_STATUS_OK
Close 12402 NT_STATUS_OK
Close 12403 NT_STATUS_OK
Close 12400 NT_STATUS_OK
Close 12401 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12433 NT_STATUS_OK
Close 12433 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12435 NT_STATUS_OK
ReadX 12435 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12436 NT_STATUS_OK
Close 12436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12437 NT_STATUS_OK
WriteX 12437 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12437 258 NT_STATUS_OK
WriteX 12437 0 2048 2048 NT_STATUS_OK
Close 12437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12438 NT_STATUS_OK
ReadX 12438 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12439 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12439 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12440 NT_STATUS_OK
ReadX 12440 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12441 NT_STATUS_OK
ReadX 12441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12442 NT_STATUS_OK
ReadX 12442 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12443 NT_STATUS_OK
ReadX 12443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12444 NT_STATUS_OK
ReadX 12444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12445 NT_STATUS_OK
ReadX 12445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12447 NT_STATUS_OK
ReadX 12447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12448 NT_STATUS_OK
ReadX 12448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12449 NT_STATUS_OK
ReadX 12449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12450 NT_STATUS_OK
ReadX 12450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12451 NT_STATUS_OK
ReadX 12451 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12452 NT_STATUS_OK
QUERY_FILE_INFORMATION 12452 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12435 NT_STATUS_OK
Close 12438 NT_STATUS_OK
Close 12450 NT_STATUS_OK
Close 12445 NT_STATUS_OK
Close 12446 NT_STATUS_OK
Close 12447 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Close 12449 NT_STATUS_OK
Close 12451 NT_STATUS_OK
Close 12439 NT_STATUS_OK
Close 12440 NT_STATUS_OK
Close 12443 NT_STATUS_OK
Close 12444 NT_STATUS_OK
Close 12441 NT_STATUS_OK
Close 12442 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12454 NT_STATUS_OK
QUERY_FILE_INFORMATION 12454 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12456 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12457 NT_STATUS_OK
ReadX 12457 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12458 NT_STATUS_OK
ReadX 12458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12459 NT_STATUS_OK
ReadX 12459 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12460 NT_STATUS_OK
ReadX 12460 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12461 NT_STATUS_OK
ReadX 12461 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12462 NT_STATUS_OK
ReadX 12462 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12463 NT_STATUS_OK
ReadX 12463 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12464 NT_STATUS_OK
ReadX 12464 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12465 NT_STATUS_OK
ReadX 12465 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12466 NT_STATUS_OK
ReadX 12466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12467 NT_STATUS_OK
ReadX 12467 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12468 NT_STATUS_OK
ReadX 12468 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12469 NT_STATUS_OK
ReadX 12469 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12473 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12474 NT_STATUS_OK
QUERY_FILE_INFORMATION 12474 1004 NT_STATUS_OK
WriteX 12474 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12474 258 NT_STATUS_OK
WriteX 12474 0 2048 2048 NT_STATUS_OK
Close 12474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12475 NT_STATUS_OK
ReadX 12475 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12476 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12477 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12478 NT_STATUS_OK
ReadX 12478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12479 NT_STATUS_OK
ReadX 12479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12480 NT_STATUS_OK
ReadX 12480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12481 NT_STATUS_OK
ReadX 12481 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12485 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12486 NT_STATUS_OK
QUERY_FILE_INFORMATION 12486 1004 NT_STATUS_OK
WriteX 12486 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12486 258 NT_STATUS_OK
WriteX 12486 0 2048 2048 NT_STATUS_OK
Close 12486 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12487 NT_STATUS_OK
ReadX 12487 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12488 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12489 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12489 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12493 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12494 NT_STATUS_OK
QUERY_FILE_INFORMATION 12494 1004 NT_STATUS_OK
WriteX 12494 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12494 258 NT_STATUS_OK
WriteX 12494 0 2048 2048 NT_STATUS_OK
Close 12494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12495 NT_STATUS_OK
ReadX 12495 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12475 0 4096 4096 NT_STATUS_OK
Flush 12475 NT_STATUS_OK
WriteX 12487 0 4096 4096 NT_STATUS_OK
Flush 12487 NT_STATUS_OK
WriteX 12495 0 4096 4096 NT_STATUS_OK
Flush 12495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12475 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12487 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12495 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12477 4096 16384 16384 NT_STATUS_OK
ReadX 12457 4096 16384 16384 NT_STATUS_OK
ReadX 12489 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12496 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12497 NT_STATUS_OK
ReadX 12497 0 2048 2048 NT_STATUS_OK
WriteX 12497 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12498 NT_STATUS_OK
QUERY_FILE_INFORMATION 12498 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12497 NT_STATUS_OK
Close 12481 NT_STATUS_OK
Close 12469 NT_STATUS_OK
Close 12461 NT_STATUS_OK
Close 12477 NT_STATUS_OK
Close 12478 NT_STATUS_OK
Close 12479 NT_STATUS_OK
Close 12480 NT_STATUS_OK
Close 12468 NT_STATUS_OK
Close 12489 NT_STATUS_OK
Close 12463 NT_STATUS_OK
Close 12466 NT_STATUS_OK
Close 12467 NT_STATUS_OK
Close 12464 NT_STATUS_OK
Close 12465 NT_STATUS_OK
Close 12457 NT_STATUS_OK
Close 12458 NT_STATUS_OK
Close 12459 NT_STATUS_OK
Close 12460 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12500 NT_STATUS_OK
QUERY_FILE_INFORMATION 12500 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12502 NT_STATUS_OK
QUERY_FILE_INFORMATION 12502 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12504 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12505 NT_STATUS_OK
ReadX 12505 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12506 NT_STATUS_OK
ReadX 12506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12507 NT_STATUS_OK
ReadX 12507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12508 NT_STATUS_OK
ReadX 12508 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12509 NT_STATUS_OK
ReadX 12509 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12505 4096 16384 16384 NT_STATUS_OK
WriteX 12505 0 4096 4096 NT_STATUS_OK
WriteX 12506 0 4096 4096 NT_STATUS_OK
WriteX 12507 0 4096 4096 NT_STATUS_OK
WriteX 12508 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12510 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12511 NT_STATUS_OK
ReadX 12511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12512 NT_STATUS_OK
ReadX 12512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12513 NT_STATUS_OK
ReadX 12513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12514 NT_STATUS_OK
ReadX 12514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12516 NT_STATUS_OK
ReadX 12516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12517 NT_STATUS_OK
ReadX 12517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12518 NT_STATUS_OK
ReadX 12518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12519 NT_STATUS_OK
ReadX 12519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12520 NT_STATUS_OK
ReadX 12520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12521 NT_STATUS_OK
ReadX 12521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12523 NT_STATUS_OK
ReadX 12523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12524 NT_STATUS_OK
ReadX 12524 0 8192 8192 NT_STATUS_OK
ReadX 12511 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12525 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12525 0 4096 4096 NT_STATUS_OK
ReadX 12525 4096 4096 4096 NT_STATUS_OK
ReadX 12525 8192 4096 4096 NT_STATUS_OK
WriteX 12511 0 4096 4096 NT_STATUS_OK
WriteX 12512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12526 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
ReadX 12526 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12505 0 4096 4096 NT_STATUS_OK
WriteX 12506 0 4096 4096 NT_STATUS_OK
WriteX 12507 0 4096 4096 NT_STATUS_OK
WriteX 12508 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12530 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12531 NT_STATUS_OK
QUERY_FILE_INFORMATION 12531 1004 NT_STATUS_OK
WriteX 12531 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12531 258 NT_STATUS_OK
WriteX 12531 0 2048 2048 NT_STATUS_OK
Close 12531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12532 NT_STATUS_OK
ReadX 12532 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12532 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12532 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12533 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12534 NT_STATUS_OK
ReadX 12534 0 4096 4096 NT_STATUS_OK
ReadX 12534 4096 4096 4096 NT_STATUS_OK
WriteX 12534 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12532 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12534 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12535 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12536 NT_STATUS_OK
ReadX 12536 0 4096 4096 NT_STATUS_OK
ReadX 12536 4096 4096 4096 NT_STATUS_OK
WriteX 12536 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12537 NT_STATUS_OK
QUERY_FILE_INFORMATION 12537 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12524 NT_STATUS_OK
Close 12509 NT_STATUS_OK
Close 12505 NT_STATUS_OK
Close 12506 NT_STATUS_OK
Close 12507 NT_STATUS_OK
Close 12508 NT_STATUS_OK
Close 12517 NT_STATUS_OK
Close 12522 NT_STATUS_OK
Close 12518 NT_STATUS_OK
Close 12519 NT_STATUS_OK
Close 12520 NT_STATUS_OK
Close 12521 NT_STATUS_OK
Close 12523 NT_STATUS_OK
Close 12511 NT_STATUS_OK
Close 12512 NT_STATUS_OK
Close 12515 NT_STATUS_OK
Close 12516 NT_STATUS_OK
Close 12513 NT_STATUS_OK
Close 12514 NT_STATUS_OK
Close 12536 NT_STATUS_OK
Close 12525 NT_STATUS_OK
Close 12526 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12539 0 4096 4096 NT_STATUS_OK
ReadX 12539 4096 4096 4096 NT_STATUS_OK
ReadX 12539 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12541 NT_STATUS_OK
ReadX 12541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12542 NT_STATUS_OK
ReadX 12542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12543 NT_STATUS_OK
ReadX 12543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12544 NT_STATUS_OK
ReadX 12544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12545 NT_STATUS_OK
ReadX 12545 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12546 NT_STATUS_OK
ReadX 12546 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12547 NT_STATUS_OK
ReadX 12547 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12548 NT_STATUS_OK
ReadX 12548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12549 NT_STATUS_OK
ReadX 12549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12550 NT_STATUS_OK
ReadX 12550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12551 NT_STATUS_OK
ReadX 12551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12552 NT_STATUS_OK
ReadX 12552 0 4096 4096 NT_STATUS_OK
ReadX 12540 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12556 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12557 NT_STATUS_OK
QUERY_FILE_INFORMATION 12557 1004 NT_STATUS_OK
WriteX 12557 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12557 258 NT_STATUS_OK
WriteX 12557 0 2048 2048 NT_STATUS_OK
Close 12557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12558 NT_STATUS_OK
ReadX 12558 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12558 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12562 NT_STATUS_OK
Close 12562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12563 NT_STATUS_OK
QUERY_FILE_INFORMATION 12563 1004 NT_STATUS_OK
WriteX 12563 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12563 258 NT_STATUS_OK
WriteX 12563 0 2048 2048 NT_STATUS_OK
Close 12563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12564 NT_STATUS_OK
ReadX 12564 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12564 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12547 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12565 NT_STATUS_OK
QUERY_FILE_INFORMATION 12565 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12551 NT_STATUS_OK
Close 12546 NT_STATUS_OK
Close 12552 NT_STATUS_OK
Close 12540 NT_STATUS_OK
Close 12541 NT_STATUS_OK
Close 12544 NT_STATUS_OK
Close 12545 NT_STATUS_OK
Close 12542 NT_STATUS_OK
Close 12543 NT_STATUS_OK
Close 12547 NT_STATUS_OK
Close 12548 NT_STATUS_OK
Close 12549 NT_STATUS_OK
Close 12550 NT_STATUS_OK
Close 12539 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12567 NT_STATUS_OK
QUERY_FILE_INFORMATION 12567 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12569 NT_STATUS_OK
ReadX 12569 61440 4096 4096 NT_STATUS_OK
ReadX 12569 126976 4096 4096 NT_STATUS_OK
WriteX 12569 0 65536 65536 NT_STATUS_OK
WriteX 12569 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12570 NT_STATUS_OK
ReadX 12570 61440 4096 4096 NT_STATUS_OK
ReadX 12570 126976 4096 4096 NT_STATUS_OK
ReadX 12570 192512 4096 4096 NT_STATUS_OK
ReadX 12570 258048 4096 4096 NT_STATUS_OK
WriteX 12570 0 65536 65536 NT_STATUS_OK
WriteX 12570 65536 65536 65536 NT_STATUS_OK
WriteX 12570 131072 65536 65536 NT_STATUS_OK
WriteX 12570 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12571 NT_STATUS_OK
ReadX 12571 61440 4096 4096 NT_STATUS_OK
ReadX 12571 126976 4096 4096 NT_STATUS_OK
ReadX 12571 192512 4096 4096 NT_STATUS_OK
ReadX 12571 258048 4096 4096 NT_STATUS_OK
ReadX 12571 323584 4096 4096 NT_STATUS_OK
ReadX 12571 389120 4096 4096 NT_STATUS_OK
ReadX 12571 454656 4096 4096 NT_STATUS_OK
ReadX 12571 520192 4096 4096 NT_STATUS_OK
WriteX 12571 0 65536 65536 NT_STATUS_OK
WriteX 12571 65536 65536 65536 NT_STATUS_OK
WriteX 12571 131072 65536 65536 NT_STATUS_OK
WriteX 12571 196608 65536 65536 NT_STATUS_OK
WriteX 12571 262144 65536 65536 NT_STATUS_OK
WriteX 12571 327680 65536 65536 NT_STATUS_OK
WriteX 12571 393216 65536 65536 NT_STATUS_OK
WriteX 12571 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12572 NT_STATUS_OK
ReadX 12572 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12572 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12572 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12572 8192 4096 4096 NT_STATUS_OK
ReadX 12572 12288 4096 4096 NT_STATUS_OK
ReadX 12572 16384 4096 4096 NT_STATUS_OK
ReadX 12572 20480 4096 4096 NT_STATUS_OK
ReadX 12572 24576 4096 4096 NT_STATUS_OK
ReadX 12572 28672 4096 4096 NT_STATUS_OK
ReadX 12572 32768 4096 4096 NT_STATUS_OK
ReadX 12572 36864 4096 4096 NT_STATUS_OK
ReadX 12572 40960 4096 4096 NT_STATUS_OK
ReadX 12572 45056 4096 4096 NT_STATUS_OK
ReadX 12572 49152 4096 4096 NT_STATUS_OK
ReadX 12572 53248 4096 4096 NT_STATUS_OK
ReadX 12572 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12572 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12573 NT_STATUS_OK
Close 12573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12569 NT_STATUS_OK
Close 12570 NT_STATUS_OK
Close 12571 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12575 NT_STATUS_OK
WriteX 12575 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12575 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12575 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12575 1004 NT_STATUS_OK
WriteX 12575 0 57088 57088 NT_STATUS_OK
WriteX 12575 0 4096 4096 NT_STATUS_OK
Flush 12575 NT_STATUS_OK
Close 12572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12576 NT_STATUS_OK
SET_FILE_INFORMATION 12576 1004 NT_STATUS_OK
Close 12576 NT_STATUS_OK
SET_FILE_INFORMATION 12575 1004 NT_STATUS_OK
WriteX 12575 0 4096 4096 NT_STATUS_OK
Close 12575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12577 NT_STATUS_OK
Close 12577 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12579 NT_STATUS_OK
ReadX 12579 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12579 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12580 NT_STATUS_OK
WriteX 12580 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12580 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12580 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12580 1004 NT_STATUS_OK
WriteX 12580 0 51456 51456 NT_STATUS_OK
WriteX 12580 0 4096 4096 NT_STATUS_OK
Flush 12580 NT_STATUS_OK
SET_FILE_INFORMATION 12580 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12580 1004 NT_STATUS_OK
WriteX 12580 0 4096 4096 NT_STATUS_OK
Close 12580 NT_STATUS_OK
Close 12579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12582 NT_STATUS_OK
Close 12582 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12584 NT_STATUS_OK
ReadX 12584 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12584 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12586 NT_STATUS_OK
Close 12586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12589 NT_STATUS_OK
WriteX 12589 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12589 258 NT_STATUS_OK
WriteX 12589 0 53077 53077 NT_STATUS_OK
Close 12589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12590 NT_STATUS_OK
WriteX 12590 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12590 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12590 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
WriteX 12590 0 65536 65536 NT_STATUS_OK
WriteX 12590 65536 1856 1856 NT_STATUS_OK
WriteX 12590 0 4096 4096 NT_STATUS_OK
Flush 12590 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
WriteX 12590 0 4096 4096 NT_STATUS_OK
Close 12590 NT_STATUS_OK
Close 12584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12592 NT_STATUS_OK
Close 12592 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12594 NT_STATUS_OK
ReadX 12594 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12596 NT_STATUS_OK
Close 12596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12599 NT_STATUS_OK
WriteX 12599 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12599 258 NT_STATUS_OK
WriteX 12599 0 7983 7983 NT_STATUS_OK
Close 12599 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12601 NT_STATUS_OK
Close 12601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12604 NT_STATUS_OK
WriteX 12604 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12604 258 NT_STATUS_OK
WriteX 12604 0 65536 65536 NT_STATUS_OK
WriteX 12604 65536 65536 65536 NT_STATUS_OK
WriteX 12604 131072 65536 65536 NT_STATUS_OK
WriteX 12604 196608 65536 65536 NT_STATUS_OK
WriteX 12604 262144 65536 65536 NT_STATUS_OK
WriteX 12604 327680 65536 65536 NT_STATUS_OK
WriteX 12604 393216 65536 65536 NT_STATUS_OK
WriteX 12604 458752 46731 46731 NT_STATUS_OK
Close 12604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12605 NT_STATUS_OK
WriteX 12605 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12605 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12594 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12605 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12605 1004 NT_STATUS_OK
WriteX 12605 0 65536 65536 NT_STATUS_OK
WriteX 12605 65536 22848 22848 NT_STATUS_OK
WriteX 12605 0 4096 4096 NT_STATUS_OK
Flush 12605 NT_STATUS_OK
SET_FILE_INFORMATION 12605 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12605 1004 NT_STATUS_OK
WriteX 12605 0 4096 4096 NT_STATUS_OK
Close 12605 NT_STATUS_OK
Close 12594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12607 NT_STATUS_OK
Close 12607 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12609 NT_STATUS_OK
ReadX 12609 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12609 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12610 NT_STATUS_OK
ReadX 12610 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12610 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12610 1004 NT_STATUS_OK
ReadX 12610 8192 4096 4096 NT_STATUS_OK
ReadX 12610 12288 4096 4096 NT_STATUS_OK
ReadX 12610 16384 4096 4096 NT_STATUS_OK
ReadX 12610 20480 4096 4096 NT_STATUS_OK
ReadX 12610 24576 4096 4096 NT_STATUS_OK
ReadX 12610 28672 4096 4096 NT_STATUS_OK
ReadX 12610 32768 4096 4096 NT_STATUS_OK
ReadX 12610 36864 4096 4096 NT_STATUS_OK
ReadX 12610 40960 4096 4096 NT_STATUS_OK
ReadX 12610 45056 4096 4096 NT_STATUS_OK
ReadX 12610 49152 4096 4096 NT_STATUS_OK
ReadX 12610 53248 4096 4096 NT_STATUS_OK
ReadX 12610 57344 4096 4096 NT_STATUS_OK
ReadX 12610 61440 4096 4096 NT_STATUS_OK
ReadX 12610 65536 4096 4096 NT_STATUS_OK
ReadX 12610 69632 4096 4096 NT_STATUS_OK
ReadX 12610 73728 4096 4096 NT_STATUS_OK
ReadX 12610 77824 4096 4096 NT_STATUS_OK
ReadX 12610 81920 4096 4096 NT_STATUS_OK
ReadX 12610 86016 4096 4096 NT_STATUS_OK
ReadX 12610 90112 4096 4096 NT_STATUS_OK
ReadX 12610 94208 4096 4096 NT_STATUS_OK
ReadX 12610 98304 4096 4096 NT_STATUS_OK
ReadX 12610 102400 4096 4096 NT_STATUS_OK
ReadX 12610 106496 4096 4096 NT_STATUS_OK
ReadX 12610 110592 4096 4096 NT_STATUS_OK
ReadX 12610 114688 4096 4096 NT_STATUS_OK
ReadX 12610 118784 4096 4096 NT_STATUS_OK
ReadX 12610 122880 4096 4096 NT_STATUS_OK
ReadX 12610 126976 4096 4096 NT_STATUS_OK
ReadX 12610 131072 4096 4096 NT_STATUS_OK
ReadX 12610 135168 4096 4096 NT_STATUS_OK
ReadX 12610 139264 4096 4096 NT_STATUS_OK
ReadX 12610 143360 4096 4096 NT_STATUS_OK
ReadX 12610 147456 4096 4096 NT_STATUS_OK
ReadX 12610 151552 4096 4096 NT_STATUS_OK
ReadX 12610 155648 4096 4096 NT_STATUS_OK
ReadX 12610 159744 4096 4096 NT_STATUS_OK
ReadX 12610 163840 4096 4096 NT_STATUS_OK
ReadX 12610 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12610 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12611 NT_STATUS_OK
Close 12611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12609 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12613 NT_STATUS_OK
WriteX 12613 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12613 258 NT_STATUS_OK
Close 12610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12614 NT_STATUS_OK
SET_FILE_INFORMATION 12614 1004 NT_STATUS_OK
Close 12614 NT_STATUS_OK
WriteX 12613 0 42388 42388 NT_STATUS_OK
Close 12613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12615 NT_STATUS_OK
Close 12615 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12617 NT_STATUS_OK
ReadX 12617 0 4096 4096 NT_STATUS_OK
ReadX 12617 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12618 NT_STATUS_OK
WriteX 12618 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12618 258 NT_STATUS_OK
SET_FILE_INFORMATION 12618 1004 NT_STATUS_OK
WriteX 12618 0 42652 42652 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Close 12617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12620 NT_STATUS_OK
Close 12620 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12622 NT_STATUS_OK
ReadX 12622 0 4096 4096 NT_STATUS_OK
ReadX 12622 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12624 NT_STATUS_OK
Close 12624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12627 NT_STATUS_OK
WriteX 12627 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12627 258 NT_STATUS_OK
WriteX 12627 0 65536 65536 NT_STATUS_OK
WriteX 12627 65536 49 49 NT_STATUS_OK
Close 12627 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12628 NT_STATUS_OK
ReadX 12628 0 61440 61440 NT_STATUS_OK
ReadX 12628 61440 4096 4096 NT_STATUS_OK
ReadX 12628 65536 61440 61440 NT_STATUS_OK
ReadX 12628 126976 4096 4096 NT_STATUS_OK
ReadX 12628 131072 61440 61440 NT_STATUS_OK
ReadX 12628 192512 4096 4096 NT_STATUS_OK
ReadX 12628 196608 61440 61440 NT_STATUS_OK
ReadX 12628 258048 4096 4096 NT_STATUS_OK
ReadX 12628 262144 61440 61440 NT_STATUS_OK
ReadX 12628 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12629 NT_STATUS_OK
ReadX 12629 0 61440 61440 NT_STATUS_OK
ReadX 12629 61440 4096 4096 NT_STATUS_OK
ReadX 12629 65536 61440 61440 NT_STATUS_OK
ReadX 12629 126976 4096 4096 NT_STATUS_OK
ReadX 12629 131072 61440 61440 NT_STATUS_OK
ReadX 12629 192512 4096 4096 NT_STATUS_OK
ReadX 12629 196608 61440 61440 NT_STATUS_OK
ReadX 12629 258048 4096 4096 NT_STATUS_OK
ReadX 12629 262144 61440 61440 NT_STATUS_OK
ReadX 12629 323584 4096 4096 NT_STATUS_OK
ReadX 12629 327680 61440 61440 NT_STATUS_OK
ReadX 12629 389120 4096 4096 NT_STATUS_OK
ReadX 12629 393216 61440 61440 NT_STATUS_OK
ReadX 12629 454656 4096 4096 NT_STATUS_OK
ReadX 12629 458752 61440 61440 NT_STATUS_OK
ReadX 12629 520192 4096 4096 NT_STATUS_OK
ReadX 12629 524288 61440 61440 NT_STATUS_OK
ReadX 12629 585728 4096 4096 NT_STATUS_OK
ReadX 12629 589824 61440 61440 NT_STATUS_OK
ReadX 12629 651264 4096 4096 NT_STATUS_OK
ReadX 12629 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12630 NT_STATUS_OK
ReadX 12630 0 61440 61440 NT_STATUS_OK
ReadX 12630 61440 4096 4096 NT_STATUS_OK
ReadX 12630 65536 61440 61440 NT_STATUS_OK
ReadX 12630 126976 4096 4096 NT_STATUS_OK
ReadX 12630 131072 61440 61440 NT_STATUS_OK
ReadX 12630 192512 4096 4096 NT_STATUS_OK
ReadX 12630 196608 61440 61440 NT_STATUS_OK
ReadX 12630 258048 4096 4096 NT_STATUS_OK
ReadX 12630 262144 61440 61440 NT_STATUS_OK
ReadX 12630 323584 4096 4096 NT_STATUS_OK
ReadX 12630 327680 61440 61440 NT_STATUS_OK
ReadX 12630 389120 4096 4096 NT_STATUS_OK
ReadX 12630 393216 61440 61440 NT_STATUS_OK
ReadX 12630 454656 4096 4096 NT_STATUS_OK
ReadX 12630 458752 61440 61440 NT_STATUS_OK
ReadX 12630 520192 4096 4096 NT_STATUS_OK
ReadX 12630 524288 61440 61440 NT_STATUS_OK
ReadX 12630 585728 4096 4096 NT_STATUS_OK
ReadX 12630 589824 61440 61440 NT_STATUS_OK
ReadX 12630 651264 4096 4096 NT_STATUS_OK
ReadX 12630 655360 61440 61440 NT_STATUS_OK
ReadX 12630 716800 4096 4096 NT_STATUS_OK
ReadX 12630 720896 61440 61440 NT_STATUS_OK
ReadX 12630 782336 4096 4096 NT_STATUS_OK
ReadX 12630 786432 61440 61440 NT_STATUS_OK
ReadX 12630 847872 4096 4096 NT_STATUS_OK
ReadX 12630 851968 61440 61440 NT_STATUS_OK
ReadX 12630 913408 4096 4096 NT_STATUS_OK
ReadX 12630 917504 61440 61440 NT_STATUS_OK
ReadX 12630 978944 4096 4096 NT_STATUS_OK
ReadX 12630 983040 61440 61440 NT_STATUS_OK
ReadX 12630 1044480 4096 4096 NT_STATUS_OK
ReadX 12630 1048576 61440 61440 NT_STATUS_OK
ReadX 12630 1110016 4096 4096 NT_STATUS_OK
ReadX 12630 1114112 61440 61440 NT_STATUS_OK
ReadX 12630 1175552 4096 4096 NT_STATUS_OK
ReadX 12630 1179648 61440 61440 NT_STATUS_OK
ReadX 12630 1241088 4096 4096 NT_STATUS_OK
ReadX 12630 1245184 61440 61440 NT_STATUS_OK
ReadX 12630 1306624 4096 4096 NT_STATUS_OK
ReadX 12630 1310720 61440 61440 NT_STATUS_OK
ReadX 12630 1372160 4096 4096 NT_STATUS_OK
ReadX 12630 1376256 61440 61440 NT_STATUS_OK
ReadX 12630 1437696 4096 4096 NT_STATUS_OK
ReadX 12630 1441792 61440 61440 NT_STATUS_OK
ReadX 12630 1503232 4096 4096 NT_STATUS_OK
ReadX 12630 1507328 61440 61440 NT_STATUS_OK
ReadX 12630 1568768 4096 4096 NT_STATUS_OK
ReadX 12630 1572864 61440 61440 NT_STATUS_OK
ReadX 12630 1634304 4096 4096 NT_STATUS_OK
ReadX 12630 1638400 61440 61440 NT_STATUS_OK
ReadX 12630 1699840 4096 4096 NT_STATUS_OK
ReadX 12630 1703936 61440 61440 NT_STATUS_OK
ReadX 12630 1765376 4096 4096 NT_STATUS_OK
ReadX 12630 1769472 61440 61440 NT_STATUS_OK
ReadX 12630 1830912 4096 4096 NT_STATUS_OK
ReadX 12630 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12631 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12632 NT_STATUS_OK
QUERY_FILE_INFORMATION 12632 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12632 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12632 1005 NT_STATUS_OK
ReadX 12632 2156 24 24 NT_STATUS_OK
ReadX 12632 2139 276 276 NT_STATUS_OK
ReadX 12632 2136 14 14 NT_STATUS_OK
ReadX 12632 2136 7 7 NT_STATUS_OK
ReadX 12632 2138 12 12 NT_STATUS_OK
ReadX 12632 2137 8 8 NT_STATUS_OK
ReadX 12632 2135 15 15 NT_STATUS_OK
ReadX 12632 0 16 16 NT_STATUS_OK
ReadX 12632 16 2048 2048 NT_STATUS_OK
ReadX 12632 2064 2048 2048 NT_STATUS_OK
ReadX 12632 257 2048 2048 NT_STATUS_OK
ReadX 12632 385 2048 2048 NT_STATUS_OK
ReadX 12632 513 2048 2048 NT_STATUS_OK
ReadX 12632 641 2048 2048 NT_STATUS_OK
ReadX 12632 769 2048 2048 NT_STATUS_OK
ReadX 12632 897 2048 2048 NT_STATUS_OK
ReadX 12632 1025 2048 2048 NT_STATUS_OK
ReadX 12632 1153 2048 2048 NT_STATUS_OK
ReadX 12632 1281 2048 2048 NT_STATUS_OK
ReadX 12632 1409 2048 2048 NT_STATUS_OK
ReadX 12632 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12634 NT_STATUS_OK
Close 12634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12628 NT_STATUS_OK
Close 12629 NT_STATUS_OK
Close 12630 NT_STATUS_OK
Close 12622 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12637 NT_STATUS_OK
WriteX 12637 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12637 258 NT_STATUS_OK
WriteX 12637 0 10575 10575 NT_STATUS_OK
Flush 12637 NT_STATUS_OK
Close 12637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12638 NT_STATUS_OK
Close 12638 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12640 NT_STATUS_OK
ReadX 12640 0 4096 4096 NT_STATUS_OK
Close 12632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12642 NT_STATUS_OK
LockX 12642 2147483538 1 NT_STATUS_OK
UnlockX 12642 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12642 1005 NT_STATUS_OK
ReadX 12642 0 512 512 NT_STATUS_OK
ReadX 12642 512 512 512 NT_STATUS_OK
ReadX 12642 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12642 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12642 1004 NT_STATUS_OK
Close 12642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12643 NT_STATUS_OK
QUERY_FILE_INFORMATION 12643 1005 NT_STATUS_OK
ReadX 12643 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12644 NT_STATUS_OK
LockX 12644 2147483538 1 NT_STATUS_OK
UnlockX 12644 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12644 1005 NT_STATUS_OK
ReadX 12644 0 512 512 NT_STATUS_OK
ReadX 12644 512 512 512 NT_STATUS_OK
ReadX 12644 1024 512 512 NT_STATUS_OK
ReadX 12644 288 20 20 NT_STATUS_OK
ReadX 12644 308 2084 2084 NT_STATUS_OK
ReadX 12644 388 2084 2084 NT_STATUS_OK
ReadX 12644 388 2084 2084 NT_STATUS_OK
ReadX 12631 2157 1386 1386 NT_STATUS_OK
ReadX 12644 2472 399 399 NT_STATUS_OK
ReadX 12644 3072 1536 1536 NT_STATUS_OK
ReadX 12644 544 149 149 NT_STATUS_OK
ReadX 12644 693 485 485 NT_STATUS_OK
Close 12644 NT_STATUS_OK
ReadX 12631 2157 4096 4096 NT_STATUS_OK
ReadX 12631 6253 4096 4096 NT_STATUS_OK
ReadX 12631 10349 4096 4096 NT_STATUS_OK
ReadX 12631 14445 4096 4096 NT_STATUS_OK
ReadX 12631 18541 4096 4096 NT_STATUS_OK
ReadX 12631 22637 256 256 NT_STATUS_OK
ReadX 12631 22893 4096 4096 NT_STATUS_OK
ReadX 12631 26989 4096 4096 NT_STATUS_OK
ReadX 12631 31085 4096 4096 NT_STATUS_OK
ReadX 12631 35181 4096 4096 NT_STATUS_OK
ReadX 12631 39277 4096 4096 NT_STATUS_OK
ReadX 12631 43373 4096 4096 NT_STATUS_OK
ReadX 12631 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12631 2157 1024 1024 NT_STATUS_OK
ReadX 12631 1667 4688 4688 NT_STATUS_OK
ReadX 12631 6355 3516 3516 NT_STATUS_OK
ReadX 12631 9871 16384 16384 NT_STATUS_OK
ReadX 12631 26255 3771 3771 NT_STATUS_OK
ReadX 12631 30026 2048 2048 NT_STATUS_OK
ReadX 12631 32074 1024 1024 NT_STATUS_OK
ReadX 12631 33098 6652 6652 NT_STATUS_OK
ReadX 12631 39750 16384 16384 NT_STATUS_OK
ReadX 12631 56134 10496 10496 NT_STATUS_OK
ReadX 12631 66630 1784 1784 NT_STATUS_OK
ReadX 12631 68414 90 90 NT_STATUS_OK
ReadX 12631 68504 273 273 NT_STATUS_OK
ReadX 12631 68777 1600 1600 NT_STATUS_OK
ReadX 12631 70377 640 640 NT_STATUS_OK
ReadX 12631 71017 1280 1280 NT_STATUS_OK
ReadX 12631 72297 8464 8464 NT_STATUS_OK
ReadX 12631 80761 158 158 NT_STATUS_OK
ReadX 12631 80919 912 912 NT_STATUS_OK
ReadX 12631 81831 1980 1980 NT_STATUS_OK
ReadX 12631 83811 2256 2256 NT_STATUS_OK
ReadX 12631 86067 400 400 NT_STATUS_OK
ReadX 12631 86467 252 252 NT_STATUS_OK
ReadX 12631 86719 42 42 NT_STATUS_OK
ReadX 12631 86761 725 725 NT_STATUS_OK
ReadX 12631 2009 512 512 NT_STATUS_OK
ReadX 12631 3895 9 9 NT_STATUS_OK
ReadX 12631 3781 46 46 NT_STATUS_OK
ReadX 12631 4059 92 92 NT_STATUS_OK
ReadX 12631 3781 92 92 NT_STATUS_OK
ReadX 12631 3986 184 184 NT_STATUS_OK
ReadX 12631 3987 16384 16384 NT_STATUS_OK
ReadX 12631 3902 16384 16384 NT_STATUS_OK
ReadX 12631 3781 10240 10240 NT_STATUS_OK
ReadX 12631 3821 16384 16384 NT_STATUS_OK
ReadX 12631 3891 935 935 NT_STATUS_OK
ReadX 12631 4060 10240 10240 NT_STATUS_OK
ReadX 12631 4059 184 184 NT_STATUS_OK
ReadX 12631 256 184 184 NT_STATUS_OK
ReadX 12631 256 1026 1026 NT_STATUS_OK
ReadX 12631 3901 326 326 NT_STATUS_OK
ReadX 12631 3899 652 652 NT_STATUS_OK
ReadX 12631 256 2 2 NT_STATUS_OK
ReadX 12631 258 4948 4948 NT_STATUS_OK
Close 12631 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12646 NT_STATUS_OK
Close 12646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12649 NT_STATUS_OK
WriteX 12649 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12649 258 NT_STATUS_OK
WriteX 12649 0 65536 65536 NT_STATUS_OK
WriteX 12649 65536 65536 65536 NT_STATUS_OK
WriteX 12649 131072 65536 65536 NT_STATUS_OK
WriteX 12649 196608 65536 65536 NT_STATUS_OK
WriteX 12649 262144 65536 65536 NT_STATUS_OK
WriteX 12649 327680 65536 65536 NT_STATUS_OK
WriteX 12649 393216 65536 65536 NT_STATUS_OK
WriteX 12649 458752 65536 65536 NT_STATUS_OK
WriteX 12649 524288 65536 65536 NT_STATUS_OK
WriteX 12649 589824 35257 35257 NT_STATUS_OK
Close 12649 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12651 NT_STATUS_OK
Close 12651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12654 NT_STATUS_OK
WriteX 12654 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12654 258 NT_STATUS_OK
WriteX 12654 0 65536 65536 NT_STATUS_OK
WriteX 12654 65536 65536 65536 NT_STATUS_OK
WriteX 12654 131072 65536 65536 NT_STATUS_OK
WriteX 12654 196608 65536 65536 NT_STATUS_OK
WriteX 12654 262144 65536 65536 NT_STATUS_OK
WriteX 12654 327680 65536 65536 NT_STATUS_OK
WriteX 12654 393216 65536 65536 NT_STATUS_OK
WriteX 12654 458752 65536 65536 NT_STATUS_OK
WriteX 12654 524288 65536 65536 NT_STATUS_OK
WriteX 12654 589824 57598 57598 NT_STATUS_OK
Close 12654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12656 NT_STATUS_OK
WriteX 12656 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12656 258 NT_STATUS_OK
WriteX 12656 0 12543 12543 NT_STATUS_OK
Flush 12656 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Close 12640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12658 NT_STATUS_OK
Close 12658 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12660 NT_STATUS_OK
ReadX 12660 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12661 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12662 NT_STATUS_OK
QUERY_FILE_INFORMATION 12662 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12662 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12662 1005 NT_STATUS_OK
ReadX 12662 1938 24 24 NT_STATUS_OK
ReadX 12662 1920 276 276 NT_STATUS_OK
ReadX 12662 1918 14 14 NT_STATUS_OK
ReadX 12662 1918 7 7 NT_STATUS_OK
ReadX 12662 1919 12 12 NT_STATUS_OK
ReadX 12662 1919 8 8 NT_STATUS_OK
ReadX 12662 1917 15 15 NT_STATUS_OK
ReadX 12662 0 16 16 NT_STATUS_OK
ReadX 12662 16 2048 2048 NT_STATUS_OK
ReadX 12662 2064 2048 2048 NT_STATUS_OK
ReadX 12662 257 2048 2048 NT_STATUS_OK
ReadX 12662 385 2048 2048 NT_STATUS_OK
ReadX 12662 513 2048 2048 NT_STATUS_OK
ReadX 12662 641 2048 2048 NT_STATUS_OK
ReadX 12662 769 2048 2048 NT_STATUS_OK
ReadX 12662 897 2048 2048 NT_STATUS_OK
ReadX 12662 1025 2048 2048 NT_STATUS_OK
ReadX 12662 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12664 NT_STATUS_OK
Close 12664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12667 NT_STATUS_OK
WriteX 12667 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12667 258 NT_STATUS_OK
WriteX 12667 0 11588 11588 NT_STATUS_OK
Flush 12667 NT_STATUS_OK
Close 12667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12668 NT_STATUS_OK
Close 12668 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12670 NT_STATUS_OK
ReadX 12670 0 4096 4096 NT_STATUS_OK
Close 12662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12672 NT_STATUS_OK
WriteX 12672 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12672 258 NT_STATUS_OK
WriteX 12672 0 11615 11615 NT_STATUS_OK
Flush 12672 NT_STATUS_OK
Close 12672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12674 NT_STATUS_OK
Close 12674 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12676 NT_STATUS_OK
ReadX 12676 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12678 NT_STATUS_OK
Close 12678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12681 NT_STATUS_OK
WriteX 12681 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12681 258 NT_STATUS_OK
WriteX 12681 0 65536 65536 NT_STATUS_OK
WriteX 12681 65536 16050 16050 NT_STATUS_OK
Close 12681 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12661 1939 64 64 NT_STATUS_OK
ReadX 12661 128 248 248 NT_STATUS_OK
ReadX 12661 128 568 568 NT_STATUS_OK
ReadX 12661 3872 1536 1536 NT_STATUS_OK
ReadX 12661 3456 2560 2560 NT_STATUS_OK
ReadX 12661 3136 512 512 NT_STATUS_OK
ReadX 12661 2880 4096 4096 NT_STATUS_OK
ReadX 12661 3264 3072 3072 NT_STATUS_OK
ReadX 12661 320 4096 4096 NT_STATUS_OK
ReadX 12661 1024 4096 4096 NT_STATUS_OK
ReadX 12661 3616 4096 4096 NT_STATUS_OK
ReadX 12661 1939 64 64 NT_STATUS_OK
ReadX 12661 128 248 248 NT_STATUS_OK
ReadX 12661 128 608 608 NT_STATUS_OK
ReadX 12661 2858 1024 1024 NT_STATUS_OK
ReadX 12661 2810 4096 4096 NT_STATUS_OK
ReadX 12661 2826 4096 4096 NT_STATUS_OK
ReadX 12661 2580 2048 2048 NT_STATUS_OK
ReadX 12661 2800 2560 2560 NT_STATUS_OK
ReadX 12661 2100 4096 4096 NT_STATUS_OK
ReadX 12661 2084 4096 4096 NT_STATUS_OK
ReadX 12661 868 4096 4096 NT_STATUS_OK
ReadX 12661 2324 4096 4096 NT_STATUS_OK
ReadX 12661 884 4096 4096 NT_STATUS_OK
ReadX 12661 2604 1024 1024 NT_STATUS_OK
ReadX 12661 580 4096 4096 NT_STATUS_OK
ReadX 12661 596 4096 4096 NT_STATUS_OK
ReadX 12661 2752 4096 4096 NT_STATUS_OK
ReadX 12661 2842 1024 1024 NT_STATUS_OK
ReadX 12661 660 4096 4096 NT_STATUS_OK
ReadX 12661 2720 4096 4096 NT_STATUS_OK
ReadX 12661 2736 4096 4096 NT_STATUS_OK
ReadX 12661 628 4096 4096 NT_STATUS_OK
ReadX 12661 2704 4096 4096 NT_STATUS_OK
ReadX 12661 1556 4096 4096 NT_STATUS_OK
ReadX 12661 576 4096 4096 NT_STATUS_OK
ReadX 12661 3168 1536 1536 NT_STATUS_OK
ReadX 12661 832 4096 4096 NT_STATUS_OK
ReadX 12661 1088 4096 4096 NT_STATUS_OK
ReadX 12661 1344 4096 4096 NT_STATUS_OK
ReadX 12661 1600 4096 4096 NT_STATUS_OK
ReadX 12661 1856 4096 4096 NT_STATUS_OK
ReadX 12661 2112 4096 4096 NT_STATUS_OK
ReadX 12661 1892 4096 4096 NT_STATUS_OK
ReadX 12661 820 4096 4096 NT_STATUS_OK
ReadX 12661 788 4096 4096 NT_STATUS_OK
ReadX 12661 1604 4096 4096 NT_STATUS_OK
ReadX 12661 3648 4096 4096 NT_STATUS_OK
ReadX 12661 2608 4096 4096 NT_STATUS_OK
ReadX 12661 548 4096 4096 NT_STATUS_OK
ReadX 12661 740 4096 4096 NT_STATUS_OK
ReadX 12661 1344 4096 4096 NT_STATUS_OK
ReadX 12661 3392 4096 4096 NT_STATUS_OK
ReadX 12661 3904 4096 4096 NT_STATUS_OK
ReadX 12661 644 4096 4096 NT_STATUS_OK
ReadX 12661 676 4096 4096 NT_STATUS_OK
ReadX 12661 2688 4096 4096 NT_STATUS_OK
ReadX 12661 320 4096 4096 NT_STATUS_OK
ReadX 12661 900 4096 4096 NT_STATUS_OK
ReadX 12661 1908 4096 4096 NT_STATUS_OK
ReadX 12661 852 4096 4096 NT_STATUS_OK
ReadX 12661 724 4096 4096 NT_STATUS_OK
ReadX 12661 2292 4096 4096 NT_STATUS_OK
ReadX 12661 612 4096 4096 NT_STATUS_OK
ReadX 12661 388 4096 4096 NT_STATUS_OK
ReadX 12661 2368 4096 4096 NT_STATUS_OK
ReadX 12661 2624 4096 4096 NT_STATUS_OK
ReadX 12661 500 4096 4096 NT_STATUS_OK
ReadX 12661 356 4096 4096 NT_STATUS_OK
ReadX 12661 1024 4096 4096 NT_STATUS_OK
ReadX 12661 576 4096 4096 NT_STATUS_OK
ReadX 12661 340 4096 4096 NT_STATUS_OK
ReadX 12661 420 4096 4096 NT_STATUS_OK
ReadX 12661 1600 4096 4096 NT_STATUS_OK
ReadX 12661 404 4096 4096 NT_STATUS_OK
ReadX 12661 1428 4096 4096 NT_STATUS_OK
ReadX 12661 2656 4096 4096 NT_STATUS_OK
ReadX 12661 2624 4096 4096 NT_STATUS_OK
ReadX 12661 452 4096 4096 NT_STATUS_OK
ReadX 12661 692 4096 4096 NT_STATUS_OK
ReadX 12661 564 4096 4096 NT_STATUS_OK
ReadX 12661 372 4096 4096 NT_STATUS_OK
ReadX 12661 468 4096 4096 NT_STATUS_OK
ReadX 12661 484 4096 4096 NT_STATUS_OK
ReadX 12661 1088 4096 4096 NT_STATUS_OK
ReadX 12661 1924 4096 4096 NT_STATUS_OK
ReadX 12661 2768 4096 4096 NT_STATUS_OK
ReadX 12661 832 4096 4096 NT_STATUS_OK
ReadX 12661 836 4096 4096 NT_STATUS_OK
ReadX 12661 1856 4096 4096 NT_STATUS_OK
ReadX 12661 2640 4096 4096 NT_STATUS_OK
ReadX 12661 436 4096 4096 NT_STATUS_OK
ReadX 12661 1828 4096 4096 NT_STATUS_OK
ReadX 12661 804 4096 4096 NT_STATUS_OK
ReadX 12661 1860 4096 4096 NT_STATUS_OK
ReadX 12661 1812 4096 4096 NT_STATUS_OK
ReadX 12661 756 4096 4096 NT_STATUS_OK
ReadX 12661 1636 4096 4096 NT_STATUS_OK
ReadX 12661 772 4096 4096 NT_STATUS_OK
ReadX 12661 2036 4096 4096 NT_STATUS_OK
ReadX 12661 1220 4096 4096 NT_STATUS_OK
ReadX 12661 1652 4096 4096 NT_STATUS_OK
ReadX 12661 2588 4096 4096 NT_STATUS_OK
ReadX 12661 916 4096 4096 NT_STATUS_OK
ReadX 12661 260 4096 4096 NT_STATUS_OK
ReadX 12661 932 4096 4096 NT_STATUS_OK
ReadX 12661 2624 4096 4096 NT_STATUS_OK
ReadX 12661 308 4096 4096 NT_STATUS_OK
ReadX 12661 292 4096 4096 NT_STATUS_OK
ReadX 12661 1140 4096 4096 NT_STATUS_OK
ReadX 12661 276 4096 4096 NT_STATUS_OK
ReadX 12661 2020 4096 4096 NT_STATUS_OK
ReadX 12661 2880 4096 4096 NT_STATUS_OK
ReadX 12661 516 4096 4096 NT_STATUS_OK
ReadX 12661 1844 4096 4096 NT_STATUS_OK
ReadX 12661 1124 4096 4096 NT_STATUS_OK
ReadX 12661 3136 4096 4096 NT_STATUS_OK
ReadX 12661 324 4096 4096 NT_STATUS_OK
ReadX 12661 1156 4096 4096 NT_STATUS_OK
ReadX 12661 1172 4096 4096 NT_STATUS_OK
ReadX 12661 2112 4096 4096 NT_STATUS_OK
ReadX 12661 2368 4096 4096 NT_STATUS_OK
ReadX 12661 964 4096 4096 NT_STATUS_OK
ReadX 12661 980 4096 4096 NT_STATUS_OK
ReadX 12661 1012 4096 4096 NT_STATUS_OK
ReadX 12661 532 4096 4096 NT_STATUS_OK
ReadX 12661 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12661 1620 4096 4096 NT_STATUS_OK
ReadX 12661 1604 4096 4096 NT_STATUS_OK
ReadX 12661 2116 4096 4096 NT_STATUS_OK
ReadX 12661 2132 4096 4096 NT_STATUS_OK
ReadX 12661 2148 4096 4096 NT_STATUS_OK
ReadX 12661 2276 4096 4096 NT_STATUS_OK
ReadX 12661 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12683 NT_STATUS_OK
Close 12683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12686 NT_STATUS_OK
QUERY_FILE_INFORMATION 12641 1004 NT_STATUS_OK
Close 12641 NT_STATUS_OK
WriteX 12686 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12686 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12643 1004 NT_STATUS_OK
Close 12643 NT_STATUS_OK
WriteX 12686 0 65536 65536 NT_STATUS_OK
WriteX 12686 65536 64850 64850 NT_STATUS_OK
Close 12686 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12688 NT_STATUS_OK
WriteX 12688 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12688 258 NT_STATUS_OK
ReadX 12661 2068 4096 4096 NT_STATUS_OK
ReadX 12661 1588 4096 4096 NT_STATUS_OK
ReadX 12661 1572 4096 4096 NT_STATUS_OK
WriteX 12688 0 18630 18630 NT_STATUS_OK
Flush 12688 NT_STATUS_OK
Close 12688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12690 NT_STATUS_OK
Close 12690 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12692 NT_STATUS_OK
ReadX 12692 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12661 612 4096 4096 NT_STATUS_OK
ReadX 12661 564 4096 4096 NT_STATUS_OK
ReadX 12661 1876 4096 4096 NT_STATUS_OK
ReadX 12661 628 4096 4096 NT_STATUS_OK
ReadX 12661 740 4096 4096 NT_STATUS_OK
ReadX 12661 724 4096 4096 NT_STATUS_OK
ReadX 12661 644 4096 4096 NT_STATUS_OK
ReadX 12661 2324 4096 4096 NT_STATUS_OK
ReadX 12661 660 4096 4096 NT_STATUS_OK
ReadX 12661 852 4096 4096 NT_STATUS_OK
ReadX 12661 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12661 2368 4096 4096 NT_STATUS_OK
ReadX 12661 1024 4096 4096 NT_STATUS_OK
ReadX 12661 320 4096 4096 NT_STATUS_OK
ReadX 12661 580 4096 4096 NT_STATUS_OK
ReadX 12661 3136 512 512 NT_STATUS_OK
ReadX 12661 2880 4096 4096 NT_STATUS_OK
Close 12661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12693 NT_STATUS_OK
ReadX 12693 61440 4096 4096 NT_STATUS_OK
ReadX 12693 126976 4096 4096 NT_STATUS_OK
WriteX 12693 0 65536 65536 NT_STATUS_OK
WriteX 12693 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12694 NT_STATUS_OK
ReadX 12694 61440 4096 4096 NT_STATUS_OK
ReadX 12694 126976 4096 4096 NT_STATUS_OK
ReadX 12694 192512 4096 4096 NT_STATUS_OK
ReadX 12694 258048 4096 4096 NT_STATUS_OK
WriteX 12694 0 65536 65536 NT_STATUS_OK
WriteX 12694 65536 65536 65536 NT_STATUS_OK
WriteX 12694 131072 65536 65536 NT_STATUS_OK
WriteX 12694 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12695 NT_STATUS_OK
ReadX 12695 61440 4096 4096 NT_STATUS_OK
ReadX 12695 126976 4096 4096 NT_STATUS_OK
ReadX 12695 192512 4096 4096 NT_STATUS_OK
ReadX 12695 258048 4096 4096 NT_STATUS_OK
ReadX 12695 323584 4096 4096 NT_STATUS_OK
ReadX 12695 389120 4096 4096 NT_STATUS_OK
ReadX 12695 454656 4096 4096 NT_STATUS_OK
ReadX 12695 520192 4096 4096 NT_STATUS_OK
WriteX 12695 0 65536 65536 NT_STATUS_OK
WriteX 12695 65536 65536 65536 NT_STATUS_OK
WriteX 12695 131072 65536 65536 NT_STATUS_OK
WriteX 12695 196608 65536 65536 NT_STATUS_OK
WriteX 12695 262144 65536 65536 NT_STATUS_OK
WriteX 12695 327680 65536 65536 NT_STATUS_OK
WriteX 12695 393216 65536 65536 NT_STATUS_OK
WriteX 12695 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12696 NT_STATUS_OK
ReadX 12696 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12697 NT_STATUS_OK
Close 12697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12698 NT_STATUS_OK
WriteX 12698 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12698 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12696 0 8192 8192 NT_STATUS_OK
Flush 12696 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12696 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12696 0 8192 8192 NT_STATUS_OK
Flush 12696 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12696 0 8192 8192 NT_STATUS_OK
Flush 12696 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12696 0 8192 8192 NT_STATUS_OK
Flush 12696 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12700 NT_STATUS_OK
Close 12700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12692 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Close 12693 NT_STATUS_OK
Close 12694 NT_STATUS_OK
Close 12695 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12703 NT_STATUS_OK
WriteX 12703 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12703 258 NT_STATUS_OK
WriteX 12703 0 62591 62591 NT_STATUS_OK
Close 12703 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12705 NT_STATUS_OK
Close 12705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12708 NT_STATUS_OK
WriteX 12708 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12708 258 NT_STATUS_OK
WriteX 12708 0 10845 10845 NT_STATUS_OK
Close 12708 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12710 NT_STATUS_OK
Close 12710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12713 NT_STATUS_OK
WriteX 12713 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12713 258 NT_STATUS_OK
WriteX 12713 0 30118 30118 NT_STATUS_OK
Close 12713 NT_STATUS_OK
WriteX 12696 0 4096 4096 NT_STATUS_OK
WriteX 12698 0 64 64 NT_STATUS_OK
Close 12698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12696 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12715 NT_STATUS_OK
ReadX 12715 0 61440 61440 NT_STATUS_OK
ReadX 12715 61440 4096 4096 NT_STATUS_OK
ReadX 12715 65536 61440 61440 NT_STATUS_OK
ReadX 12715 126976 4096 4096 NT_STATUS_OK
ReadX 12715 131072 61440 61440 NT_STATUS_OK
ReadX 12715 192512 4096 4096 NT_STATUS_OK
ReadX 12715 196608 61440 61440 NT_STATUS_OK
ReadX 12715 258048 4096 4096 NT_STATUS_OK
ReadX 12715 262144 61440 61440 NT_STATUS_OK
ReadX 12715 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12716 NT_STATUS_OK
ReadX 12716 0 61440 61440 NT_STATUS_OK
ReadX 12716 61440 4096 4096 NT_STATUS_OK
ReadX 12716 65536 61440 61440 NT_STATUS_OK
ReadX 12716 126976 4096 4096 NT_STATUS_OK
ReadX 12716 131072 61440 61440 NT_STATUS_OK
ReadX 12716 192512 4096 4096 NT_STATUS_OK
ReadX 12716 196608 61440 61440 NT_STATUS_OK
ReadX 12716 258048 4096 4096 NT_STATUS_OK
ReadX 12716 262144 61440 61440 NT_STATUS_OK
ReadX 12716 323584 4096 4096 NT_STATUS_OK
ReadX 12716 327680 61440 61440 NT_STATUS_OK
ReadX 12716 389120 4096 4096 NT_STATUS_OK
ReadX 12716 393216 61440 61440 NT_STATUS_OK
ReadX 12716 454656 4096 4096 NT_STATUS_OK
ReadX 12716 458752 61440 61440 NT_STATUS_OK
ReadX 12716 520192 4096 4096 NT_STATUS_OK
ReadX 12716 524288 61440 61440 NT_STATUS_OK
ReadX 12716 585728 4096 4096 NT_STATUS_OK
ReadX 12716 589824 61440 61440 NT_STATUS_OK
ReadX 12716 651264 4096 4096 NT_STATUS_OK
ReadX 12716 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12717 NT_STATUS_OK
ReadX 12717 0 61440 61440 NT_STATUS_OK
ReadX 12717 61440 4096 4096 NT_STATUS_OK
ReadX 12717 65536 61440 61440 NT_STATUS_OK
ReadX 12717 126976 4096 4096 NT_STATUS_OK
ReadX 12717 131072 61440 61440 NT_STATUS_OK
ReadX 12717 192512 4096 4096 NT_STATUS_OK
ReadX 12717 196608 61440 61440 NT_STATUS_OK
ReadX 12717 258048 4096 4096 NT_STATUS_OK
ReadX 12717 262144 61440 61440 NT_STATUS_OK
ReadX 12717 323584 4096 4096 NT_STATUS_OK
ReadX 12717 327680 61440 61440 NT_STATUS_OK
ReadX 12717 389120 4096 4096 NT_STATUS_OK
ReadX 12717 393216 61440 61440 NT_STATUS_OK
ReadX 12717 454656 4096 4096 NT_STATUS_OK
ReadX 12717 458752 61440 61440 NT_STATUS_OK
ReadX 12717 520192 4096 4096 NT_STATUS_OK
ReadX 12717 524288 61440 61440 NT_STATUS_OK
ReadX 12717 585728 4096 4096 NT_STATUS_OK
ReadX 12717 589824 61440 61440 NT_STATUS_OK
ReadX 12717 651264 4096 4096 NT_STATUS_OK
ReadX 12717 655360 61440 61440 NT_STATUS_OK
ReadX 12717 716800 4096 4096 NT_STATUS_OK
ReadX 12717 720896 61440 61440 NT_STATUS_OK
ReadX 12717 782336 4096 4096 NT_STATUS_OK
ReadX 12717 786432 61440 61440 NT_STATUS_OK
ReadX 12717 847872 4096 4096 NT_STATUS_OK
ReadX 12717 851968 61440 61440 NT_STATUS_OK
ReadX 12717 913408 4096 4096 NT_STATUS_OK
ReadX 12717 917504 61440 61440 NT_STATUS_OK
ReadX 12717 978944 4096 4096 NT_STATUS_OK
ReadX 12717 983040 61440 61440 NT_STATUS_OK
ReadX 12717 1044480 4096 4096 NT_STATUS_OK
ReadX 12717 1048576 61440 61440 NT_STATUS_OK
ReadX 12717 1110016 4096 4096 NT_STATUS_OK
ReadX 12717 1114112 61440 61440 NT_STATUS_OK
ReadX 12717 1175552 4096 4096 NT_STATUS_OK
ReadX 12717 1179648 61440 61440 NT_STATUS_OK
ReadX 12717 1241088 4096 4096 NT_STATUS_OK
ReadX 12717 1245184 61440 61440 NT_STATUS_OK
ReadX 12717 1306624 4096 4096 NT_STATUS_OK
ReadX 12717 1310720 61440 61440 NT_STATUS_OK
ReadX 12717 1372160 4096 4096 NT_STATUS_OK
ReadX 12717 1376256 61440 61440 NT_STATUS_OK
ReadX 12717 1437696 4096 4096 NT_STATUS_OK
ReadX 12717 1441792 61440 61440 NT_STATUS_OK
ReadX 12717 1503232 4096 4096 NT_STATUS_OK
ReadX 12717 1507328 61440 61440 NT_STATUS_OK
ReadX 12717 1568768 4096 4096 NT_STATUS_OK
ReadX 12717 1572864 61440 61440 NT_STATUS_OK
ReadX 12717 1634304 4096 4096 NT_STATUS_OK
ReadX 12717 1638400 61440 61440 NT_STATUS_OK
ReadX 12717 1699840 4096 4096 NT_STATUS_OK
ReadX 12717 1703936 61440 61440 NT_STATUS_OK
ReadX 12717 1765376 4096 4096 NT_STATUS_OK
ReadX 12717 1769472 61440 61440 NT_STATUS_OK
ReadX 12717 1830912 4096 4096 NT_STATUS_OK
ReadX 12717 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12718 NT_STATUS_OK
Close 12718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12715 NT_STATUS_OK
Close 12716 NT_STATUS_OK
Close 12717 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12720 NT_STATUS_OK
ReadX 12720 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12721 NT_STATUS_OK
ReadX 12721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12722 NT_STATUS_OK
ReadX 12722 0 4096 4096 NT_STATUS_OK
ReadX 12722 4096 4096 4096 NT_STATUS_OK
ReadX 12722 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12723 NT_STATUS_OK
Close 12723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12720 NT_STATUS_OK
Close 12721 NT_STATUS_OK
Close 12722 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12725 NT_STATUS_OK
ReadX 12725 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12726 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12726 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12727 NT_STATUS_OK
Close 12727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Close 12726 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12729 NT_STATUS_OK
ReadX 12729 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12730 NT_STATUS_OK
ReadX 12730 0 8192 8192 NT_STATUS_OK
ReadX 12730 8192 8192 8192 NT_STATUS_OK
ReadX 12730 16384 8192 8192 NT_STATUS_OK
ReadX 12730 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12732 NT_STATUS_OK
Close 12732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12730 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12735 NT_STATUS_OK
WriteX 12735 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12735 258 NT_STATUS_OK
WriteX 12735 0 10438 10438 NT_STATUS_OK
Close 12735 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12736 NT_STATUS_OK
Close 12736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12737 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12738 NT_STATUS_OK
Close 12738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12739 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12740 NT_STATUS_OK
Close 12740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12741 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12742 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12743 NT_STATUS_OK
Close 12743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12744 NT_STATUS_OK
ReadX 12744 0 4096 4096 NT_STATUS_OK
ReadX 12744 4096 4096 4096 NT_STATUS_OK
ReadX 12744 8192 4096 4096 NT_STATUS_OK
ReadX 12744 12288 8192 8192 NT_STATUS_OK
ReadX 12744 20480 8192 8192 NT_STATUS_OK
ReadX 12744 28672 8192 8192 NT_STATUS_OK
ReadX 12744 36864 8192 8192 NT_STATUS_OK
ReadX 12744 45056 8192 8192 NT_STATUS_OK
ReadX 12744 53248 8192 8192 NT_STATUS_OK
ReadX 12744 61440 8192 8192 NT_STATUS_OK
ReadX 12744 69632 8192 8192 NT_STATUS_OK
ReadX 12744 77824 8192 8192 NT_STATUS_OK
ReadX 12744 86016 8192 8192 NT_STATUS_OK
ReadX 12744 94208 8192 8192 NT_STATUS_OK
ReadX 12744 102400 8192 8192 NT_STATUS_OK
ReadX 12744 110592 8192 8192 NT_STATUS_OK
ReadX 12744 118784 8192 8192 NT_STATUS_OK
ReadX 12744 126976 8192 8192 NT_STATUS_OK
ReadX 12744 135168 8192 8192 NT_STATUS_OK
ReadX 12744 143360 8192 8192 NT_STATUS_OK
ReadX 12744 151552 8192 8192 NT_STATUS_OK
ReadX 12744 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12744 NT_STATUS_OK
Close 12737 NT_STATUS_OK
Close 12739 NT_STATUS_OK
Close 12741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12746 NT_STATUS_OK
Close 12746 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12749 NT_STATUS_OK
WriteX 12749 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12749 258 NT_STATUS_OK
WriteX 12749 0 28489 28489 NT_STATUS_OK
Close 12749 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12750 NT_STATUS_OK
Close 12750 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12752 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12752 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12753 NT_STATUS_OK
Close 12753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12752 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12755 NT_STATUS_OK
ReadX 12755 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12756 NT_STATUS_OK
ReadX 12756 0 8192 8192 NT_STATUS_OK
ReadX 12756 8192 8192 8192 NT_STATUS_OK
ReadX 12756 16384 8192 8192 NT_STATUS_OK
ReadX 12756 24576 8192 8192 NT_STATUS_OK
ReadX 12756 32768 16384 16384 NT_STATUS_OK
ReadX 12756 49152 8192 8192 NT_STATUS_OK
ReadX 12756 57344 8192 8192 NT_STATUS_OK
ReadX 12756 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12758 NT_STATUS_OK
Close 12758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12756 NT_STATUS_OK
Close 12755 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12761 NT_STATUS_OK
WriteX 12761 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12761 258 NT_STATUS_OK
WriteX 12761 0 29253 29253 NT_STATUS_OK
Close 12761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12762 NT_STATUS_OK
Close 12762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12763 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12765 NT_STATUS_OK
Close 12765 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12768 NT_STATUS_OK
WriteX 12768 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12768 258 NT_STATUS_OK
WriteX 12768 0 30183 30183 NT_STATUS_OK
Close 12768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12769 NT_STATUS_OK
Close 12769 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12771 NT_STATUS_OK
WriteX 12771 0 510 510 NT_STATUS_OK
WriteX 12771 510 512 512 NT_STATUS_OK
WriteX 12771 1022 510 510 NT_STATUS_OK
WriteX 12771 1532 510 510 NT_STATUS_OK
WriteX 12771 2042 168 168 NT_STATUS_OK
Close 12771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12772 NT_STATUS_OK
Close 12772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12774 NT_STATUS_OK
ReadX 12774 0 4096 4096 NT_STATUS_OK
WriteX 12774 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12775 NT_STATUS_OK
ReadX 12775 61440 4096 4096 NT_STATUS_OK
ReadX 12775 126976 4096 4096 NT_STATUS_OK
WriteX 12775 0 65536 65536 NT_STATUS_OK
WriteX 12775 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12776 NT_STATUS_OK
ReadX 12776 61440 4096 4096 NT_STATUS_OK
ReadX 12776 126976 4096 4096 NT_STATUS_OK
ReadX 12776 192512 4096 4096 NT_STATUS_OK
ReadX 12776 258048 4096 4096 NT_STATUS_OK
WriteX 12776 0 65536 65536 NT_STATUS_OK
WriteX 12776 65536 65536 65536 NT_STATUS_OK
WriteX 12776 131072 65536 65536 NT_STATUS_OK
WriteX 12776 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12777 NT_STATUS_OK
ReadX 12777 61440 4096 4096 NT_STATUS_OK
ReadX 12777 126976 4096 4096 NT_STATUS_OK
ReadX 12777 192512 4096 4096 NT_STATUS_OK
ReadX 12777 258048 4096 4096 NT_STATUS_OK
ReadX 12777 323584 4096 4096 NT_STATUS_OK
ReadX 12777 389120 4096 4096 NT_STATUS_OK
ReadX 12777 454656 4096 4096 NT_STATUS_OK
ReadX 12777 520192 4096 4096 NT_STATUS_OK
WriteX 12777 0 65536 65536 NT_STATUS_OK
WriteX 12777 65536 65536 65536 NT_STATUS_OK
WriteX 12777 131072 65536 65536 NT_STATUS_OK
WriteX 12777 196608 65536 65536 NT_STATUS_OK
WriteX 12777 262144 65536 65536 NT_STATUS_OK
WriteX 12777 327680 65536 65536 NT_STATUS_OK
WriteX 12777 393216 65536 65536 NT_STATUS_OK
WriteX 12777 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12778 NT_STATUS_OK
Close 12778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12774 NT_STATUS_OK
Close 12775 NT_STATUS_OK
Close 12776 NT_STATUS_OK
Close 12777 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12780 NT_STATUS_OK
Close 12780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12784 NT_STATUS_OK
Close 12784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12787 NT_STATUS_OK
Close 12787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12789 NT_STATUS_OK
Close 12789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12793 NT_STATUS_OK
Close 12793 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12796 NT_STATUS_OK
Close 12796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12798 NT_STATUS_OK
Close 12798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12802 NT_STATUS_OK
Close 12802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12807 NT_STATUS_OK
Close 12807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12812 NT_STATUS_OK
Close 12812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12817 NT_STATUS_OK
Close 12817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12822 NT_STATUS_OK
Close 12822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12827 NT_STATUS_OK
Close 12827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12832 NT_STATUS_OK
Close 12832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12837 NT_STATUS_OK
Close 12837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12840 NT_STATUS_OK
Close 12840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12843 NT_STATUS_OK
Close 12843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12846 NT_STATUS_OK
WriteX 12846 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12846 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12846 0 65536 65536 NT_STATUS_OK
WriteX 12846 65536 65536 65536 NT_STATUS_OK
WriteX 12846 131072 65536 65536 NT_STATUS_OK
WriteX 12846 196608 65536 65536 NT_STATUS_OK
WriteX 12846 262144 26634 26634 NT_STATUS_OK
Close 12846 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12851 NT_STATUS_OK
Close 12851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12852 NT_STATUS_OK
Close 12852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12853 NT_STATUS_OK
ReadX 12853 0 4096 4096 NT_STATUS_OK
Close 12853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12854 NT_STATUS_OK
ReadX 12854 0 4096 4096 NT_STATUS_OK
ReadX 12854 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12855 NT_STATUS_OK
Close 12855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12854 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12859 NT_STATUS_OK
Close 12859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12862 NT_STATUS_OK
Close 12862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12864 NT_STATUS_OK
Close 12864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12868 NT_STATUS_OK
Close 12868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12871 NT_STATUS_OK
Close 12871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12873 NT_STATUS_OK
Close 12873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12877 NT_STATUS_OK
Close 12877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12882 NT_STATUS_OK
Close 12882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12887 NT_STATUS_OK
Close 12887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12892 NT_STATUS_OK
Close 12892 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12897 NT_STATUS_OK
Close 12897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12902 NT_STATUS_OK
Close 12902 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12906 NT_STATUS_OK
Close 12906 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12911 NT_STATUS_OK
Close 12911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12916 NT_STATUS_OK
Close 12916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12919 NT_STATUS_OK
Close 12919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12921 NT_STATUS_OK
Close 12921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12931 NT_STATUS_OK
Close 12931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12932 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12933 NT_STATUS_OK
ReadX 12933 0 4096 4096 NT_STATUS_OK
Close 12933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12934 NT_STATUS_OK
ReadX 12934 0 4096 4096 NT_STATUS_OK
Close 12934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12935 NT_STATUS_OK
ReadX 12935 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12945 NT_STATUS_OK
Close 12945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12946 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12947 NT_STATUS_OK
ReadX 12947 0 4096 4096 NT_STATUS_OK
Close 12947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12948 NT_STATUS_OK
ReadX 12948 0 4096 4096 NT_STATUS_OK
Close 12948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12949 NT_STATUS_OK
ReadX 12949 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12935 NT_STATUS_OK
Close 12949 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12978 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12978 0 4096 4096 NT_STATUS_OK
Close 12978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12979 NT_STATUS_OK
ReadX 12979 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12980 NT_STATUS_OK
ReadX 12980 0 4096 4096 NT_STATUS_OK
ReadX 12980 4096 4096 4096 NT_STATUS_OK
ReadX 12980 8192 4096 4096 NT_STATUS_OK
ReadX 12980 12288 4096 4096 NT_STATUS_OK
ReadX 12980 16384 4096 4096 NT_STATUS_OK
ReadX 12980 20480 4096 4096 NT_STATUS_OK
ReadX 12980 24576 4096 4096 NT_STATUS_OK
ReadX 12980 28672 4096 4096 NT_STATUS_OK
ReadX 12980 32768 4096 4096 NT_STATUS_OK
ReadX 12980 36864 4096 4096 NT_STATUS_OK
ReadX 12980 40960 4096 4096 NT_STATUS_OK
ReadX 12980 45056 4096 4096 NT_STATUS_OK
ReadX 12980 49152 4096 4096 NT_STATUS_OK
ReadX 12980 53248 4096 4096 NT_STATUS_OK
ReadX 12980 57344 4096 4096 NT_STATUS_OK
ReadX 12980 61440 4096 4096 NT_STATUS_OK
ReadX 12980 65536 4096 4096 NT_STATUS_OK
ReadX 12980 69632 4096 4096 NT_STATUS_OK
ReadX 12980 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12980 1004 NT_STATUS_OK
WriteX 12980 0 4096 4096 NT_STATUS_OK
Close 12980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12981 NT_STATUS_OK
SET_FILE_INFORMATION 12981 1004 NT_STATUS_OK
Close 12981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12982 NT_STATUS_OK
ReadX 12982 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12983 NT_STATUS_OK
Close 12983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12986 NT_STATUS_OK
WriteX 12986 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12986 258 NT_STATUS_OK
WriteX 12986 0 65536 65536 NT_STATUS_OK
WriteX 12986 65536 19979 19979 NT_STATUS_OK
Close 12986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12987 NT_STATUS_OK
ReadX 12987 0 4096 4096 NT_STATUS_OK
WriteX 12987 0 4096 4096 NT_STATUS_OK
Flush 12987 NT_STATUS_OK
WriteX 12987 0 4096 4096 NT_STATUS_OK
Flush 12987 NT_STATUS_OK
QUERY_FILE_INFORMATION 12987 1004 NT_STATUS_OK
WriteX 12987 0 4096 4096 NT_STATUS_OK
Flush 12987 NT_STATUS_OK
WriteX 12987 0 4096 4096 NT_STATUS_OK
Flush 12987 NT_STATUS_OK
WriteX 12987 0 4096 4096 NT_STATUS_OK
Flush 12987 NT_STATUS_OK
SET_FILE_INFORMATION 12987 1004 NT_STATUS_OK
WriteX 12987 0 4096 4096 NT_STATUS_OK
Flush 12987 NT_STATUS_OK
Close 12987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12988 NT_STATUS_OK
ReadX 12988 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12989 NT_STATUS_OK
ReadX 12989 0 4096 4096 NT_STATUS_OK
Close 12988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12990 NT_STATUS_OK
ReadX 12990 0 4096 4096 NT_STATUS_OK
Close 12990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12991 NT_STATUS_OK
ReadX 12991 0 4096 4096 NT_STATUS_OK
Close 12991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12992 NT_STATUS_OK
ReadX 12992 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12992 1004 NT_STATUS_OK
WriteX 12992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12993 NT_STATUS_OK
Close 12993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12989 NT_STATUS_OK
Close 12992 NT_STATUS_OK
Close 12982 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12995 NT_STATUS_OK
Close 12995 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12998 NT_STATUS_OK
WriteX 12998 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12998 258 NT_STATUS_OK
WriteX 12998 0 65536 65536 NT_STATUS_OK
WriteX 12998 65536 17654 17654 NT_STATUS_OK
Close 12998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12999 NT_STATUS_OK
ReadX 12999 0 4096 4096 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
QUERY_FILE_INFORMATION 12999 1004 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
SET_FILE_INFORMATION 12999 1004 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
Close 12999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13000 NT_STATUS_OK
SET_FILE_INFORMATION 13000 1004 NT_STATUS_OK
Close 13000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13001 NT_STATUS_OK
ReadX 13001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13002 NT_STATUS_OK
Close 13002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13004 NT_STATUS_OK
ReadX 13004 0 4096 4096 NT_STATUS_OK
ReadX 13004 4096 4096 4096 NT_STATUS_OK
ReadX 13004 8192 4096 4096 NT_STATUS_OK
ReadX 13004 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13004 16384 4096 4096 NT_STATUS_OK
ReadX 13004 20480 4096 4096 NT_STATUS_OK
ReadX 13004 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13005 NT_STATUS_OK
ReadX 13005 0 4096 4096 NT_STATUS_OK
Close 13005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13006 NT_STATUS_OK
ReadX 13006 0 4096 4096 NT_STATUS_OK
Close 13006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13007 NT_STATUS_OK
ReadX 13007 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13007 1004 NT_STATUS_OK
WriteX 13007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13008 NT_STATUS_OK
Close 13008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13007 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13010 NT_STATUS_OK
Close 13010 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13013 NT_STATUS_OK
WriteX 13013 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13013 258 NT_STATUS_OK
WriteX 13013 0 65536 65536 NT_STATUS_OK
WriteX 13013 65536 19490 19490 NT_STATUS_OK
Close 13013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13014 NT_STATUS_OK
ReadX 13014 0 4096 4096 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
QUERY_FILE_INFORMATION 13014 1004 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
SET_FILE_INFORMATION 13014 1004 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
Close 13014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13015 NT_STATUS_OK
SET_FILE_INFORMATION 13015 1004 NT_STATUS_OK
Close 13015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13016 NT_STATUS_OK
ReadX 13016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13017 NT_STATUS_OK
Close 13017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13019 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13019 0 4096 4096 NT_STATUS_OK
Close 13019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13020 NT_STATUS_OK
ReadX 13020 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13021 NT_STATUS_OK
ReadX 13021 0 4096 4096 NT_STATUS_OK
ReadX 13021 4096 4096 4096 NT_STATUS_OK
ReadX 13021 8192 4096 4096 NT_STATUS_OK
ReadX 13021 12288 4096 4096 NT_STATUS_OK
ReadX 13021 16384 4096 4096 NT_STATUS_OK
ReadX 13021 20480 4096 4096 NT_STATUS_OK
ReadX 13021 24576 4096 4096 NT_STATUS_OK
ReadX 13021 28672 4096 4096 NT_STATUS_OK
ReadX 13021 32768 4096 4096 NT_STATUS_OK
ReadX 13021 36864 4096 4096 NT_STATUS_OK
ReadX 13021 40960 4096 4096 NT_STATUS_OK
ReadX 13021 45056 4096 4096 NT_STATUS_OK
ReadX 13021 49152 4096 4096 NT_STATUS_OK
ReadX 13021 53248 4096 4096 NT_STATUS_OK
ReadX 13021 57344 4096 4096 NT_STATUS_OK
ReadX 13021 61440 4096 4096 NT_STATUS_OK
ReadX 13021 65536 4096 4096 NT_STATUS_OK
ReadX 13021 69632 4096 4096 NT_STATUS_OK
ReadX 13021 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13021 1004 NT_STATUS_OK
WriteX 13021 0 4096 4096 NT_STATUS_OK
Close 13021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13022 NT_STATUS_OK
SET_FILE_INFORMATION 13022 1004 NT_STATUS_OK
Close 13022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13023 NT_STATUS_OK
ReadX 13023 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13024 NT_STATUS_OK
Close 13024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13016 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13027 NT_STATUS_OK
WriteX 13027 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13027 258 NT_STATUS_OK
WriteX 13027 0 65536 65536 NT_STATUS_OK
WriteX 13027 65536 8866 8866 NT_STATUS_OK
Close 13027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13028 NT_STATUS_OK
ReadX 13028 0 4096 4096 NT_STATUS_OK
WriteX 13028 0 4096 4096 NT_STATUS_OK
Flush 13028 NT_STATUS_OK
SET_FILE_INFORMATION 13028 1004 NT_STATUS_OK
WriteX 13028 0 4096 4096 NT_STATUS_OK
Flush 13028 NT_STATUS_OK
Close 13028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13030 NT_STATUS_OK
ReadX 13030 0 4096 4096 NT_STATUS_OK
Close 13030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13031 NT_STATUS_OK
ReadX 13031 0 4096 4096 NT_STATUS_OK
Close 13031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13032 NT_STATUS_OK
ReadX 13032 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13032 1004 NT_STATUS_OK
WriteX 13032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13033 NT_STATUS_OK
Close 13033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13032 NT_STATUS_OK
Close 13023 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13035 NT_STATUS_OK
Close 13035 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13038 NT_STATUS_OK
WriteX 13038 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13038 258 NT_STATUS_OK
WriteX 13038 0 65536 65536 NT_STATUS_OK
WriteX 13038 65536 9298 9298 NT_STATUS_OK
Close 13038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13039 NT_STATUS_OK
ReadX 13039 0 4096 4096 NT_STATUS_OK
WriteX 13039 0 4096 4096 NT_STATUS_OK
Flush 13039 NT_STATUS_OK
SET_FILE_INFORMATION 13039 1004 NT_STATUS_OK
WriteX 13039 0 4096 4096 NT_STATUS_OK
Flush 13039 NT_STATUS_OK
Close 13039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13040 NT_STATUS_OK
SET_FILE_INFORMATION 13040 1004 NT_STATUS_OK
Close 13040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13041 NT_STATUS_OK
ReadX 13041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13042 NT_STATUS_OK
Close 13042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13045 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13045 0 4096 4096 NT_STATUS_OK
Close 13045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13046 NT_STATUS_OK
ReadX 13046 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13046 4096 4096 4096 NT_STATUS_OK
ReadX 13046 8192 4096 4096 NT_STATUS_OK
ReadX 13046 12288 4096 4096 NT_STATUS_OK
ReadX 13046 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13047 NT_STATUS_OK
ReadX 13047 0 4096 4096 NT_STATUS_OK
Close 13047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13048 NT_STATUS_OK
ReadX 13048 0 4096 4096 NT_STATUS_OK
Close 13048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13049 NT_STATUS_OK
ReadX 13049 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13049 1004 NT_STATUS_OK
WriteX 13049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13050 NT_STATUS_OK
Close 13050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13046 NT_STATUS_OK
Close 13049 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13052 NT_STATUS_OK
Close 13052 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13055 NT_STATUS_OK
WriteX 13055 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13055 258 NT_STATUS_OK
WriteX 13055 0 65536 65536 NT_STATUS_OK
WriteX 13055 65536 11540 11540 NT_STATUS_OK
Close 13055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13056 NT_STATUS_OK
ReadX 13056 0 4096 4096 NT_STATUS_OK
WriteX 13056 0 4096 4096 NT_STATUS_OK
Flush 13056 NT_STATUS_OK
SET_FILE_INFORMATION 13056 1004 NT_STATUS_OK
WriteX 13056 0 4096 4096 NT_STATUS_OK
Flush 13056 NT_STATUS_OK
Close 13056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13057 NT_STATUS_OK
SET_FILE_INFORMATION 13057 1004 NT_STATUS_OK
Close 13057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13058 NT_STATUS_OK
ReadX 13058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13059 NT_STATUS_OK
Close 13059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13061 NT_STATUS_OK
ReadX 13061 61440 4096 4096 NT_STATUS_OK
ReadX 13061 126976 4096 4096 NT_STATUS_OK
WriteX 13061 0 65536 65536 NT_STATUS_OK
WriteX 13061 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13062 NT_STATUS_OK
ReadX 13062 61440 4096 4096 NT_STATUS_OK
ReadX 13062 126976 4096 4096 NT_STATUS_OK
ReadX 13062 192512 4096 4096 NT_STATUS_OK
ReadX 13062 258048 4096 4096 NT_STATUS_OK
WriteX 13062 0 65536 65536 NT_STATUS_OK
WriteX 13062 65536 65536 65536 NT_STATUS_OK
WriteX 13062 131072 65536 65536 NT_STATUS_OK
WriteX 13062 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13063 NT_STATUS_OK
ReadX 13063 61440 4096 4096 NT_STATUS_OK
ReadX 13063 126976 4096 4096 NT_STATUS_OK
ReadX 13063 192512 4096 4096 NT_STATUS_OK
ReadX 13063 258048 4096 4096 NT_STATUS_OK
ReadX 13063 323584 4096 4096 NT_STATUS_OK
ReadX 13063 389120 4096 4096 NT_STATUS_OK
ReadX 13063 454656 4096 4096 NT_STATUS_OK
ReadX 13063 520192 4096 4096 NT_STATUS_OK
WriteX 13063 0 65536 65536 NT_STATUS_OK
WriteX 13063 65536 65536 65536 NT_STATUS_OK
WriteX 13063 131072 65536 65536 NT_STATUS_OK
WriteX 13063 196608 65536 65536 NT_STATUS_OK
WriteX 13063 262144 65536 65536 NT_STATUS_OK
WriteX 13063 327680 65536 65536 NT_STATUS_OK
WriteX 13063 393216 65536 65536 NT_STATUS_OK
WriteX 13063 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13064 NT_STATUS_OK
ReadX 13064 0 4096 4096 NT_STATUS_OK
ReadX 13064 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13065 NT_STATUS_OK
WriteX 13065 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13065 258 NT_STATUS_OK
WriteX 13065 0 53 53 NT_STATUS_OK
Close 13065 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13066 NT_STATUS_OK
Close 13066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13058 NT_STATUS_OK
Close 13004 NT_STATUS_OK
Close 13061 NT_STATUS_OK
Close 13062 NT_STATUS_OK
Close 13063 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13064 8192 4096 4096 NT_STATUS_OK
ReadX 13064 12288 4096 4096 NT_STATUS_OK
WriteX 13068 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13068 258 NT_STATUS_OK
ReadX 13064 16384 4096 4096 NT_STATUS_OK
ReadX 13064 20480 4096 4096 NT_STATUS_OK
WriteX 13068 0 15360 15360 NT_STATUS_OK
Close 13068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13069 NT_STATUS_OK
ReadX 13069 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13069 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13069 1004 NT_STATUS_OK
WriteX 13069 0 4096 4096 NT_STATUS_OK
Close 13069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13070 NT_STATUS_OK
Close 13070 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13072 NT_STATUS_OK
ReadX 13072 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13073 NT_STATUS_OK
Close 13073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13072 4096 4096 4096 NT_STATUS_OK
ReadX 13072 8192 4096 4096 NT_STATUS_OK
ReadX 13072 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13075 NT_STATUS_OK
ReadX 13075 0 4096 4096 NT_STATUS_OK
ReadX 13075 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13076 NT_STATUS_OK
ReadX 13076 0 4096 4096 NT_STATUS_OK
ReadX 13076 4096 4096 4096 NT_STATUS_OK
ReadX 13076 8192 4096 4096 NT_STATUS_OK
Close 13075 NT_STATUS_OK
Close 13076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13077 NT_STATUS_OK
WriteX 13077 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13077 258 NT_STATUS_OK
WriteX 13077 0 15360 15360 NT_STATUS_OK
Close 13077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13078 NT_STATUS_OK
ReadX 13078 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13078 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13078 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13079 NT_STATUS_OK
Close 13079 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13081 NT_STATUS_OK
ReadX 13081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13082 NT_STATUS_OK
SET_FILE_INFORMATION 13082 1004 NT_STATUS_OK
Close 13082 NT_STATUS_OK
WriteX 13078 0 4096 4096 NT_STATUS_OK
Close 13078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13083 NT_STATUS_OK
Close 13083 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13085 NT_STATUS_OK
ReadX 13085 0 4096 4096 NT_STATUS_OK
ReadX 13085 4096 4096 4096 NT_STATUS_OK
ReadX 13085 8192 4096 4096 NT_STATUS_OK
ReadX 13085 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13085 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13085 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13086 NT_STATUS_OK
ReadX 13086 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13087 NT_STATUS_OK
WriteX 13087 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13087 258 NT_STATUS_OK
WriteX 13087 0 53 53 NT_STATUS_OK
Close 13087 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13085 0 19054 19054 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13088 NT_STATUS_OK
Close 13088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13086 4096 4096 4096 NT_STATUS_OK
ReadX 13086 8192 4096 4096 NT_STATUS_OK
ReadX 13086 12288 4096 4096 NT_STATUS_OK
WriteX 13090 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13090 258 NT_STATUS_OK
WriteX 13090 0 12006 12006 NT_STATUS_OK
Close 13090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13091 NT_STATUS_OK
ReadX 13091 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13091 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13091 1004 NT_STATUS_OK
WriteX 13091 0 4096 4096 NT_STATUS_OK
Close 13091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13092 NT_STATUS_OK
Close 13092 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13094 NT_STATUS_OK
ReadX 13094 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13095 NT_STATUS_OK
Close 13095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13094 4096 4096 4096 NT_STATUS_OK
ReadX 13094 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13097 NT_STATUS_OK
WriteX 13097 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13097 258 NT_STATUS_OK
WriteX 13097 0 11991 11991 NT_STATUS_OK
Close 13097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13098 NT_STATUS_OK
ReadX 13098 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13098 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13098 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13099 NT_STATUS_OK
Close 13099 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13101 NT_STATUS_OK
ReadX 13101 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13102 NT_STATUS_OK
SET_FILE_INFORMATION 13102 1004 NT_STATUS_OK
Close 13102 NT_STATUS_OK
WriteX 13098 0 4096 4096 NT_STATUS_OK
Close 13098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13103 NT_STATUS_OK
Close 13103 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13105 NT_STATUS_OK
ReadX 13105 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13106 NT_STATUS_OK
Close 13106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13105 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13105 1004 NT_STATUS_OK
ReadX 13105 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13105 1004 NT_STATUS_OK
WriteX 13105 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13105 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13105 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13105 1004 NT_STATUS_OK
Close 13081 NT_STATUS_OK
WriteX 13105 0 12288 12288 NT_STATUS_OK
Close 13101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13108 NT_STATUS_OK
Close 13108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13085 NT_STATUS_OK
Close 13105 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13110 NT_STATUS_OK
Close 13110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13112 NT_STATUS_OK
ReadX 13112 0 61440 61440 NT_STATUS_OK
ReadX 13112 61440 4096 4096 NT_STATUS_OK
ReadX 13112 65536 61440 61440 NT_STATUS_OK
ReadX 13112 126976 4096 4096 NT_STATUS_OK
ReadX 13112 131072 61440 61440 NT_STATUS_OK
ReadX 13112 192512 4096 4096 NT_STATUS_OK
ReadX 13112 196608 61440 61440 NT_STATUS_OK
ReadX 13112 258048 4096 4096 NT_STATUS_OK
ReadX 13112 262144 61440 61440 NT_STATUS_OK
ReadX 13112 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13113 NT_STATUS_OK
ReadX 13113 0 61440 61440 NT_STATUS_OK
ReadX 13113 61440 4096 4096 NT_STATUS_OK
ReadX 13113 65536 61440 61440 NT_STATUS_OK
ReadX 13113 126976 4096 4096 NT_STATUS_OK
ReadX 13113 131072 61440 61440 NT_STATUS_OK
ReadX 13113 192512 4096 4096 NT_STATUS_OK
ReadX 13113 196608 61440 61440 NT_STATUS_OK
ReadX 13113 258048 4096 4096 NT_STATUS_OK
ReadX 13113 262144 61440 61440 NT_STATUS_OK
ReadX 13113 323584 4096 4096 NT_STATUS_OK
ReadX 13113 327680 61440 61440 NT_STATUS_OK
ReadX 13113 389120 4096 4096 NT_STATUS_OK
ReadX 13113 393216 61440 61440 NT_STATUS_OK
ReadX 13113 454656 4096 4096 NT_STATUS_OK
ReadX 13113 458752 61440 61440 NT_STATUS_OK
ReadX 13113 520192 4096 4096 NT_STATUS_OK
ReadX 13113 524288 61440 61440 NT_STATUS_OK
ReadX 13113 585728 4096 4096 NT_STATUS_OK
ReadX 13113 589824 61440 61440 NT_STATUS_OK
ReadX 13113 651264 4096 4096 NT_STATUS_OK
ReadX 13113 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13114 NT_STATUS_OK
ReadX 13114 0 61440 61440 NT_STATUS_OK
ReadX 13114 61440 4096 4096 NT_STATUS_OK
ReadX 13114 65536 61440 61440 NT_STATUS_OK
ReadX 13114 126976 4096 4096 NT_STATUS_OK
ReadX 13114 131072 61440 61440 NT_STATUS_OK
ReadX 13114 192512 4096 4096 NT_STATUS_OK
ReadX 13114 196608 61440 61440 NT_STATUS_OK
ReadX 13114 258048 4096 4096 NT_STATUS_OK
ReadX 13114 262144 61440 61440 NT_STATUS_OK
ReadX 13114 323584 4096 4096 NT_STATUS_OK
ReadX 13114 327680 61440 61440 NT_STATUS_OK
ReadX 13114 389120 4096 4096 NT_STATUS_OK
ReadX 13114 393216 61440 61440 NT_STATUS_OK
ReadX 13114 454656 4096 4096 NT_STATUS_OK
ReadX 13114 458752 61440 61440 NT_STATUS_OK
ReadX 13114 520192 4096 4096 NT_STATUS_OK
ReadX 13114 524288 61440 61440 NT_STATUS_OK
ReadX 13114 585728 4096 4096 NT_STATUS_OK
ReadX 13114 589824 61440 61440 NT_STATUS_OK
ReadX 13114 651264 4096 4096 NT_STATUS_OK
ReadX 13114 655360 61440 61440 NT_STATUS_OK
ReadX 13114 716800 4096 4096 NT_STATUS_OK
ReadX 13114 720896 61440 61440 NT_STATUS_OK
ReadX 13114 782336 4096 4096 NT_STATUS_OK
ReadX 13114 786432 61440 61440 NT_STATUS_OK
ReadX 13114 847872 4096 4096 NT_STATUS_OK
ReadX 13114 851968 61440 61440 NT_STATUS_OK
ReadX 13114 913408 4096 4096 NT_STATUS_OK
ReadX 13114 917504 61440 61440 NT_STATUS_OK
ReadX 13114 978944 4096 4096 NT_STATUS_OK
ReadX 13114 983040 61440 61440 NT_STATUS_OK
ReadX 13114 1044480 4096 4096 NT_STATUS_OK
ReadX 13114 1048576 61440 61440 NT_STATUS_OK
ReadX 13114 1110016 4096 4096 NT_STATUS_OK
ReadX 13114 1114112 61440 61440 NT_STATUS_OK
ReadX 13114 1175552 4096 4096 NT_STATUS_OK
ReadX 13114 1179648 61440 61440 NT_STATUS_OK
ReadX 13114 1241088 4096 4096 NT_STATUS_OK
ReadX 13114 1245184 61440 61440 NT_STATUS_OK
ReadX 13114 1306624 4096 4096 NT_STATUS_OK
ReadX 13114 1310720 61440 61440 NT_STATUS_OK
ReadX 13114 1372160 4096 4096 NT_STATUS_OK
ReadX 13114 1376256 61440 61440 NT_STATUS_OK
ReadX 13114 1437696 4096 4096 NT_STATUS_OK
ReadX 13114 1441792 61440 61440 NT_STATUS_OK
ReadX 13114 1503232 4096 4096 NT_STATUS_OK
ReadX 13114 1507328 61440 61440 NT_STATUS_OK
ReadX 13114 1568768 4096 4096 NT_STATUS_OK
ReadX 13114 1572864 61440 61440 NT_STATUS_OK
ReadX 13114 1634304 4096 4096 NT_STATUS_OK
ReadX 13114 1638400 61440 61440 NT_STATUS_OK
ReadX 13114 1699840 4096 4096 NT_STATUS_OK
ReadX 13114 1703936 61440 61440 NT_STATUS_OK
ReadX 13114 1765376 4096 4096 NT_STATUS_OK
ReadX 13114 1769472 61440 61440 NT_STATUS_OK
ReadX 13114 1830912 4096 4096 NT_STATUS_OK
ReadX 13114 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13115 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13116 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13116 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13117 NT_STATUS_OK
ReadX 13117 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13118 NT_STATUS_OK
ReadX 13118 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13119 NT_STATUS_OK
ReadX 13119 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13120 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13121 NT_STATUS_OK
QUERY_FILE_INFORMATION 13121 1004 NT_STATUS_OK
WriteX 13121 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13121 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13122 NT_STATUS_OK
Close 13122 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13123 NT_STATUS_OK
WriteX 13123 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13123 258 NT_STATUS_OK
WriteX 13123 0 491 491 NT_STATUS_OK
Close 13123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13124 NT_STATUS_OK
ReadX 13124 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13121 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13126 NT_STATUS_OK
Close 13126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13127 NT_STATUS_OK
WriteX 13127 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13127 258 NT_STATUS_OK
WriteX 13127 0 543 543 NT_STATUS_OK
Close 13127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13128 NT_STATUS_OK
ReadX 13128 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13112 NT_STATUS_OK
Close 13113 NT_STATUS_OK
Close 13114 NT_STATUS_OK
Close 13128 NT_STATUS_OK
Close 13116 NT_STATUS_OK
Close 13117 NT_STATUS_OK
Close 13118 NT_STATUS_OK
Close 13119 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13131 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13132 NT_STATUS_OK
ReadX 13132 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13133 NT_STATUS_OK
ReadX 13133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13134 NT_STATUS_OK
ReadX 13134 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13135 NT_STATUS_OK
ReadX 13135 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13136 NT_STATUS_OK
ReadX 13136 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13140 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13141 NT_STATUS_OK
QUERY_FILE_INFORMATION 13141 1004 NT_STATUS_OK
WriteX 13141 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13141 258 NT_STATUS_OK
WriteX 13141 0 2048 2048 NT_STATUS_OK
Close 13141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13142 NT_STATUS_OK
ReadX 13142 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13142 0 4096 4096 NT_STATUS_OK
Flush 13142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13142 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13146 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13147 NT_STATUS_OK
WriteX 13147 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13147 258 NT_STATUS_OK
WriteX 13147 0 2048 2048 NT_STATUS_OK
Close 13147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13148 NT_STATUS_OK
ReadX 13148 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13152 NT_STATUS_OK
Close 13152 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13153 NT_STATUS_OK
WriteX 13153 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13153 258 NT_STATUS_OK
WriteX 13153 0 2048 2048 NT_STATUS_OK
Close 13153 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13154 NT_STATUS_OK
ReadX 13154 0 2048 2048 NT_STATUS_OK
ReadX 13132 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13136 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13148 0 4096 4096 NT_STATUS_OK
WriteX 13132 0 8192 8192 NT_STATUS_OK
WriteX 13133 0 4096 4096 NT_STATUS_OK
WriteX 13134 0 4096 4096 NT_STATUS_OK
ReadX 13148 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13132 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13157 NT_STATUS_OK
ReadX 13157 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13158 NT_STATUS_OK
QUERY_FILE_INFORMATION 13158 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13157 NT_STATUS_OK
Close 13133 NT_STATUS_OK
Close 13134 NT_STATUS_OK
Close 13135 NT_STATUS_OK
Close 13148 NT_STATUS_OK
Close 13132 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13160 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13161 NT_STATUS_OK
ReadX 13161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13162 NT_STATUS_OK
ReadX 13162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13163 NT_STATUS_OK
ReadX 13163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13164 NT_STATUS_OK
ReadX 13164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13165 NT_STATUS_OK
ReadX 13165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13166 NT_STATUS_OK
ReadX 13166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13167 NT_STATUS_OK
ReadX 13167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13168 NT_STATUS_OK
ReadX 13168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13169 NT_STATUS_OK
ReadX 13169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13170 NT_STATUS_OK
ReadX 13170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13171 NT_STATUS_OK
ReadX 13171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13172 NT_STATUS_OK
ReadX 13172 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13173 NT_STATUS_OK
ReadX 13173 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13177 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13178 NT_STATUS_OK
QUERY_FILE_INFORMATION 13178 1004 NT_STATUS_OK
WriteX 13178 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13178 258 NT_STATUS_OK
WriteX 13178 0 2048 2048 NT_STATUS_OK
Close 13178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13179 NT_STATUS_OK
ReadX 13179 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13180 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13181 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13181 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13185 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13186 NT_STATUS_OK
QUERY_FILE_INFORMATION 13186 1004 NT_STATUS_OK
WriteX 13186 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13186 258 NT_STATUS_OK
WriteX 13186 0 2048 2048 NT_STATUS_OK
Close 13186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13187 NT_STATUS_OK
ReadX 13187 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13179 0 4096 4096 NT_STATUS_OK
Flush 13179 NT_STATUS_OK
WriteX 13187 0 4096 4096 NT_STATUS_OK
Flush 13187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13179 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13187 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13181 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13188 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13189 NT_STATUS_OK
WriteX 13189 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13189 258 NT_STATUS_OK
WriteX 13189 0 4096 4096 NT_STATUS_OK
Close 13189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13190 NT_STATUS_OK
ReadX 13190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13191 NT_STATUS_OK
Close 13191 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13192 NT_STATUS_OK
WriteX 13192 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13192 258 NT_STATUS_OK
WriteX 13192 0 4096 4096 NT_STATUS_OK
Close 13192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13193 NT_STATUS_OK
ReadX 13193 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13193 0 4096 4096 NT_STATUS_OK
Close 13190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13173 NT_STATUS_OK
Close 13167 NT_STATUS_OK
Close 13181 NT_STATUS_OK
Close 13170 NT_STATUS_OK
Close 13171 NT_STATUS_OK
Close 13172 NT_STATUS_OK
Close 13168 NT_STATUS_OK
Close 13161 NT_STATUS_OK
Close 13162 NT_STATUS_OK
Close 13165 NT_STATUS_OK
Close 13166 NT_STATUS_OK
Close 13163 NT_STATUS_OK
Close 13164 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13196 NT_STATUS_OK
Close 13196 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13198 NT_STATUS_OK
ReadX 13198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13199 NT_STATUS_OK
Close 13199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13200 NT_STATUS_OK
WriteX 13200 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13200 258 NT_STATUS_OK
WriteX 13200 0 2048 2048 NT_STATUS_OK
Close 13200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13201 NT_STATUS_OK
ReadX 13201 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13202 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13203 NT_STATUS_OK
ReadX 13203 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13204 NT_STATUS_OK
ReadX 13204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13205 NT_STATUS_OK
ReadX 13205 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13206 NT_STATUS_OK
ReadX 13206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13207 NT_STATUS_OK
ReadX 13207 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13208 NT_STATUS_OK
ReadX 13208 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13209 NT_STATUS_OK
ReadX 13209 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13210 NT_STATUS_OK
ReadX 13210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13211 NT_STATUS_OK
ReadX 13211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13212 NT_STATUS_OK
ReadX 13212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13213 NT_STATUS_OK
ReadX 13213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13214 NT_STATUS_OK
ReadX 13214 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13215 NT_STATUS_OK
QUERY_FILE_INFORMATION 13215 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13198 NT_STATUS_OK
Close 13201 NT_STATUS_OK
Close 13213 NT_STATUS_OK
Close 13208 NT_STATUS_OK
Close 13209 NT_STATUS_OK
Close 13210 NT_STATUS_OK
Close 13211 NT_STATUS_OK
Close 13212 NT_STATUS_OK
Close 13214 NT_STATUS_OK
Close 13202 NT_STATUS_OK
Close 13203 NT_STATUS_OK
Close 13206 NT_STATUS_OK
Close 13207 NT_STATUS_OK
Close 13204 NT_STATUS_OK
Close 13205 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13217 NT_STATUS_OK
QUERY_FILE_INFORMATION 13217 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13219 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13221 NT_STATUS_OK
ReadX 13221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13222 NT_STATUS_OK
ReadX 13222 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13223 NT_STATUS_OK
ReadX 13223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13224 NT_STATUS_OK
ReadX 13224 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13225 NT_STATUS_OK
ReadX 13225 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13226 NT_STATUS_OK
ReadX 13226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13227 NT_STATUS_OK
ReadX 13227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13228 NT_STATUS_OK
ReadX 13228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13229 NT_STATUS_OK
ReadX 13229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13230 NT_STATUS_OK
ReadX 13230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13231 NT_STATUS_OK
ReadX 13231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13232 NT_STATUS_OK
ReadX 13232 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13236 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13237 NT_STATUS_OK
QUERY_FILE_INFORMATION 13237 1004 NT_STATUS_OK
WriteX 13237 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13237 258 NT_STATUS_OK
WriteX 13237 0 2048 2048 NT_STATUS_OK
Close 13237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13238 NT_STATUS_OK
ReadX 13238 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13239 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13240 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13241 NT_STATUS_OK
ReadX 13241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13242 NT_STATUS_OK
ReadX 13242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13243 NT_STATUS_OK
ReadX 13243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13244 NT_STATUS_OK
ReadX 13244 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13248 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13249 NT_STATUS_OK
QUERY_FILE_INFORMATION 13249 1004 NT_STATUS_OK
WriteX 13249 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13249 258 NT_STATUS_OK
WriteX 13249 0 2048 2048 NT_STATUS_OK
Close 13249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13250 NT_STATUS_OK
ReadX 13250 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13251 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13252 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13252 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13256 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13257 NT_STATUS_OK
QUERY_FILE_INFORMATION 13257 1004 NT_STATUS_OK
WriteX 13257 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13257 258 NT_STATUS_OK
WriteX 13257 0 2048 2048 NT_STATUS_OK
Close 13257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13258 NT_STATUS_OK
ReadX 13258 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13238 0 4096 4096 NT_STATUS_OK
Flush 13238 NT_STATUS_OK
WriteX 13250 0 4096 4096 NT_STATUS_OK
Flush 13250 NT_STATUS_OK
WriteX 13258 0 4096 4096 NT_STATUS_OK
Flush 13258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13238 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13250 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13258 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13240 4096 16384 16384 NT_STATUS_OK
ReadX 13220 4096 16384 16384 NT_STATUS_OK
ReadX 13252 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13260 NT_STATUS_OK
ReadX 13260 0 2048 2048 NT_STATUS_OK
WriteX 13260 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13261 NT_STATUS_OK
QUERY_FILE_INFORMATION 13261 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13260 NT_STATUS_OK
Close 13244 NT_STATUS_OK
Close 13232 NT_STATUS_OK
Close 13224 NT_STATUS_OK
Close 13240 NT_STATUS_OK
Close 13241 NT_STATUS_OK
Close 13242 NT_STATUS_OK
Close 13243 NT_STATUS_OK
Close 13231 NT_STATUS_OK
Close 13252 NT_STATUS_OK
Close 13226 NT_STATUS_OK
Close 13229 NT_STATUS_OK
Close 13230 NT_STATUS_OK
Close 13227 NT_STATUS_OK
Close 13228 NT_STATUS_OK
Close 13220 NT_STATUS_OK
Close 13221 NT_STATUS_OK
Close 13222 NT_STATUS_OK
Close 13223 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13263 NT_STATUS_OK
QUERY_FILE_INFORMATION 13263 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13265 NT_STATUS_OK
QUERY_FILE_INFORMATION 13265 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13267 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13268 NT_STATUS_OK
ReadX 13268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13269 NT_STATUS_OK
ReadX 13269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13270 NT_STATUS_OK
ReadX 13270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13271 NT_STATUS_OK
ReadX 13271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13272 NT_STATUS_OK
ReadX 13272 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13268 4096 16384 16384 NT_STATUS_OK
WriteX 13268 0 4096 4096 NT_STATUS_OK
WriteX 13269 0 4096 4096 NT_STATUS_OK
WriteX 13270 0 4096 4096 NT_STATUS_OK
WriteX 13271 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13273 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13274 NT_STATUS_OK
ReadX 13274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13275 NT_STATUS_OK
ReadX 13275 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13276 NT_STATUS_OK
ReadX 13276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13278 NT_STATUS_OK
ReadX 13278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13280 NT_STATUS_OK
ReadX 13280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13281 NT_STATUS_OK
ReadX 13281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13282 NT_STATUS_OK
ReadX 13282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13283 NT_STATUS_OK
ReadX 13283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13284 NT_STATUS_OK
ReadX 13284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13285 NT_STATUS_OK
ReadX 13285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13286 NT_STATUS_OK
ReadX 13286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13287 NT_STATUS_OK
ReadX 13287 0 8192 8192 NT_STATUS_OK
ReadX 13274 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13288 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13288 0 4096 4096 NT_STATUS_OK
ReadX 13288 4096 4096 4096 NT_STATUS_OK
ReadX 13288 8192 4096 4096 NT_STATUS_OK
WriteX 13274 0 4096 4096 NT_STATUS_OK
WriteX 13275 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13289 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
ReadX 13289 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13268 0 4096 4096 NT_STATUS_OK
WriteX 13269 0 4096 4096 NT_STATUS_OK
WriteX 13270 0 4096 4096 NT_STATUS_OK
WriteX 13271 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13293 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13294 NT_STATUS_OK
QUERY_FILE_INFORMATION 13294 1004 NT_STATUS_OK
WriteX 13294 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13294 258 NT_STATUS_OK
WriteX 13294 0 2048 2048 NT_STATUS_OK
Close 13294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13295 NT_STATUS_OK
ReadX 13295 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13295 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13295 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13296 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13297 NT_STATUS_OK
ReadX 13297 0 4096 4096 NT_STATUS_OK
ReadX 13297 4096 4096 4096 NT_STATUS_OK
WriteX 13297 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13295 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13297 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13298 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13299 NT_STATUS_OK
ReadX 13299 0 4096 4096 NT_STATUS_OK
ReadX 13299 4096 4096 4096 NT_STATUS_OK
WriteX 13299 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13300 NT_STATUS_OK
QUERY_FILE_INFORMATION 13300 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13287 NT_STATUS_OK
Close 13272 NT_STATUS_OK
Close 13268 NT_STATUS_OK
Close 13269 NT_STATUS_OK
Close 13270 NT_STATUS_OK
Close 13271 NT_STATUS_OK
Close 13280 NT_STATUS_OK
Close 13285 NT_STATUS_OK
Close 13281 NT_STATUS_OK
Close 13282 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Close 13284 NT_STATUS_OK
Close 13286 NT_STATUS_OK
Close 13274 NT_STATUS_OK
Close 13275 NT_STATUS_OK
Close 13278 NT_STATUS_OK
Close 13279 NT_STATUS_OK
Close 13276 NT_STATUS_OK
Close 13277 NT_STATUS_OK
Close 13299 NT_STATUS_OK
Close 13288 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13302 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13302 0 4096 4096 NT_STATUS_OK
ReadX 13302 4096 4096 4096 NT_STATUS_OK
ReadX 13302 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13305 NT_STATUS_OK
ReadX 13305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13306 NT_STATUS_OK
ReadX 13306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13307 NT_STATUS_OK
ReadX 13307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13308 NT_STATUS_OK
ReadX 13308 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13309 NT_STATUS_OK
ReadX 13309 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13310 NT_STATUS_OK
ReadX 13310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13311 NT_STATUS_OK
ReadX 13311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13312 NT_STATUS_OK
ReadX 13312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13313 NT_STATUS_OK
ReadX 13313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13314 NT_STATUS_OK
ReadX 13314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13315 NT_STATUS_OK
ReadX 13315 0 4096 4096 NT_STATUS_OK
ReadX 13303 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13319 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13320 NT_STATUS_OK
QUERY_FILE_INFORMATION 13320 1004 NT_STATUS_OK
WriteX 13320 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13320 258 NT_STATUS_OK
WriteX 13320 0 2048 2048 NT_STATUS_OK
Close 13320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13321 NT_STATUS_OK
ReadX 13321 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13321 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13325 NT_STATUS_OK
Close 13325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13326 NT_STATUS_OK
QUERY_FILE_INFORMATION 13326 1004 NT_STATUS_OK
WriteX 13326 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13326 258 NT_STATUS_OK
WriteX 13326 0 2048 2048 NT_STATUS_OK
Close 13326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13327 NT_STATUS_OK
ReadX 13327 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13327 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13310 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13328 NT_STATUS_OK
QUERY_FILE_INFORMATION 13328 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13314 NT_STATUS_OK
Close 13309 NT_STATUS_OK
Close 13315 NT_STATUS_OK
Close 13303 NT_STATUS_OK
Close 13304 NT_STATUS_OK
Close 13307 NT_STATUS_OK
Close 13308 NT_STATUS_OK
Close 13305 NT_STATUS_OK
Close 13306 NT_STATUS_OK
Close 13310 NT_STATUS_OK
Close 13311 NT_STATUS_OK
Close 13312 NT_STATUS_OK
Close 13313 NT_STATUS_OK
Close 13302 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13330 NT_STATUS_OK
QUERY_FILE_INFORMATION 13330 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13332 NT_STATUS_OK
ReadX 13332 61440 4096 4096 NT_STATUS_OK
ReadX 13332 126976 4096 4096 NT_STATUS_OK
WriteX 13332 0 65536 65536 NT_STATUS_OK
WriteX 13332 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13333 NT_STATUS_OK
ReadX 13333 61440 4096 4096 NT_STATUS_OK
ReadX 13333 126976 4096 4096 NT_STATUS_OK
ReadX 13333 192512 4096 4096 NT_STATUS_OK
ReadX 13333 258048 4096 4096 NT_STATUS_OK
WriteX 13333 0 65536 65536 NT_STATUS_OK
WriteX 13333 65536 65536 65536 NT_STATUS_OK
WriteX 13333 131072 65536 65536 NT_STATUS_OK
WriteX 13333 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13334 NT_STATUS_OK
ReadX 13334 61440 4096 4096 NT_STATUS_OK
ReadX 13334 126976 4096 4096 NT_STATUS_OK
ReadX 13334 192512 4096 4096 NT_STATUS_OK
ReadX 13334 258048 4096 4096 NT_STATUS_OK
ReadX 13334 323584 4096 4096 NT_STATUS_OK
ReadX 13334 389120 4096 4096 NT_STATUS_OK
ReadX 13334 454656 4096 4096 NT_STATUS_OK
ReadX 13334 520192 4096 4096 NT_STATUS_OK
WriteX 13334 0 65536 65536 NT_STATUS_OK
WriteX 13334 65536 65536 65536 NT_STATUS_OK
WriteX 13334 131072 65536 65536 NT_STATUS_OK
WriteX 13334 196608 65536 65536 NT_STATUS_OK
WriteX 13334 262144 65536 65536 NT_STATUS_OK
WriteX 13334 327680 65536 65536 NT_STATUS_OK
WriteX 13334 393216 65536 65536 NT_STATUS_OK
WriteX 13334 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13335 NT_STATUS_OK
ReadX 13335 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13335 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13335 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13335 8192 4096 4096 NT_STATUS_OK
ReadX 13335 12288 4096 4096 NT_STATUS_OK
ReadX 13335 16384 4096 4096 NT_STATUS_OK
ReadX 13335 20480 4096 4096 NT_STATUS_OK
ReadX 13335 24576 4096 4096 NT_STATUS_OK
ReadX 13335 28672 4096 4096 NT_STATUS_OK
ReadX 13335 32768 4096 4096 NT_STATUS_OK
ReadX 13335 36864 4096 4096 NT_STATUS_OK
ReadX 13335 40960 4096 4096 NT_STATUS_OK
ReadX 13335 45056 4096 4096 NT_STATUS_OK
ReadX 13335 49152 4096 4096 NT_STATUS_OK
ReadX 13335 53248 4096 4096 NT_STATUS_OK
ReadX 13335 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13335 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13336 NT_STATUS_OK
Close 13336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13332 NT_STATUS_OK
Close 13333 NT_STATUS_OK
Close 13334 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13338 NT_STATUS_OK
WriteX 13338 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13338 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13338 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13338 1004 NT_STATUS_OK
WriteX 13338 0 57088 57088 NT_STATUS_OK
WriteX 13338 0 4096 4096 NT_STATUS_OK
Flush 13338 NT_STATUS_OK
Close 13335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13339 NT_STATUS_OK
SET_FILE_INFORMATION 13339 1004 NT_STATUS_OK
Close 13339 NT_STATUS_OK
SET_FILE_INFORMATION 13338 1004 NT_STATUS_OK
WriteX 13338 0 4096 4096 NT_STATUS_OK
Close 13338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13340 NT_STATUS_OK
Close 13340 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13342 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13343 NT_STATUS_OK
WriteX 13343 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13343 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13343 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13343 1004 NT_STATUS_OK
WriteX 13343 0 51456 51456 NT_STATUS_OK
WriteX 13343 0 4096 4096 NT_STATUS_OK
Flush 13343 NT_STATUS_OK
SET_FILE_INFORMATION 13343 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13343 1004 NT_STATUS_OK
WriteX 13343 0 4096 4096 NT_STATUS_OK
Close 13343 NT_STATUS_OK
Close 13342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13345 NT_STATUS_OK
Close 13345 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13347 NT_STATUS_OK
ReadX 13347 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13347 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13349 NT_STATUS_OK
Close 13349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13352 NT_STATUS_OK
WriteX 13352 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13352 258 NT_STATUS_OK
WriteX 13352 0 53077 53077 NT_STATUS_OK
Close 13352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13353 NT_STATUS_OK
WriteX 13353 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13353 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13353 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13353 1004 NT_STATUS_OK
WriteX 13353 0 65536 65536 NT_STATUS_OK
WriteX 13353 65536 1856 1856 NT_STATUS_OK
WriteX 13353 0 4096 4096 NT_STATUS_OK
Flush 13353 NT_STATUS_OK
SET_FILE_INFORMATION 13353 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13353 1004 NT_STATUS_OK
WriteX 13353 0 4096 4096 NT_STATUS_OK
Close 13353 NT_STATUS_OK
Close 13347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13355 NT_STATUS_OK
Close 13355 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13357 NT_STATUS_OK
ReadX 13357 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13359 NT_STATUS_OK
Close 13359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13362 NT_STATUS_OK
WriteX 13362 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13362 258 NT_STATUS_OK
WriteX 13362 0 7983 7983 NT_STATUS_OK
Close 13362 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13364 NT_STATUS_OK
Close 13364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13367 NT_STATUS_OK
WriteX 13367 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13367 258 NT_STATUS_OK
WriteX 13367 0 65536 65536 NT_STATUS_OK
WriteX 13367 65536 65536 65536 NT_STATUS_OK
WriteX 13367 131072 65536 65536 NT_STATUS_OK
WriteX 13367 196608 65536 65536 NT_STATUS_OK
WriteX 13367 262144 65536 65536 NT_STATUS_OK
WriteX 13367 327680 65536 65536 NT_STATUS_OK
WriteX 13367 393216 65536 65536 NT_STATUS_OK
WriteX 13367 458752 46731 46731 NT_STATUS_OK
Close 13367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13368 NT_STATUS_OK
WriteX 13368 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13368 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13357 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13368 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13368 1004 NT_STATUS_OK
WriteX 13368 0 65536 65536 NT_STATUS_OK
WriteX 13368 65536 22848 22848 NT_STATUS_OK
WriteX 13368 0 4096 4096 NT_STATUS_OK
Flush 13368 NT_STATUS_OK
SET_FILE_INFORMATION 13368 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13368 1004 NT_STATUS_OK
WriteX 13368 0 4096 4096 NT_STATUS_OK
Close 13368 NT_STATUS_OK
Close 13357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13370 NT_STATUS_OK
Close 13370 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13372 NT_STATUS_OK
ReadX 13372 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13372 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13373 NT_STATUS_OK
ReadX 13373 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13373 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13373 1004 NT_STATUS_OK
ReadX 13373 8192 4096 4096 NT_STATUS_OK
ReadX 13373 12288 4096 4096 NT_STATUS_OK
ReadX 13373 16384 4096 4096 NT_STATUS_OK
ReadX 13373 20480 4096 4096 NT_STATUS_OK
ReadX 13373 24576 4096 4096 NT_STATUS_OK
ReadX 13373 28672 4096 4096 NT_STATUS_OK
ReadX 13373 32768 4096 4096 NT_STATUS_OK
ReadX 13373 36864 4096 4096 NT_STATUS_OK
ReadX 13373 40960 4096 4096 NT_STATUS_OK
ReadX 13373 45056 4096 4096 NT_STATUS_OK
ReadX 13373 49152 4096 4096 NT_STATUS_OK
ReadX 13373 53248 4096 4096 NT_STATUS_OK
ReadX 13373 57344 4096 4096 NT_STATUS_OK
ReadX 13373 61440 4096 4096 NT_STATUS_OK
ReadX 13373 65536 4096 4096 NT_STATUS_OK
ReadX 13373 69632 4096 4096 NT_STATUS_OK
ReadX 13373 73728 4096 4096 NT_STATUS_OK
ReadX 13373 77824 4096 4096 NT_STATUS_OK
ReadX 13373 81920 4096 4096 NT_STATUS_OK
ReadX 13373 86016 4096 4096 NT_STATUS_OK
ReadX 13373 90112 4096 4096 NT_STATUS_OK
ReadX 13373 94208 4096 4096 NT_STATUS_OK
ReadX 13373 98304 4096 4096 NT_STATUS_OK
ReadX 13373 102400 4096 4096 NT_STATUS_OK
ReadX 13373 106496 4096 4096 NT_STATUS_OK
ReadX 13373 110592 4096 4096 NT_STATUS_OK
ReadX 13373 114688 4096 4096 NT_STATUS_OK
ReadX 13373 118784 4096 4096 NT_STATUS_OK
ReadX 13373 122880 4096 4096 NT_STATUS_OK
ReadX 13373 126976 4096 4096 NT_STATUS_OK
ReadX 13373 131072 4096 4096 NT_STATUS_OK
ReadX 13373 135168 4096 4096 NT_STATUS_OK
ReadX 13373 139264 4096 4096 NT_STATUS_OK
ReadX 13373 143360 4096 4096 NT_STATUS_OK
ReadX 13373 147456 4096 4096 NT_STATUS_OK
ReadX 13373 151552 4096 4096 NT_STATUS_OK
ReadX 13373 155648 4096 4096 NT_STATUS_OK
ReadX 13373 159744 4096 4096 NT_STATUS_OK
ReadX 13373 163840 4096 4096 NT_STATUS_OK
ReadX 13373 167936 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13373 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13374 NT_STATUS_OK
Close 13374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13372 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13376 NT_STATUS_OK
WriteX 13376 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13376 258 NT_STATUS_OK
Close 13373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13377 NT_STATUS_OK
SET_FILE_INFORMATION 13377 1004 NT_STATUS_OK
Close 13377 NT_STATUS_OK
WriteX 13376 0 42388 42388 NT_STATUS_OK
Close 13376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13378 NT_STATUS_OK
Close 13378 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13380 NT_STATUS_OK
ReadX 13380 0 4096 4096 NT_STATUS_OK
ReadX 13380 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13381 NT_STATUS_OK
WriteX 13381 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13381 258 NT_STATUS_OK
SET_FILE_INFORMATION 13381 1004 NT_STATUS_OK
WriteX 13381 0 42652 42652 NT_STATUS_OK
Close 13381 NT_STATUS_OK
Close 13380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13383 NT_STATUS_OK
Close 13383 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13385 NT_STATUS_OK
ReadX 13385 0 4096 4096 NT_STATUS_OK
ReadX 13385 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13387 NT_STATUS_OK
Close 13387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13390 NT_STATUS_OK
WriteX 13390 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13390 258 NT_STATUS_OK
WriteX 13390 0 65536 65536 NT_STATUS_OK
WriteX 13390 65536 49 49 NT_STATUS_OK
Close 13390 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 61440 61440 NT_STATUS_OK
ReadX 13391 61440 4096 4096 NT_STATUS_OK
ReadX 13391 65536 61440 61440 NT_STATUS_OK
ReadX 13391 126976 4096 4096 NT_STATUS_OK
ReadX 13391 131072 61440 61440 NT_STATUS_OK
ReadX 13391 192512 4096 4096 NT_STATUS_OK
ReadX 13391 196608 61440 61440 NT_STATUS_OK
ReadX 13391 258048 4096 4096 NT_STATUS_OK
ReadX 13391 262144 61440 61440 NT_STATUS_OK
ReadX 13391 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13392 NT_STATUS_OK
ReadX 13392 0 61440 61440 NT_STATUS_OK
ReadX 13392 61440 4096 4096 NT_STATUS_OK
ReadX 13392 65536 61440 61440 NT_STATUS_OK
ReadX 13392 126976 4096 4096 NT_STATUS_OK
ReadX 13392 131072 61440 61440 NT_STATUS_OK
ReadX 13392 192512 4096 4096 NT_STATUS_OK
ReadX 13392 196608 61440 61440 NT_STATUS_OK
ReadX 13392 258048 4096 4096 NT_STATUS_OK
ReadX 13392 262144 61440 61440 NT_STATUS_OK
ReadX 13392 323584 4096 4096 NT_STATUS_OK
ReadX 13392 327680 61440 61440 NT_STATUS_OK
ReadX 13392 389120 4096 4096 NT_STATUS_OK
ReadX 13392 393216 61440 61440 NT_STATUS_OK
ReadX 13392 454656 4096 4096 NT_STATUS_OK
ReadX 13392 458752 61440 61440 NT_STATUS_OK
ReadX 13392 520192 4096 4096 NT_STATUS_OK
ReadX 13392 524288 61440 61440 NT_STATUS_OK
ReadX 13392 585728 4096 4096 NT_STATUS_OK
ReadX 13392 589824 61440 61440 NT_STATUS_OK
ReadX 13392 651264 4096 4096 NT_STATUS_OK
ReadX 13392 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13393 NT_STATUS_OK
ReadX 13393 0 61440 61440 NT_STATUS_OK
ReadX 13393 61440 4096 4096 NT_STATUS_OK
ReadX 13393 65536 61440 61440 NT_STATUS_OK
ReadX 13393 126976 4096 4096 NT_STATUS_OK
ReadX 13393 131072 61440 61440 NT_STATUS_OK
ReadX 13393 192512 4096 4096 NT_STATUS_OK
ReadX 13393 196608 61440 61440 NT_STATUS_OK
ReadX 13393 258048 4096 4096 NT_STATUS_OK
ReadX 13393 262144 61440 61440 NT_STATUS_OK
ReadX 13393 323584 4096 4096 NT_STATUS_OK
ReadX 13393 327680 61440 61440 NT_STATUS_OK
ReadX 13393 389120 4096 4096 NT_STATUS_OK
ReadX 13393 393216 61440 61440 NT_STATUS_OK
ReadX 13393 454656 4096 4096 NT_STATUS_OK
ReadX 13393 458752 61440 61440 NT_STATUS_OK
ReadX 13393 520192 4096 4096 NT_STATUS_OK
ReadX 13393 524288 61440 61440 NT_STATUS_OK
ReadX 13393 585728 4096 4096 NT_STATUS_OK
ReadX 13393 589824 61440 61440 NT_STATUS_OK
ReadX 13393 651264 4096 4096 NT_STATUS_OK
ReadX 13393 655360 61440 61440 NT_STATUS_OK
ReadX 13393 716800 4096 4096 NT_STATUS_OK
ReadX 13393 720896 61440 61440 NT_STATUS_OK
ReadX 13393 782336 4096 4096 NT_STATUS_OK
ReadX 13393 786432 61440 61440 NT_STATUS_OK
ReadX 13393 847872 4096 4096 NT_STATUS_OK
ReadX 13393 851968 61440 61440 NT_STATUS_OK
ReadX 13393 913408 4096 4096 NT_STATUS_OK
ReadX 13393 917504 61440 61440 NT_STATUS_OK
ReadX 13393 978944 4096 4096 NT_STATUS_OK
ReadX 13393 983040 61440 61440 NT_STATUS_OK
ReadX 13393 1044480 4096 4096 NT_STATUS_OK
ReadX 13393 1048576 61440 61440 NT_STATUS_OK
ReadX 13393 1110016 4096 4096 NT_STATUS_OK
ReadX 13393 1114112 61440 61440 NT_STATUS_OK
ReadX 13393 1175552 4096 4096 NT_STATUS_OK
ReadX 13393 1179648 61440 61440 NT_STATUS_OK
ReadX 13393 1241088 4096 4096 NT_STATUS_OK
ReadX 13393 1245184 61440 61440 NT_STATUS_OK
ReadX 13393 1306624 4096 4096 NT_STATUS_OK
ReadX 13393 1310720 61440 61440 NT_STATUS_OK
ReadX 13393 1372160 4096 4096 NT_STATUS_OK
ReadX 13393 1376256 61440 61440 NT_STATUS_OK
ReadX 13393 1437696 4096 4096 NT_STATUS_OK
ReadX 13393 1441792 61440 61440 NT_STATUS_OK
ReadX 13393 1503232 4096 4096 NT_STATUS_OK
ReadX 13393 1507328 61440 61440 NT_STATUS_OK
ReadX 13393 1568768 4096 4096 NT_STATUS_OK
ReadX 13393 1572864 61440 61440 NT_STATUS_OK
ReadX 13393 1634304 4096 4096 NT_STATUS_OK
ReadX 13393 1638400 61440 61440 NT_STATUS_OK
ReadX 13393 1699840 4096 4096 NT_STATUS_OK
ReadX 13393 1703936 61440 61440 NT_STATUS_OK
ReadX 13393 1765376 4096 4096 NT_STATUS_OK
ReadX 13393 1769472 61440 61440 NT_STATUS_OK
ReadX 13393 1830912 4096 4096 NT_STATUS_OK
ReadX 13393 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13394 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13395 NT_STATUS_OK
QUERY_FILE_INFORMATION 13395 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13395 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13395 1005 NT_STATUS_OK
ReadX 13395 2156 24 24 NT_STATUS_OK
ReadX 13395 2139 276 276 NT_STATUS_OK
ReadX 13395 2136 14 14 NT_STATUS_OK
ReadX 13395 2136 7 7 NT_STATUS_OK
ReadX 13395 2138 12 12 NT_STATUS_OK
ReadX 13395 2137 8 8 NT_STATUS_OK
ReadX 13395 2135 15 15 NT_STATUS_OK
ReadX 13395 0 16 16 NT_STATUS_OK
ReadX 13395 16 2048 2048 NT_STATUS_OK
ReadX 13395 2064 2048 2048 NT_STATUS_OK
ReadX 13395 257 2048 2048 NT_STATUS_OK
ReadX 13395 385 2048 2048 NT_STATUS_OK
ReadX 13395 513 2048 2048 NT_STATUS_OK
ReadX 13395 641 2048 2048 NT_STATUS_OK
ReadX 13395 769 2048 2048 NT_STATUS_OK
ReadX 13395 897 2048 2048 NT_STATUS_OK
ReadX 13395 1025 2048 2048 NT_STATUS_OK
ReadX 13395 1153 2048 2048 NT_STATUS_OK
ReadX 13395 1281 2048 2048 NT_STATUS_OK
ReadX 13395 1409 2048 2048 NT_STATUS_OK
ReadX 13395 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13397 NT_STATUS_OK
Close 13397 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13391 NT_STATUS_OK
Close 13392 NT_STATUS_OK
Close 13393 NT_STATUS_OK
Close 13385 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13400 NT_STATUS_OK
WriteX 13400 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13400 258 NT_STATUS_OK
WriteX 13400 0 10575 10575 NT_STATUS_OK
Flush 13400 NT_STATUS_OK
Close 13400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13401 NT_STATUS_OK
Close 13401 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13403 NT_STATUS_OK
ReadX 13403 0 4096 4096 NT_STATUS_OK
Close 13395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13405 NT_STATUS_OK
LockX 13405 2147483538 1 NT_STATUS_OK
UnlockX 13405 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13405 1005 NT_STATUS_OK
ReadX 13405 0 512 512 NT_STATUS_OK
ReadX 13405 512 512 512 NT_STATUS_OK
ReadX 13405 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13405 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13405 1004 NT_STATUS_OK
Close 13405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13406 NT_STATUS_OK
QUERY_FILE_INFORMATION 13406 1005 NT_STATUS_OK
ReadX 13406 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13407 NT_STATUS_OK
LockX 13407 2147483538 1 NT_STATUS_OK
UnlockX 13407 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13407 1005 NT_STATUS_OK
ReadX 13407 0 512 512 NT_STATUS_OK
ReadX 13407 512 512 512 NT_STATUS_OK
ReadX 13407 1024 512 512 NT_STATUS_OK
ReadX 13407 288 20 20 NT_STATUS_OK
ReadX 13407 308 2084 2084 NT_STATUS_OK
ReadX 13407 388 2084 2084 NT_STATUS_OK
ReadX 13407 388 2084 2084 NT_STATUS_OK
ReadX 13394 2157 1386 1386 NT_STATUS_OK
ReadX 13407 2472 399 399 NT_STATUS_OK
ReadX 13407 3072 1536 1536 NT_STATUS_OK
ReadX 13407 544 149 149 NT_STATUS_OK
ReadX 13407 693 485 485 NT_STATUS_OK
Close 13407 NT_STATUS_OK
ReadX 13394 2157 4096 4096 NT_STATUS_OK
ReadX 13394 6253 4096 4096 NT_STATUS_OK
ReadX 13394 10349 4096 4096 NT_STATUS_OK
ReadX 13394 14445 4096 4096 NT_STATUS_OK
ReadX 13394 18541 4096 4096 NT_STATUS_OK
ReadX 13394 22637 256 256 NT_STATUS_OK
ReadX 13394 22893 4096 4096 NT_STATUS_OK
ReadX 13394 26989 4096 4096 NT_STATUS_OK
ReadX 13394 31085 4096 4096 NT_STATUS_OK
ReadX 13394 35181 4096 4096 NT_STATUS_OK
ReadX 13394 39277 4096 4096 NT_STATUS_OK
ReadX 13394 43373 4096 4096 NT_STATUS_OK
ReadX 13394 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13394 2157 1024 1024 NT_STATUS_OK
ReadX 13394 1667 4688 4688 NT_STATUS_OK
ReadX 13394 6355 3516 3516 NT_STATUS_OK
ReadX 13394 9871 16384 16384 NT_STATUS_OK
ReadX 13394 26255 3771 3771 NT_STATUS_OK
ReadX 13394 30026 2048 2048 NT_STATUS_OK
ReadX 13394 32074 1024 1024 NT_STATUS_OK
ReadX 13394 33098 6652 6652 NT_STATUS_OK
ReadX 13394 39750 16384 16384 NT_STATUS_OK
ReadX 13394 56134 10496 10496 NT_STATUS_OK
ReadX 13394 66630 1784 1784 NT_STATUS_OK
ReadX 13394 68414 90 90 NT_STATUS_OK
ReadX 13394 68504 273 273 NT_STATUS_OK
ReadX 13394 68777 1600 1600 NT_STATUS_OK
ReadX 13394 70377 640 640 NT_STATUS_OK
ReadX 13394 71017 1280 1280 NT_STATUS_OK
ReadX 13394 72297 8464 8464 NT_STATUS_OK
ReadX 13394 80761 158 158 NT_STATUS_OK
ReadX 13394 80919 912 912 NT_STATUS_OK
ReadX 13394 81831 1980 1980 NT_STATUS_OK
ReadX 13394 83811 2256 2256 NT_STATUS_OK
ReadX 13394 86067 400 400 NT_STATUS_OK
ReadX 13394 86467 252 252 NT_STATUS_OK
ReadX 13394 86719 42 42 NT_STATUS_OK
ReadX 13394 86761 725 725 NT_STATUS_OK
ReadX 13394 2009 512 512 NT_STATUS_OK
ReadX 13394 3895 9 9 NT_STATUS_OK
ReadX 13394 3781 46 46 NT_STATUS_OK
ReadX 13394 4059 92 92 NT_STATUS_OK
ReadX 13394 3781 92 92 NT_STATUS_OK
ReadX 13394 3986 184 184 NT_STATUS_OK
ReadX 13394 3987 16384 16384 NT_STATUS_OK
ReadX 13394 3902 16384 16384 NT_STATUS_OK
ReadX 13394 3781 10240 10240 NT_STATUS_OK
ReadX 13394 3821 16384 16384 NT_STATUS_OK
ReadX 13394 3891 935 935 NT_STATUS_OK
ReadX 13394 4060 10240 10240 NT_STATUS_OK
ReadX 13394 4059 184 184 NT_STATUS_OK
ReadX 13394 256 184 184 NT_STATUS_OK
ReadX 13394 256 1026 1026 NT_STATUS_OK
ReadX 13394 3901 326 326 NT_STATUS_OK
ReadX 13394 3899 652 652 NT_STATUS_OK
ReadX 13394 256 2 2 NT_STATUS_OK
ReadX 13394 258 4948 4948 NT_STATUS_OK
Close 13394 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13409 NT_STATUS_OK
Close 13409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13412 NT_STATUS_OK
WriteX 13412 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13412 258 NT_STATUS_OK
WriteX 13412 0 65536 65536 NT_STATUS_OK
WriteX 13412 65536 65536 65536 NT_STATUS_OK
WriteX 13412 131072 65536 65536 NT_STATUS_OK
WriteX 13412 196608 65536 65536 NT_STATUS_OK
WriteX 13412 262144 65536 65536 NT_STATUS_OK
WriteX 13412 327680 65536 65536 NT_STATUS_OK
WriteX 13412 393216 65536 65536 NT_STATUS_OK
WriteX 13412 458752 65536 65536 NT_STATUS_OK
WriteX 13412 524288 65536 65536 NT_STATUS_OK
WriteX 13412 589824 35257 35257 NT_STATUS_OK
Close 13412 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13414 NT_STATUS_OK
Close 13414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13417 NT_STATUS_OK
WriteX 13417 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13417 258 NT_STATUS_OK
WriteX 13417 0 65536 65536 NT_STATUS_OK
WriteX 13417 65536 65536 65536 NT_STATUS_OK
WriteX 13417 131072 65536 65536 NT_STATUS_OK
WriteX 13417 196608 65536 65536 NT_STATUS_OK
WriteX 13417 262144 65536 65536 NT_STATUS_OK
WriteX 13417 327680 65536 65536 NT_STATUS_OK
WriteX 13417 393216 65536 65536 NT_STATUS_OK
WriteX 13417 458752 65536 65536 NT_STATUS_OK
WriteX 13417 524288 65536 65536 NT_STATUS_OK
WriteX 13417 589824 57598 57598 NT_STATUS_OK
Close 13417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13419 NT_STATUS_OK
WriteX 13419 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13419 258 NT_STATUS_OK
WriteX 13419 0 12543 12543 NT_STATUS_OK
Flush 13419 NT_STATUS_OK
Close 13419 NT_STATUS_OK
Close 13403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13421 NT_STATUS_OK
Close 13421 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13423 NT_STATUS_OK
ReadX 13423 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13424 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13425 NT_STATUS_OK
QUERY_FILE_INFORMATION 13425 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13425 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13425 1005 NT_STATUS_OK
ReadX 13425 1938 24 24 NT_STATUS_OK
ReadX 13425 1920 276 276 NT_STATUS_OK
ReadX 13425 1918 14 14 NT_STATUS_OK
ReadX 13425 1918 7 7 NT_STATUS_OK
ReadX 13425 1919 12 12 NT_STATUS_OK
ReadX 13425 1919 8 8 NT_STATUS_OK
ReadX 13425 1917 15 15 NT_STATUS_OK
ReadX 13425 0 16 16 NT_STATUS_OK
ReadX 13425 16 2048 2048 NT_STATUS_OK
ReadX 13425 2064 2048 2048 NT_STATUS_OK
ReadX 13425 257 2048 2048 NT_STATUS_OK
ReadX 13425 385 2048 2048 NT_STATUS_OK
ReadX 13425 513 2048 2048 NT_STATUS_OK
ReadX 13425 641 2048 2048 NT_STATUS_OK
ReadX 13425 769 2048 2048 NT_STATUS_OK
ReadX 13425 897 2048 2048 NT_STATUS_OK
ReadX 13425 1025 2048 2048 NT_STATUS_OK
ReadX 13425 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13427 NT_STATUS_OK
Close 13427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13430 NT_STATUS_OK
WriteX 13430 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13430 258 NT_STATUS_OK
WriteX 13430 0 11588 11588 NT_STATUS_OK
Flush 13430 NT_STATUS_OK
Close 13430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13431 NT_STATUS_OK
Close 13431 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13433 NT_STATUS_OK
ReadX 13433 0 4096 4096 NT_STATUS_OK
Close 13425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13435 NT_STATUS_OK
WriteX 13435 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13435 258 NT_STATUS_OK
WriteX 13435 0 11615 11615 NT_STATUS_OK
Flush 13435 NT_STATUS_OK
Close 13435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13437 NT_STATUS_OK
Close 13437 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13439 NT_STATUS_OK
ReadX 13439 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13441 NT_STATUS_OK
Close 13441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13444 NT_STATUS_OK
WriteX 13444 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13444 258 NT_STATUS_OK
WriteX 13444 0 65536 65536 NT_STATUS_OK
WriteX 13444 65536 16050 16050 NT_STATUS_OK
Close 13444 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13424 1939 64 64 NT_STATUS_OK
ReadX 13424 128 248 248 NT_STATUS_OK
ReadX 13424 128 568 568 NT_STATUS_OK
ReadX 13424 3872 1536 1536 NT_STATUS_OK
ReadX 13424 3456 2560 2560 NT_STATUS_OK
ReadX 13424 3136 512 512 NT_STATUS_OK
ReadX 13424 2880 4096 4096 NT_STATUS_OK
ReadX 13424 3264 3072 3072 NT_STATUS_OK
ReadX 13424 320 4096 4096 NT_STATUS_OK
ReadX 13424 1024 4096 4096 NT_STATUS_OK
ReadX 13424 3616 4096 4096 NT_STATUS_OK
ReadX 13424 1939 64 64 NT_STATUS_OK
ReadX 13424 128 248 248 NT_STATUS_OK
ReadX 13424 128 608 608 NT_STATUS_OK
ReadX 13424 2858 1024 1024 NT_STATUS_OK
ReadX 13424 2810 4096 4096 NT_STATUS_OK
ReadX 13424 2826 4096 4096 NT_STATUS_OK
ReadX 13424 2580 2048 2048 NT_STATUS_OK
ReadX 13424 2800 2560 2560 NT_STATUS_OK
ReadX 13424 2100 4096 4096 NT_STATUS_OK
ReadX 13424 2084 4096 4096 NT_STATUS_OK
ReadX 13424 868 4096 4096 NT_STATUS_OK
ReadX 13424 2324 4096 4096 NT_STATUS_OK
ReadX 13424 884 4096 4096 NT_STATUS_OK
ReadX 13424 2604 1024 1024 NT_STATUS_OK
ReadX 13424 580 4096 4096 NT_STATUS_OK
ReadX 13424 596 4096 4096 NT_STATUS_OK
ReadX 13424 2752 4096 4096 NT_STATUS_OK
ReadX 13424 2842 1024 1024 NT_STATUS_OK
ReadX 13424 660 4096 4096 NT_STATUS_OK
ReadX 13424 2720 4096 4096 NT_STATUS_OK
ReadX 13424 2736 4096 4096 NT_STATUS_OK
ReadX 13424 628 4096 4096 NT_STATUS_OK
ReadX 13424 2704 4096 4096 NT_STATUS_OK
ReadX 13424 1556 4096 4096 NT_STATUS_OK
ReadX 13424 576 4096 4096 NT_STATUS_OK
ReadX 13424 3168 1536 1536 NT_STATUS_OK
ReadX 13424 832 4096 4096 NT_STATUS_OK
ReadX 13424 1088 4096 4096 NT_STATUS_OK
ReadX 13424 1344 4096 4096 NT_STATUS_OK
ReadX 13424 1600 4096 4096 NT_STATUS_OK
ReadX 13424 1856 4096 4096 NT_STATUS_OK
ReadX 13424 2112 4096 4096 NT_STATUS_OK
ReadX 13424 1892 4096 4096 NT_STATUS_OK
ReadX 13424 820 4096 4096 NT_STATUS_OK
ReadX 13424 788 4096 4096 NT_STATUS_OK
ReadX 13424 1604 4096 4096 NT_STATUS_OK
ReadX 13424 3648 4096 4096 NT_STATUS_OK
ReadX 13424 2608 4096 4096 NT_STATUS_OK
ReadX 13424 548 4096 4096 NT_STATUS_OK
ReadX 13424 740 4096 4096 NT_STATUS_OK
ReadX 13424 1344 4096 4096 NT_STATUS_OK
ReadX 13424 3392 4096 4096 NT_STATUS_OK
ReadX 13424 3904 4096 4096 NT_STATUS_OK
ReadX 13424 644 4096 4096 NT_STATUS_OK
ReadX 13424 676 4096 4096 NT_STATUS_OK
ReadX 13424 2688 4096 4096 NT_STATUS_OK
ReadX 13424 320 4096 4096 NT_STATUS_OK
ReadX 13424 900 4096 4096 NT_STATUS_OK
ReadX 13424 1908 4096 4096 NT_STATUS_OK
ReadX 13424 852 4096 4096 NT_STATUS_OK
ReadX 13424 724 4096 4096 NT_STATUS_OK
ReadX 13424 2292 4096 4096 NT_STATUS_OK
ReadX 13424 612 4096 4096 NT_STATUS_OK
ReadX 13424 388 4096 4096 NT_STATUS_OK
ReadX 13424 2368 4096 4096 NT_STATUS_OK
ReadX 13424 2624 4096 4096 NT_STATUS_OK
ReadX 13424 500 4096 4096 NT_STATUS_OK
ReadX 13424 356 4096 4096 NT_STATUS_OK
ReadX 13424 1024 4096 4096 NT_STATUS_OK
ReadX 13424 576 4096 4096 NT_STATUS_OK
ReadX 13424 340 4096 4096 NT_STATUS_OK
ReadX 13424 420 4096 4096 NT_STATUS_OK
ReadX 13424 1600 4096 4096 NT_STATUS_OK
ReadX 13424 404 4096 4096 NT_STATUS_OK
ReadX 13424 1428 4096 4096 NT_STATUS_OK
ReadX 13424 2656 4096 4096 NT_STATUS_OK
ReadX 13424 2624 4096 4096 NT_STATUS_OK
ReadX 13424 452 4096 4096 NT_STATUS_OK
ReadX 13424 692 4096 4096 NT_STATUS_OK
ReadX 13424 564 4096 4096 NT_STATUS_OK
ReadX 13424 372 4096 4096 NT_STATUS_OK
ReadX 13424 468 4096 4096 NT_STATUS_OK
ReadX 13424 484 4096 4096 NT_STATUS_OK
ReadX 13424 1088 4096 4096 NT_STATUS_OK
ReadX 13424 1924 4096 4096 NT_STATUS_OK
ReadX 13424 2768 4096 4096 NT_STATUS_OK
ReadX 13424 832 4096 4096 NT_STATUS_OK
ReadX 13424 836 4096 4096 NT_STATUS_OK
ReadX 13424 1856 4096 4096 NT_STATUS_OK
ReadX 13424 2640 4096 4096 NT_STATUS_OK
ReadX 13424 436 4096 4096 NT_STATUS_OK
ReadX 13424 1828 4096 4096 NT_STATUS_OK
ReadX 13424 804 4096 4096 NT_STATUS_OK
ReadX 13424 1860 4096 4096 NT_STATUS_OK
ReadX 13424 1812 4096 4096 NT_STATUS_OK
ReadX 13424 756 4096 4096 NT_STATUS_OK
ReadX 13424 1636 4096 4096 NT_STATUS_OK
ReadX 13424 772 4096 4096 NT_STATUS_OK
ReadX 13424 2036 4096 4096 NT_STATUS_OK
ReadX 13424 1220 4096 4096 NT_STATUS_OK
ReadX 13424 1652 4096 4096 NT_STATUS_OK
ReadX 13424 2588 4096 4096 NT_STATUS_OK
ReadX 13424 916 4096 4096 NT_STATUS_OK
ReadX 13424 260 4096 4096 NT_STATUS_OK
ReadX 13424 932 4096 4096 NT_STATUS_OK
ReadX 13424 2624 4096 4096 NT_STATUS_OK
ReadX 13424 308 4096 4096 NT_STATUS_OK
ReadX 13424 292 4096 4096 NT_STATUS_OK
ReadX 13424 1140 4096 4096 NT_STATUS_OK
ReadX 13424 276 4096 4096 NT_STATUS_OK
ReadX 13424 2020 4096 4096 NT_STATUS_OK
ReadX 13424 2880 4096 4096 NT_STATUS_OK
ReadX 13424 516 4096 4096 NT_STATUS_OK
ReadX 13424 1844 4096 4096 NT_STATUS_OK
ReadX 13424 1124 4096 4096 NT_STATUS_OK
ReadX 13424 3136 4096 4096 NT_STATUS_OK
ReadX 13424 324 4096 4096 NT_STATUS_OK
ReadX 13424 1156 4096 4096 NT_STATUS_OK
ReadX 13424 1172 4096 4096 NT_STATUS_OK
ReadX 13424 2112 4096 4096 NT_STATUS_OK
ReadX 13424 2368 4096 4096 NT_STATUS_OK
ReadX 13424 964 4096 4096 NT_STATUS_OK
ReadX 13424 980 4096 4096 NT_STATUS_OK
ReadX 13424 1012 4096 4096 NT_STATUS_OK
ReadX 13424 532 4096 4096 NT_STATUS_OK
ReadX 13424 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13424 1620 4096 4096 NT_STATUS_OK
ReadX 13424 1604 4096 4096 NT_STATUS_OK
ReadX 13424 2116 4096 4096 NT_STATUS_OK
ReadX 13424 2132 4096 4096 NT_STATUS_OK
ReadX 13424 2148 4096 4096 NT_STATUS_OK
ReadX 13424 2276 4096 4096 NT_STATUS_OK
ReadX 13424 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13446 NT_STATUS_OK
Close 13446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13449 NT_STATUS_OK
QUERY_FILE_INFORMATION 13404 1004 NT_STATUS_OK
Close 13404 NT_STATUS_OK
WriteX 13449 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13449 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13406 1004 NT_STATUS_OK
Close 13406 NT_STATUS_OK
WriteX 13449 0 65536 65536 NT_STATUS_OK
WriteX 13449 65536 64850 64850 NT_STATUS_OK
Close 13449 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13451 NT_STATUS_OK
WriteX 13451 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13451 258 NT_STATUS_OK
ReadX 13424 2068 4096 4096 NT_STATUS_OK
ReadX 13424 1588 4096 4096 NT_STATUS_OK
ReadX 13424 1572 4096 4096 NT_STATUS_OK
WriteX 13451 0 18630 18630 NT_STATUS_OK
Flush 13451 NT_STATUS_OK
Close 13451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13453 NT_STATUS_OK
Close 13453 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13455 NT_STATUS_OK
ReadX 13455 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13424 612 4096 4096 NT_STATUS_OK
ReadX 13424 564 4096 4096 NT_STATUS_OK
ReadX 13424 1876 4096 4096 NT_STATUS_OK
ReadX 13424 628 4096 4096 NT_STATUS_OK
ReadX 13424 740 4096 4096 NT_STATUS_OK
ReadX 13424 724 4096 4096 NT_STATUS_OK
ReadX 13424 644 4096 4096 NT_STATUS_OK
ReadX 13424 2324 4096 4096 NT_STATUS_OK
ReadX 13424 660 4096 4096 NT_STATUS_OK
ReadX 13424 852 4096 4096 NT_STATUS_OK
ReadX 13424 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13424 2368 4096 4096 NT_STATUS_OK
ReadX 13424 1024 4096 4096 NT_STATUS_OK
ReadX 13424 320 4096 4096 NT_STATUS_OK
ReadX 13424 580 4096 4096 NT_STATUS_OK
ReadX 13424 3136 512 512 NT_STATUS_OK
ReadX 13424 2880 4096 4096 NT_STATUS_OK
Close 13424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13456 NT_STATUS_OK
ReadX 13456 61440 4096 4096 NT_STATUS_OK
ReadX 13456 126976 4096 4096 NT_STATUS_OK
WriteX 13456 0 65536 65536 NT_STATUS_OK
WriteX 13456 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13457 NT_STATUS_OK
ReadX 13457 61440 4096 4096 NT_STATUS_OK
ReadX 13457 126976 4096 4096 NT_STATUS_OK
ReadX 13457 192512 4096 4096 NT_STATUS_OK
ReadX 13457 258048 4096 4096 NT_STATUS_OK
WriteX 13457 0 65536 65536 NT_STATUS_OK
WriteX 13457 65536 65536 65536 NT_STATUS_OK
WriteX 13457 131072 65536 65536 NT_STATUS_OK
WriteX 13457 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13458 NT_STATUS_OK
ReadX 13458 61440 4096 4096 NT_STATUS_OK
ReadX 13458 126976 4096 4096 NT_STATUS_OK
ReadX 13458 192512 4096 4096 NT_STATUS_OK
ReadX 13458 258048 4096 4096 NT_STATUS_OK
ReadX 13458 323584 4096 4096 NT_STATUS_OK
ReadX 13458 389120 4096 4096 NT_STATUS_OK
ReadX 13458 454656 4096 4096 NT_STATUS_OK
ReadX 13458 520192 4096 4096 NT_STATUS_OK
WriteX 13458 0 65536 65536 NT_STATUS_OK
WriteX 13458 65536 65536 65536 NT_STATUS_OK
WriteX 13458 131072 65536 65536 NT_STATUS_OK
WriteX 13458 196608 65536 65536 NT_STATUS_OK
WriteX 13458 262144 65536 65536 NT_STATUS_OK
WriteX 13458 327680 65536 65536 NT_STATUS_OK
WriteX 13458 393216 65536 65536 NT_STATUS_OK
WriteX 13458 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13459 NT_STATUS_OK
ReadX 13459 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13460 NT_STATUS_OK
Close 13460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13461 NT_STATUS_OK
WriteX 13461 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13461 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13459 0 8192 8192 NT_STATUS_OK
Flush 13459 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13459 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13459 0 8192 8192 NT_STATUS_OK
Flush 13459 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13459 0 8192 8192 NT_STATUS_OK
Flush 13459 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13459 0 8192 8192 NT_STATUS_OK
Flush 13459 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13463 NT_STATUS_OK
Close 13463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13455 NT_STATUS_OK
Close 13423 NT_STATUS_OK
Close 13456 NT_STATUS_OK
Close 13457 NT_STATUS_OK
Close 13458 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13466 NT_STATUS_OK
WriteX 13466 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13466 258 NT_STATUS_OK
WriteX 13466 0 62591 62591 NT_STATUS_OK
Close 13466 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13468 NT_STATUS_OK
Close 13468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13471 NT_STATUS_OK
WriteX 13471 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13471 258 NT_STATUS_OK
WriteX 13471 0 10845 10845 NT_STATUS_OK
Close 13471 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13473 NT_STATUS_OK
Close 13473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13476 NT_STATUS_OK
WriteX 13476 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13476 258 NT_STATUS_OK
WriteX 13476 0 30118 30118 NT_STATUS_OK
Close 13476 NT_STATUS_OK
WriteX 13459 0 4096 4096 NT_STATUS_OK
WriteX 13461 0 64 64 NT_STATUS_OK
Close 13461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13459 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13478 NT_STATUS_OK
ReadX 13478 0 61440 61440 NT_STATUS_OK
ReadX 13478 61440 4096 4096 NT_STATUS_OK
ReadX 13478 65536 61440 61440 NT_STATUS_OK
ReadX 13478 126976 4096 4096 NT_STATUS_OK
ReadX 13478 131072 61440 61440 NT_STATUS_OK
ReadX 13478 192512 4096 4096 NT_STATUS_OK
ReadX 13478 196608 61440 61440 NT_STATUS_OK
ReadX 13478 258048 4096 4096 NT_STATUS_OK
ReadX 13478 262144 61440 61440 NT_STATUS_OK
ReadX 13478 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13479 NT_STATUS_OK
ReadX 13479 0 61440 61440 NT_STATUS_OK
ReadX 13479 61440 4096 4096 NT_STATUS_OK
ReadX 13479 65536 61440 61440 NT_STATUS_OK
ReadX 13479 126976 4096 4096 NT_STATUS_OK
ReadX 13479 131072 61440 61440 NT_STATUS_OK
ReadX 13479 192512 4096 4096 NT_STATUS_OK
ReadX 13479 196608 61440 61440 NT_STATUS_OK
ReadX 13479 258048 4096 4096 NT_STATUS_OK
ReadX 13479 262144 61440 61440 NT_STATUS_OK
ReadX 13479 323584 4096 4096 NT_STATUS_OK
ReadX 13479 327680 61440 61440 NT_STATUS_OK
ReadX 13479 389120 4096 4096 NT_STATUS_OK
ReadX 13479 393216 61440 61440 NT_STATUS_OK
ReadX 13479 454656 4096 4096 NT_STATUS_OK
ReadX 13479 458752 61440 61440 NT_STATUS_OK
ReadX 13479 520192 4096 4096 NT_STATUS_OK
ReadX 13479 524288 61440 61440 NT_STATUS_OK
ReadX 13479 585728 4096 4096 NT_STATUS_OK
ReadX 13479 589824 61440 61440 NT_STATUS_OK
ReadX 13479 651264 4096 4096 NT_STATUS_OK
ReadX 13479 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13480 NT_STATUS_OK
ReadX 13480 0 61440 61440 NT_STATUS_OK
ReadX 13480 61440 4096 4096 NT_STATUS_OK
ReadX 13480 65536 61440 61440 NT_STATUS_OK
ReadX 13480 126976 4096 4096 NT_STATUS_OK
ReadX 13480 131072 61440 61440 NT_STATUS_OK
ReadX 13480 192512 4096 4096 NT_STATUS_OK
ReadX 13480 196608 61440 61440 NT_STATUS_OK
ReadX 13480 258048 4096 4096 NT_STATUS_OK
ReadX 13480 262144 61440 61440 NT_STATUS_OK
ReadX 13480 323584 4096 4096 NT_STATUS_OK
ReadX 13480 327680 61440 61440 NT_STATUS_OK
ReadX 13480 389120 4096 4096 NT_STATUS_OK
ReadX 13480 393216 61440 61440 NT_STATUS_OK
ReadX 13480 454656 4096 4096 NT_STATUS_OK
ReadX 13480 458752 61440 61440 NT_STATUS_OK
ReadX 13480 520192 4096 4096 NT_STATUS_OK
ReadX 13480 524288 61440 61440 NT_STATUS_OK
ReadX 13480 585728 4096 4096 NT_STATUS_OK
ReadX 13480 589824 61440 61440 NT_STATUS_OK
ReadX 13480 651264 4096 4096 NT_STATUS_OK
ReadX 13480 655360 61440 61440 NT_STATUS_OK
ReadX 13480 716800 4096 4096 NT_STATUS_OK
ReadX 13480 720896 61440 61440 NT_STATUS_OK
ReadX 13480 782336 4096 4096 NT_STATUS_OK
ReadX 13480 786432 61440 61440 NT_STATUS_OK
ReadX 13480 847872 4096 4096 NT_STATUS_OK
ReadX 13480 851968 61440 61440 NT_STATUS_OK
ReadX 13480 913408 4096 4096 NT_STATUS_OK
ReadX 13480 917504 61440 61440 NT_STATUS_OK
ReadX 13480 978944 4096 4096 NT_STATUS_OK
ReadX 13480 983040 61440 61440 NT_STATUS_OK
ReadX 13480 1044480 4096 4096 NT_STATUS_OK
ReadX 13480 1048576 61440 61440 NT_STATUS_OK
ReadX 13480 1110016 4096 4096 NT_STATUS_OK
ReadX 13480 1114112 61440 61440 NT_STATUS_OK
ReadX 13480 1175552 4096 4096 NT_STATUS_OK
ReadX 13480 1179648 61440 61440 NT_STATUS_OK
ReadX 13480 1241088 4096 4096 NT_STATUS_OK
ReadX 13480 1245184 61440 61440 NT_STATUS_OK
ReadX 13480 1306624 4096 4096 NT_STATUS_OK
ReadX 13480 1310720 61440 61440 NT_STATUS_OK
ReadX 13480 1372160 4096 4096 NT_STATUS_OK
ReadX 13480 1376256 61440 61440 NT_STATUS_OK
ReadX 13480 1437696 4096 4096 NT_STATUS_OK
ReadX 13480 1441792 61440 61440 NT_STATUS_OK
ReadX 13480 1503232 4096 4096 NT_STATUS_OK
ReadX 13480 1507328 61440 61440 NT_STATUS_OK
ReadX 13480 1568768 4096 4096 NT_STATUS_OK
ReadX 13480 1572864 61440 61440 NT_STATUS_OK
ReadX 13480 1634304 4096 4096 NT_STATUS_OK
ReadX 13480 1638400 61440 61440 NT_STATUS_OK
ReadX 13480 1699840 4096 4096 NT_STATUS_OK
ReadX 13480 1703936 61440 61440 NT_STATUS_OK
ReadX 13480 1765376 4096 4096 NT_STATUS_OK
ReadX 13480 1769472 61440 61440 NT_STATUS_OK
ReadX 13480 1830912 4096 4096 NT_STATUS_OK
ReadX 13480 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13481 NT_STATUS_OK
Close 13481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13478 NT_STATUS_OK
Close 13479 NT_STATUS_OK
Close 13480 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13483 NT_STATUS_OK
ReadX 13483 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13484 NT_STATUS_OK
ReadX 13484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13485 NT_STATUS_OK
ReadX 13485 0 4096 4096 NT_STATUS_OK
ReadX 13485 4096 4096 4096 NT_STATUS_OK
ReadX 13485 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13486 NT_STATUS_OK
Close 13486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13483 NT_STATUS_OK
Close 13484 NT_STATUS_OK
Close 13485 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13488 NT_STATUS_OK
ReadX 13488 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13489 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13489 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13490 NT_STATUS_OK
Close 13490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13488 NT_STATUS_OK
Close 13489 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13492 NT_STATUS_OK
ReadX 13492 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13493 NT_STATUS_OK
ReadX 13493 0 8192 8192 NT_STATUS_OK
ReadX 13493 8192 8192 8192 NT_STATUS_OK
ReadX 13493 16384 8192 8192 NT_STATUS_OK
ReadX 13493 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13495 NT_STATUS_OK
Close 13495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13493 NT_STATUS_OK
Close 13492 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13498 NT_STATUS_OK
WriteX 13498 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13498 258 NT_STATUS_OK
WriteX 13498 0 10438 10438 NT_STATUS_OK
Close 13498 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13499 NT_STATUS_OK
Close 13499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13500 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13501 NT_STATUS_OK
Close 13501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13502 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13503 NT_STATUS_OK
Close 13503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13504 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13505 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13506 NT_STATUS_OK
Close 13506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13507 NT_STATUS_OK
ReadX 13507 0 4096 4096 NT_STATUS_OK
ReadX 13507 4096 4096 4096 NT_STATUS_OK
ReadX 13507 8192 4096 4096 NT_STATUS_OK
ReadX 13507 12288 8192 8192 NT_STATUS_OK
ReadX 13507 20480 8192 8192 NT_STATUS_OK
ReadX 13507 28672 8192 8192 NT_STATUS_OK
ReadX 13507 36864 8192 8192 NT_STATUS_OK
ReadX 13507 45056 8192 8192 NT_STATUS_OK
ReadX 13507 53248 8192 8192 NT_STATUS_OK
ReadX 13507 61440 8192 8192 NT_STATUS_OK
ReadX 13507 69632 8192 8192 NT_STATUS_OK
ReadX 13507 77824 8192 8192 NT_STATUS_OK
ReadX 13507 86016 8192 8192 NT_STATUS_OK
ReadX 13507 94208 8192 8192 NT_STATUS_OK
ReadX 13507 102400 8192 8192 NT_STATUS_OK
ReadX 13507 110592 8192 8192 NT_STATUS_OK
ReadX 13507 118784 8192 8192 NT_STATUS_OK
ReadX 13507 126976 8192 8192 NT_STATUS_OK
ReadX 13507 135168 8192 8192 NT_STATUS_OK
ReadX 13507 143360 8192 8192 NT_STATUS_OK
ReadX 13507 151552 8192 8192 NT_STATUS_OK
ReadX 13507 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13507 NT_STATUS_OK
Close 13500 NT_STATUS_OK
Close 13502 NT_STATUS_OK
Close 13504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13509 NT_STATUS_OK
Close 13509 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13512 NT_STATUS_OK
WriteX 13512 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13512 258 NT_STATUS_OK
WriteX 13512 0 28489 28489 NT_STATUS_OK
Close 13512 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13513 NT_STATUS_OK
Close 13513 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13515 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13515 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13516 NT_STATUS_OK
Close 13516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13515 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13518 NT_STATUS_OK
ReadX 13518 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13519 NT_STATUS_OK
ReadX 13519 0 8192 8192 NT_STATUS_OK
ReadX 13519 8192 8192 8192 NT_STATUS_OK
ReadX 13519 16384 8192 8192 NT_STATUS_OK
ReadX 13519 24576 8192 8192 NT_STATUS_OK
ReadX 13519 32768 16384 16384 NT_STATUS_OK
ReadX 13519 49152 8192 8192 NT_STATUS_OK
ReadX 13519 57344 8192 8192 NT_STATUS_OK
ReadX 13519 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13521 NT_STATUS_OK
Close 13521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13519 NT_STATUS_OK
Close 13518 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13524 NT_STATUS_OK
WriteX 13524 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13524 258 NT_STATUS_OK
WriteX 13524 0 29253 29253 NT_STATUS_OK
Close 13524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13525 NT_STATUS_OK
Close 13525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13526 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13528 NT_STATUS_OK
Close 13528 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13531 NT_STATUS_OK
WriteX 13531 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13531 258 NT_STATUS_OK
WriteX 13531 0 30183 30183 NT_STATUS_OK
Close 13531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13532 NT_STATUS_OK
Close 13532 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13534 NT_STATUS_OK
WriteX 13534 0 510 510 NT_STATUS_OK
WriteX 13534 510 512 512 NT_STATUS_OK
WriteX 13534 1022 510 510 NT_STATUS_OK
WriteX 13534 1532 510 510 NT_STATUS_OK
WriteX 13534 2042 168 168 NT_STATUS_OK
Close 13534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13535 NT_STATUS_OK
Close 13535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13537 NT_STATUS_OK
ReadX 13537 0 4096 4096 NT_STATUS_OK
WriteX 13537 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13538 NT_STATUS_OK
ReadX 13538 61440 4096 4096 NT_STATUS_OK
ReadX 13538 126976 4096 4096 NT_STATUS_OK
WriteX 13538 0 65536 65536 NT_STATUS_OK
WriteX 13538 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13539 NT_STATUS_OK
ReadX 13539 61440 4096 4096 NT_STATUS_OK
ReadX 13539 126976 4096 4096 NT_STATUS_OK
ReadX 13539 192512 4096 4096 NT_STATUS_OK
ReadX 13539 258048 4096 4096 NT_STATUS_OK
WriteX 13539 0 65536 65536 NT_STATUS_OK
WriteX 13539 65536 65536 65536 NT_STATUS_OK
WriteX 13539 131072 65536 65536 NT_STATUS_OK
WriteX 13539 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13540 NT_STATUS_OK
ReadX 13540 61440 4096 4096 NT_STATUS_OK
ReadX 13540 126976 4096 4096 NT_STATUS_OK
ReadX 13540 192512 4096 4096 NT_STATUS_OK
ReadX 13540 258048 4096 4096 NT_STATUS_OK
ReadX 13540 323584 4096 4096 NT_STATUS_OK
ReadX 13540 389120 4096 4096 NT_STATUS_OK
ReadX 13540 454656 4096 4096 NT_STATUS_OK
ReadX 13540 520192 4096 4096 NT_STATUS_OK
WriteX 13540 0 65536 65536 NT_STATUS_OK
WriteX 13540 65536 65536 65536 NT_STATUS_OK
WriteX 13540 131072 65536 65536 NT_STATUS_OK
WriteX 13540 196608 65536 65536 NT_STATUS_OK
WriteX 13540 262144 65536 65536 NT_STATUS_OK
WriteX 13540 327680 65536 65536 NT_STATUS_OK
WriteX 13540 393216 65536 65536 NT_STATUS_OK
WriteX 13540 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13541 NT_STATUS_OK
Close 13541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13537 NT_STATUS_OK
Close 13538 NT_STATUS_OK
Close 13539 NT_STATUS_OK
Close 13540 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13543 NT_STATUS_OK
Close 13543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13547 NT_STATUS_OK
Close 13547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13550 NT_STATUS_OK
Close 13550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13552 NT_STATUS_OK
Close 13552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13556 NT_STATUS_OK
Close 13556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13559 NT_STATUS_OK
Close 13559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13561 NT_STATUS_OK
Close 13561 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13565 NT_STATUS_OK
Close 13565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13570 NT_STATUS_OK
Close 13570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13575 NT_STATUS_OK
Close 13575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13580 NT_STATUS_OK
Close 13580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13585 NT_STATUS_OK
Close 13585 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13590 NT_STATUS_OK
Close 13590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13595 NT_STATUS_OK
Close 13595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13600 NT_STATUS_OK
Close 13600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13603 NT_STATUS_OK
Close 13603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13606 NT_STATUS_OK
Close 13606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13609 NT_STATUS_OK
WriteX 13609 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13609 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13609 0 65536 65536 NT_STATUS_OK
WriteX 13609 65536 65536 65536 NT_STATUS_OK
WriteX 13609 131072 65536 65536 NT_STATUS_OK
WriteX 13609 196608 65536 65536 NT_STATUS_OK
WriteX 13609 262144 26634 26634 NT_STATUS_OK
Close 13609 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13614 NT_STATUS_OK
Close 13614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13615 NT_STATUS_OK
Close 13615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13616 NT_STATUS_OK
ReadX 13616 0 4096 4096 NT_STATUS_OK
Close 13616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13617 NT_STATUS_OK
ReadX 13617 0 4096 4096 NT_STATUS_OK
ReadX 13617 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13618 NT_STATUS_OK
Close 13618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13617 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13622 NT_STATUS_OK
Close 13622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13625 NT_STATUS_OK
Close 13625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13627 NT_STATUS_OK
Close 13627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13631 NT_STATUS_OK
Close 13631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13634 NT_STATUS_OK
Close 13634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13636 NT_STATUS_OK
Close 13636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13640 NT_STATUS_OK
Close 13640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13645 NT_STATUS_OK
Close 13645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13650 NT_STATUS_OK
Close 13650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13655 NT_STATUS_OK
Close 13655 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13660 NT_STATUS_OK
Close 13660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13665 NT_STATUS_OK
Close 13665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13669 NT_STATUS_OK
Close 13669 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13674 NT_STATUS_OK
Close 13674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13679 NT_STATUS_OK
Close 13679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13682 NT_STATUS_OK
Close 13682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13684 NT_STATUS_OK
Close 13684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13694 NT_STATUS_OK
Close 13694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13695 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13696 NT_STATUS_OK
ReadX 13696 0 4096 4096 NT_STATUS_OK
Close 13696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13697 NT_STATUS_OK
ReadX 13697 0 4096 4096 NT_STATUS_OK
Close 13697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13698 NT_STATUS_OK
ReadX 13698 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13708 NT_STATUS_OK
Close 13708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13709 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13710 NT_STATUS_OK
ReadX 13710 0 4096 4096 NT_STATUS_OK
Close 13710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13711 NT_STATUS_OK
ReadX 13711 0 4096 4096 NT_STATUS_OK
Close 13711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13712 NT_STATUS_OK
ReadX 13712 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13698 NT_STATUS_OK
Close 13712 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13741 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13741 0 4096 4096 NT_STATUS_OK
Close 13741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13742 NT_STATUS_OK
ReadX 13742 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13743 NT_STATUS_OK
ReadX 13743 0 4096 4096 NT_STATUS_OK
ReadX 13743 4096 4096 4096 NT_STATUS_OK
ReadX 13743 8192 4096 4096 NT_STATUS_OK
ReadX 13743 12288 4096 4096 NT_STATUS_OK
ReadX 13743 16384 4096 4096 NT_STATUS_OK
ReadX 13743 20480 4096 4096 NT_STATUS_OK
ReadX 13743 24576 4096 4096 NT_STATUS_OK
ReadX 13743 28672 4096 4096 NT_STATUS_OK
ReadX 13743 32768 4096 4096 NT_STATUS_OK
ReadX 13743 36864 4096 4096 NT_STATUS_OK
ReadX 13743 40960 4096 4096 NT_STATUS_OK
ReadX 13743 45056 4096 4096 NT_STATUS_OK
ReadX 13743 49152 4096 4096 NT_STATUS_OK
ReadX 13743 53248 4096 4096 NT_STATUS_OK
ReadX 13743 57344 4096 4096 NT_STATUS_OK
ReadX 13743 61440 4096 4096 NT_STATUS_OK
ReadX 13743 65536 4096 4096 NT_STATUS_OK
ReadX 13743 69632 4096 4096 NT_STATUS_OK
ReadX 13743 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13743 1004 NT_STATUS_OK
WriteX 13743 0 4096 4096 NT_STATUS_OK
Close 13743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13744 NT_STATUS_OK
SET_FILE_INFORMATION 13744 1004 NT_STATUS_OK
Close 13744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13745 NT_STATUS_OK
ReadX 13745 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13746 NT_STATUS_OK
Close 13746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13749 NT_STATUS_OK
WriteX 13749 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13749 258 NT_STATUS_OK
WriteX 13749 0 65536 65536 NT_STATUS_OK
WriteX 13749 65536 19979 19979 NT_STATUS_OK
Close 13749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13750 NT_STATUS_OK
ReadX 13750 0 4096 4096 NT_STATUS_OK
WriteX 13750 0 4096 4096 NT_STATUS_OK
Flush 13750 NT_STATUS_OK
WriteX 13750 0 4096 4096 NT_STATUS_OK
Flush 13750 NT_STATUS_OK
QUERY_FILE_INFORMATION 13750 1004 NT_STATUS_OK
WriteX 13750 0 4096 4096 NT_STATUS_OK
Flush 13750 NT_STATUS_OK
WriteX 13750 0 4096 4096 NT_STATUS_OK
Flush 13750 NT_STATUS_OK
WriteX 13750 0 4096 4096 NT_STATUS_OK
Flush 13750 NT_STATUS_OK
SET_FILE_INFORMATION 13750 1004 NT_STATUS_OK
WriteX 13750 0 4096 4096 NT_STATUS_OK
Flush 13750 NT_STATUS_OK
Close 13750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13751 NT_STATUS_OK
ReadX 13751 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13752 NT_STATUS_OK
ReadX 13752 0 4096 4096 NT_STATUS_OK
Close 13751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13753 NT_STATUS_OK
ReadX 13753 0 4096 4096 NT_STATUS_OK
Close 13753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13754 NT_STATUS_OK
ReadX 13754 0 4096 4096 NT_STATUS_OK
Close 13754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13755 NT_STATUS_OK
ReadX 13755 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13755 1004 NT_STATUS_OK
WriteX 13755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13756 NT_STATUS_OK
Close 13756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13752 NT_STATUS_OK
Close 13755 NT_STATUS_OK
Close 13745 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13758 NT_STATUS_OK
Close 13758 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13761 NT_STATUS_OK
WriteX 13761 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13761 258 NT_STATUS_OK
WriteX 13761 0 65536 65536 NT_STATUS_OK
WriteX 13761 65536 17654 17654 NT_STATUS_OK
Close 13761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13762 NT_STATUS_OK
ReadX 13762 0 4096 4096 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
QUERY_FILE_INFORMATION 13762 1004 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
SET_FILE_INFORMATION 13762 1004 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
Close 13762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13763 NT_STATUS_OK
SET_FILE_INFORMATION 13763 1004 NT_STATUS_OK
Close 13763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13764 NT_STATUS_OK
ReadX 13764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13765 NT_STATUS_OK
Close 13765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13767 NT_STATUS_OK
ReadX 13767 0 4096 4096 NT_STATUS_OK
ReadX 13767 4096 4096 4096 NT_STATUS_OK
ReadX 13767 8192 4096 4096 NT_STATUS_OK
ReadX 13767 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13767 16384 4096 4096 NT_STATUS_OK
ReadX 13767 20480 4096 4096 NT_STATUS_OK
ReadX 13767 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13764 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13768 NT_STATUS_OK
ReadX 13768 0 4096 4096 NT_STATUS_OK
Close 13768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13769 NT_STATUS_OK
ReadX 13769 0 4096 4096 NT_STATUS_OK
Close 13769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13770 NT_STATUS_OK
ReadX 13770 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13770 1004 NT_STATUS_OK
WriteX 13770 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13771 NT_STATUS_OK
Close 13771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13770 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13773 NT_STATUS_OK
Close 13773 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13776 NT_STATUS_OK
WriteX 13776 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13776 258 NT_STATUS_OK
WriteX 13776 0 65536 65536 NT_STATUS_OK
WriteX 13776 65536 19490 19490 NT_STATUS_OK
Close 13776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13777 NT_STATUS_OK
ReadX 13777 0 4096 4096 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
QUERY_FILE_INFORMATION 13777 1004 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
SET_FILE_INFORMATION 13777 1004 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
Close 13777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13778 NT_STATUS_OK
SET_FILE_INFORMATION 13778 1004 NT_STATUS_OK
Close 13778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13779 NT_STATUS_OK
ReadX 13779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13780 NT_STATUS_OK
Close 13780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13782 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13782 0 4096 4096 NT_STATUS_OK
Close 13782 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13783 NT_STATUS_OK
ReadX 13783 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13784 NT_STATUS_OK
ReadX 13784 0 4096 4096 NT_STATUS_OK
ReadX 13784 4096 4096 4096 NT_STATUS_OK
ReadX 13784 8192 4096 4096 NT_STATUS_OK
ReadX 13784 12288 4096 4096 NT_STATUS_OK
ReadX 13784 16384 4096 4096 NT_STATUS_OK
ReadX 13784 20480 4096 4096 NT_STATUS_OK
ReadX 13784 24576 4096 4096 NT_STATUS_OK
ReadX 13784 28672 4096 4096 NT_STATUS_OK
ReadX 13784 32768 4096 4096 NT_STATUS_OK
ReadX 13784 36864 4096 4096 NT_STATUS_OK
ReadX 13784 40960 4096 4096 NT_STATUS_OK
ReadX 13784 45056 4096 4096 NT_STATUS_OK
ReadX 13784 49152 4096 4096 NT_STATUS_OK
ReadX 13784 53248 4096 4096 NT_STATUS_OK
ReadX 13784 57344 4096 4096 NT_STATUS_OK
ReadX 13784 61440 4096 4096 NT_STATUS_OK
ReadX 13784 65536 4096 4096 NT_STATUS_OK
ReadX 13784 69632 4096 4096 NT_STATUS_OK
ReadX 13784 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13784 1004 NT_STATUS_OK
WriteX 13784 0 4096 4096 NT_STATUS_OK
Close 13784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13785 NT_STATUS_OK
SET_FILE_INFORMATION 13785 1004 NT_STATUS_OK
Close 13785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13786 NT_STATUS_OK
ReadX 13786 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13787 NT_STATUS_OK
Close 13787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13779 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13790 NT_STATUS_OK
WriteX 13790 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13790 258 NT_STATUS_OK
WriteX 13790 0 65536 65536 NT_STATUS_OK
WriteX 13790 65536 8866 8866 NT_STATUS_OK
Close 13790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13791 NT_STATUS_OK
ReadX 13791 0 4096 4096 NT_STATUS_OK
WriteX 13791 0 4096 4096 NT_STATUS_OK
Flush 13791 NT_STATUS_OK
SET_FILE_INFORMATION 13791 1004 NT_STATUS_OK
WriteX 13791 0 4096 4096 NT_STATUS_OK
Flush 13791 NT_STATUS_OK
Close 13791 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13793 NT_STATUS_OK
ReadX 13793 0 4096 4096 NT_STATUS_OK
Close 13793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13794 NT_STATUS_OK
ReadX 13794 0 4096 4096 NT_STATUS_OK
Close 13794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13795 NT_STATUS_OK
ReadX 13795 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13795 1004 NT_STATUS_OK
WriteX 13795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13796 NT_STATUS_OK
Close 13796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13795 NT_STATUS_OK
Close 13786 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13798 NT_STATUS_OK
Close 13798 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13801 NT_STATUS_OK
WriteX 13801 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13801 258 NT_STATUS_OK
WriteX 13801 0 65536 65536 NT_STATUS_OK
WriteX 13801 65536 9298 9298 NT_STATUS_OK
Close 13801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13802 NT_STATUS_OK
ReadX 13802 0 4096 4096 NT_STATUS_OK
WriteX 13802 0 4096 4096 NT_STATUS_OK
Flush 13802 NT_STATUS_OK
SET_FILE_INFORMATION 13802 1004 NT_STATUS_OK
WriteX 13802 0 4096 4096 NT_STATUS_OK
Flush 13802 NT_STATUS_OK
Close 13802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13803 NT_STATUS_OK
SET_FILE_INFORMATION 13803 1004 NT_STATUS_OK
Close 13803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13804 NT_STATUS_OK
ReadX 13804 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13805 NT_STATUS_OK
Close 13805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13808 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13808 0 4096 4096 NT_STATUS_OK
Close 13808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13809 NT_STATUS_OK
ReadX 13809 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13809 4096 4096 4096 NT_STATUS_OK
ReadX 13809 8192 4096 4096 NT_STATUS_OK
ReadX 13809 12288 4096 4096 NT_STATUS_OK
ReadX 13809 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13810 NT_STATUS_OK
ReadX 13810 0 4096 4096 NT_STATUS_OK
Close 13810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13811 NT_STATUS_OK
ReadX 13811 0 4096 4096 NT_STATUS_OK
Close 13811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13812 NT_STATUS_OK
ReadX 13812 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13812 1004 NT_STATUS_OK
WriteX 13812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13813 NT_STATUS_OK
Close 13813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13809 NT_STATUS_OK
Close 13812 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13815 NT_STATUS_OK
Close 13815 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13818 NT_STATUS_OK
WriteX 13818 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13818 258 NT_STATUS_OK
WriteX 13818 0 65536 65536 NT_STATUS_OK
WriteX 13818 65536 11540 11540 NT_STATUS_OK
Close 13818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13819 NT_STATUS_OK
ReadX 13819 0 4096 4096 NT_STATUS_OK
WriteX 13819 0 4096 4096 NT_STATUS_OK
Flush 13819 NT_STATUS_OK
SET_FILE_INFORMATION 13819 1004 NT_STATUS_OK
WriteX 13819 0 4096 4096 NT_STATUS_OK
Flush 13819 NT_STATUS_OK
Close 13819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13820 NT_STATUS_OK
SET_FILE_INFORMATION 13820 1004 NT_STATUS_OK
Close 13820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13821 NT_STATUS_OK
ReadX 13821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13822 NT_STATUS_OK
Close 13822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13824 NT_STATUS_OK
ReadX 13824 61440 4096 4096 NT_STATUS_OK
ReadX 13824 126976 4096 4096 NT_STATUS_OK
WriteX 13824 0 65536 65536 NT_STATUS_OK
WriteX 13824 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13825 NT_STATUS_OK
ReadX 13825 61440 4096 4096 NT_STATUS_OK
ReadX 13825 126976 4096 4096 NT_STATUS_OK
ReadX 13825 192512 4096 4096 NT_STATUS_OK
ReadX 13825 258048 4096 4096 NT_STATUS_OK
WriteX 13825 0 65536 65536 NT_STATUS_OK
WriteX 13825 65536 65536 65536 NT_STATUS_OK
WriteX 13825 131072 65536 65536 NT_STATUS_OK
WriteX 13825 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13826 NT_STATUS_OK
ReadX 13826 61440 4096 4096 NT_STATUS_OK
ReadX 13826 126976 4096 4096 NT_STATUS_OK
ReadX 13826 192512 4096 4096 NT_STATUS_OK
ReadX 13826 258048 4096 4096 NT_STATUS_OK
ReadX 13826 323584 4096 4096 NT_STATUS_OK
ReadX 13826 389120 4096 4096 NT_STATUS_OK
ReadX 13826 454656 4096 4096 NT_STATUS_OK
ReadX 13826 520192 4096 4096 NT_STATUS_OK
WriteX 13826 0 65536 65536 NT_STATUS_OK
WriteX 13826 65536 65536 65536 NT_STATUS_OK
WriteX 13826 131072 65536 65536 NT_STATUS_OK
WriteX 13826 196608 65536 65536 NT_STATUS_OK
WriteX 13826 262144 65536 65536 NT_STATUS_OK
WriteX 13826 327680 65536 65536 NT_STATUS_OK
WriteX 13826 393216 65536 65536 NT_STATUS_OK
WriteX 13826 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13827 NT_STATUS_OK
ReadX 13827 0 4096 4096 NT_STATUS_OK
ReadX 13827 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13828 NT_STATUS_OK
WriteX 13828 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13828 258 NT_STATUS_OK
WriteX 13828 0 53 53 NT_STATUS_OK
Close 13828 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13829 NT_STATUS_OK
Close 13829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13821 NT_STATUS_OK
Close 13767 NT_STATUS_OK
Close 13824 NT_STATUS_OK
Close 13825 NT_STATUS_OK
Close 13826 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13827 8192 4096 4096 NT_STATUS_OK
ReadX 13827 12288 4096 4096 NT_STATUS_OK
WriteX 13831 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13831 258 NT_STATUS_OK
ReadX 13827 16384 4096 4096 NT_STATUS_OK
ReadX 13827 20480 4096 4096 NT_STATUS_OK
WriteX 13831 0 15360 15360 NT_STATUS_OK
Close 13831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13832 NT_STATUS_OK
ReadX 13832 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13832 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13832 1004 NT_STATUS_OK
WriteX 13832 0 4096 4096 NT_STATUS_OK
Close 13832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13833 NT_STATUS_OK
Close 13833 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13835 NT_STATUS_OK
ReadX 13835 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13836 NT_STATUS_OK
Close 13836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13835 4096 4096 4096 NT_STATUS_OK
ReadX 13835 8192 4096 4096 NT_STATUS_OK
ReadX 13835 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13838 NT_STATUS_OK
ReadX 13838 0 4096 4096 NT_STATUS_OK
ReadX 13838 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13839 NT_STATUS_OK
ReadX 13839 0 4096 4096 NT_STATUS_OK
ReadX 13839 4096 4096 4096 NT_STATUS_OK
ReadX 13839 8192 4096 4096 NT_STATUS_OK
Close 13838 NT_STATUS_OK
Close 13839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13840 NT_STATUS_OK
WriteX 13840 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13840 258 NT_STATUS_OK
WriteX 13840 0 15360 15360 NT_STATUS_OK
Close 13840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13841 NT_STATUS_OK
ReadX 13841 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13841 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13841 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13842 NT_STATUS_OK
Close 13842 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13844 NT_STATUS_OK
ReadX 13844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13845 NT_STATUS_OK
SET_FILE_INFORMATION 13845 1004 NT_STATUS_OK
Close 13845 NT_STATUS_OK
WriteX 13841 0 4096 4096 NT_STATUS_OK
Close 13841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13846 NT_STATUS_OK
Close 13846 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13848 NT_STATUS_OK
ReadX 13848 0 4096 4096 NT_STATUS_OK
ReadX 13848 4096 4096 4096 NT_STATUS_OK
ReadX 13848 8192 4096 4096 NT_STATUS_OK
ReadX 13848 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13848 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13848 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13849 NT_STATUS_OK
ReadX 13849 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13850 NT_STATUS_OK
WriteX 13850 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13850 258 NT_STATUS_OK
WriteX 13850 0 53 53 NT_STATUS_OK
Close 13850 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13851 NT_STATUS_OK
Close 13851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13849 4096 4096 4096 NT_STATUS_OK
ReadX 13849 8192 4096 4096 NT_STATUS_OK
ReadX 13849 12288 4096 4096 NT_STATUS_OK
WriteX 13853 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13853 258 NT_STATUS_OK
WriteX 13853 0 12006 12006 NT_STATUS_OK
Close 13853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13854 NT_STATUS_OK
ReadX 13854 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13854 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13854 1004 NT_STATUS_OK
WriteX 13854 0 4096 4096 NT_STATUS_OK
Close 13854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13855 NT_STATUS_OK
Close 13855 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13857 NT_STATUS_OK
ReadX 13857 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13858 NT_STATUS_OK
Close 13858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13857 4096 4096 4096 NT_STATUS_OK
ReadX 13857 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13860 NT_STATUS_OK
WriteX 13860 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13860 258 NT_STATUS_OK
WriteX 13860 0 11991 11991 NT_STATUS_OK
Close 13860 NT_STATUS_OK
Close 13849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13861 NT_STATUS_OK
ReadX 13861 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13861 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13861 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13862 NT_STATUS_OK
Close 13862 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13864 NT_STATUS_OK
ReadX 13864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13865 NT_STATUS_OK
SET_FILE_INFORMATION 13865 1004 NT_STATUS_OK
Close 13865 NT_STATUS_OK
WriteX 13861 0 4096 4096 NT_STATUS_OK
Close 13861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13866 NT_STATUS_OK
Close 13866 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13868 NT_STATUS_OK
ReadX 13868 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13869 NT_STATUS_OK
Close 13869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13868 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13868 1004 NT_STATUS_OK
ReadX 13868 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13868 1004 NT_STATUS_OK
WriteX 13868 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13868 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13868 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13868 1004 NT_STATUS_OK
Close 13844 NT_STATUS_OK
WriteX 13848 0 19054 19054 NT_STATUS_OK
WriteX 13868 0 12288 12288 NT_STATUS_OK
Close 13864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13871 NT_STATUS_OK
Close 13871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13848 NT_STATUS_OK
Close 13868 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13873 NT_STATUS_OK
Close 13873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13875 NT_STATUS_OK
ReadX 13875 0 61440 61440 NT_STATUS_OK
ReadX 13875 61440 4096 4096 NT_STATUS_OK
ReadX 13875 65536 61440 61440 NT_STATUS_OK
ReadX 13875 126976 4096 4096 NT_STATUS_OK
ReadX 13875 131072 61440 61440 NT_STATUS_OK
ReadX 13875 192512 4096 4096 NT_STATUS_OK
ReadX 13875 196608 61440 61440 NT_STATUS_OK
ReadX 13875 258048 4096 4096 NT_STATUS_OK
ReadX 13875 262144 61440 61440 NT_STATUS_OK
ReadX 13875 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13876 NT_STATUS_OK
ReadX 13876 0 61440 61440 NT_STATUS_OK
ReadX 13876 61440 4096 4096 NT_STATUS_OK
ReadX 13876 65536 61440 61440 NT_STATUS_OK
ReadX 13876 126976 4096 4096 NT_STATUS_OK
ReadX 13876 131072 61440 61440 NT_STATUS_OK
ReadX 13876 192512 4096 4096 NT_STATUS_OK
ReadX 13876 196608 61440 61440 NT_STATUS_OK
ReadX 13876 258048 4096 4096 NT_STATUS_OK
ReadX 13876 262144 61440 61440 NT_STATUS_OK
ReadX 13876 323584 4096 4096 NT_STATUS_OK
ReadX 13876 327680 61440 61440 NT_STATUS_OK
ReadX 13876 389120 4096 4096 NT_STATUS_OK
ReadX 13876 393216 61440 61440 NT_STATUS_OK
ReadX 13876 454656 4096 4096 NT_STATUS_OK
ReadX 13876 458752 61440 61440 NT_STATUS_OK
ReadX 13876 520192 4096 4096 NT_STATUS_OK
ReadX 13876 524288 61440 61440 NT_STATUS_OK
ReadX 13876 585728 4096 4096 NT_STATUS_OK
ReadX 13876 589824 61440 61440 NT_STATUS_OK
ReadX 13876 651264 4096 4096 NT_STATUS_OK
ReadX 13876 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13877 NT_STATUS_OK
ReadX 13877 0 61440 61440 NT_STATUS_OK
ReadX 13877 61440 4096 4096 NT_STATUS_OK
ReadX 13877 65536 61440 61440 NT_STATUS_OK
ReadX 13877 126976 4096 4096 NT_STATUS_OK
ReadX 13877 131072 61440 61440 NT_STATUS_OK
ReadX 13877 192512 4096 4096 NT_STATUS_OK
ReadX 13877 196608 61440 61440 NT_STATUS_OK
ReadX 13877 258048 4096 4096 NT_STATUS_OK
ReadX 13877 262144 61440 61440 NT_STATUS_OK
ReadX 13877 323584 4096 4096 NT_STATUS_OK
ReadX 13877 327680 61440 61440 NT_STATUS_OK
ReadX 13877 389120 4096 4096 NT_STATUS_OK
ReadX 13877 393216 61440 61440 NT_STATUS_OK
ReadX 13877 454656 4096 4096 NT_STATUS_OK
ReadX 13877 458752 61440 61440 NT_STATUS_OK
ReadX 13877 520192 4096 4096 NT_STATUS_OK
ReadX 13877 524288 61440 61440 NT_STATUS_OK
ReadX 13877 585728 4096 4096 NT_STATUS_OK
ReadX 13877 589824 61440 61440 NT_STATUS_OK
ReadX 13877 651264 4096 4096 NT_STATUS_OK
ReadX 13877 655360 61440 61440 NT_STATUS_OK
ReadX 13877 716800 4096 4096 NT_STATUS_OK
ReadX 13877 720896 61440 61440 NT_STATUS_OK
ReadX 13877 782336 4096 4096 NT_STATUS_OK
ReadX 13877 786432 61440 61440 NT_STATUS_OK
ReadX 13877 847872 4096 4096 NT_STATUS_OK
ReadX 13877 851968 61440 61440 NT_STATUS_OK
ReadX 13877 913408 4096 4096 NT_STATUS_OK
ReadX 13877 917504 61440 61440 NT_STATUS_OK
ReadX 13877 978944 4096 4096 NT_STATUS_OK
ReadX 13877 983040 61440 61440 NT_STATUS_OK
ReadX 13877 1044480 4096 4096 NT_STATUS_OK
ReadX 13877 1048576 61440 61440 NT_STATUS_OK
ReadX 13877 1110016 4096 4096 NT_STATUS_OK
ReadX 13877 1114112 61440 61440 NT_STATUS_OK
ReadX 13877 1175552 4096 4096 NT_STATUS_OK
ReadX 13877 1179648 61440 61440 NT_STATUS_OK
ReadX 13877 1241088 4096 4096 NT_STATUS_OK
ReadX 13877 1245184 61440 61440 NT_STATUS_OK
ReadX 13877 1306624 4096 4096 NT_STATUS_OK
ReadX 13877 1310720 61440 61440 NT_STATUS_OK
ReadX 13877 1372160 4096 4096 NT_STATUS_OK
ReadX 13877 1376256 61440 61440 NT_STATUS_OK
ReadX 13877 1437696 4096 4096 NT_STATUS_OK
ReadX 13877 1441792 61440 61440 NT_STATUS_OK
ReadX 13877 1503232 4096 4096 NT_STATUS_OK
ReadX 13877 1507328 61440 61440 NT_STATUS_OK
ReadX 13877 1568768 4096 4096 NT_STATUS_OK
ReadX 13877 1572864 61440 61440 NT_STATUS_OK
ReadX 13877 1634304 4096 4096 NT_STATUS_OK
ReadX 13877 1638400 61440 61440 NT_STATUS_OK
ReadX 13877 1699840 4096 4096 NT_STATUS_OK
ReadX 13877 1703936 61440 61440 NT_STATUS_OK
ReadX 13877 1765376 4096 4096 NT_STATUS_OK
ReadX 13877 1769472 61440 61440 NT_STATUS_OK
ReadX 13877 1830912 4096 4096 NT_STATUS_OK
ReadX 13877 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13878 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13879 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13879 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13880 NT_STATUS_OK
ReadX 13880 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13881 NT_STATUS_OK
ReadX 13881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13882 NT_STATUS_OK
ReadX 13882 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13884 NT_STATUS_OK
QUERY_FILE_INFORMATION 13884 1004 NT_STATUS_OK
WriteX 13884 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13884 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13885 NT_STATUS_OK
Close 13885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13886 NT_STATUS_OK
WriteX 13886 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13886 258 NT_STATUS_OK
WriteX 13886 0 491 491 NT_STATUS_OK
Close 13886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13887 NT_STATUS_OK
ReadX 13887 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13884 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13889 NT_STATUS_OK
Close 13889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13890 NT_STATUS_OK
WriteX 13890 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13890 258 NT_STATUS_OK
WriteX 13890 0 543 543 NT_STATUS_OK
Close 13890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13891 NT_STATUS_OK
ReadX 13891 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13875 NT_STATUS_OK
Close 13876 NT_STATUS_OK
Close 13877 NT_STATUS_OK
Close 13891 NT_STATUS_OK
Close 13879 NT_STATUS_OK
Close 13880 NT_STATUS_OK
Close 13881 NT_STATUS_OK
Close 13882 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13895 NT_STATUS_OK
ReadX 13895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13896 NT_STATUS_OK
ReadX 13896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13897 NT_STATUS_OK
ReadX 13897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13898 NT_STATUS_OK
ReadX 13898 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13899 NT_STATUS_OK
ReadX 13899 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13903 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13904 NT_STATUS_OK
QUERY_FILE_INFORMATION 13904 1004 NT_STATUS_OK
WriteX 13904 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13904 258 NT_STATUS_OK
WriteX 13904 0 2048 2048 NT_STATUS_OK
Close 13904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13905 NT_STATUS_OK
ReadX 13905 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13905 0 4096 4096 NT_STATUS_OK
Flush 13905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13905 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13909 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13910 NT_STATUS_OK
WriteX 13910 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13910 258 NT_STATUS_OK
WriteX 13910 0 2048 2048 NT_STATUS_OK
Close 13910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13911 NT_STATUS_OK
ReadX 13911 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13915 NT_STATUS_OK
Close 13915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13916 NT_STATUS_OK
WriteX 13916 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13916 258 NT_STATUS_OK
WriteX 13916 0 2048 2048 NT_STATUS_OK
Close 13916 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13917 NT_STATUS_OK
ReadX 13917 0 2048 2048 NT_STATUS_OK
ReadX 13895 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13899 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13911 0 4096 4096 NT_STATUS_OK
WriteX 13895 0 8192 8192 NT_STATUS_OK
WriteX 13896 0 4096 4096 NT_STATUS_OK
WriteX 13897 0 4096 4096 NT_STATUS_OK
ReadX 13911 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13920 NT_STATUS_OK
ReadX 13920 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13921 NT_STATUS_OK
QUERY_FILE_INFORMATION 13921 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13920 NT_STATUS_OK
Close 13896 NT_STATUS_OK
Close 13897 NT_STATUS_OK
Close 13898 NT_STATUS_OK
Close 13911 NT_STATUS_OK
Close 13895 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13923 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13924 NT_STATUS_OK
ReadX 13924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13925 NT_STATUS_OK
ReadX 13925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13926 NT_STATUS_OK
ReadX 13926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13927 NT_STATUS_OK
ReadX 13927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13928 NT_STATUS_OK
ReadX 13928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13929 NT_STATUS_OK
ReadX 13929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13930 NT_STATUS_OK
ReadX 13930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13931 NT_STATUS_OK
ReadX 13931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13932 NT_STATUS_OK
ReadX 13932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13933 NT_STATUS_OK
ReadX 13933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13934 NT_STATUS_OK
ReadX 13934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13935 NT_STATUS_OK
ReadX 13935 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13936 NT_STATUS_OK
ReadX 13936 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13940 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13941 NT_STATUS_OK
QUERY_FILE_INFORMATION 13941 1004 NT_STATUS_OK
WriteX 13941 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13941 258 NT_STATUS_OK
WriteX 13941 0 2048 2048 NT_STATUS_OK
Close 13941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13942 NT_STATUS_OK
ReadX 13942 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13943 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13944 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13944 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13948 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13949 NT_STATUS_OK
QUERY_FILE_INFORMATION 13949 1004 NT_STATUS_OK
WriteX 13949 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13949 258 NT_STATUS_OK
WriteX 13949 0 2048 2048 NT_STATUS_OK
Close 13949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13950 NT_STATUS_OK
ReadX 13950 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13942 0 4096 4096 NT_STATUS_OK
Flush 13942 NT_STATUS_OK
WriteX 13950 0 4096 4096 NT_STATUS_OK
Flush 13950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13942 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13950 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13944 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13951 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13952 NT_STATUS_OK
WriteX 13952 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13952 258 NT_STATUS_OK
WriteX 13952 0 4096 4096 NT_STATUS_OK
Close 13952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13953 NT_STATUS_OK
ReadX 13953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13954 NT_STATUS_OK
Close 13954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13955 NT_STATUS_OK
WriteX 13955 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13955 258 NT_STATUS_OK
WriteX 13955 0 4096 4096 NT_STATUS_OK
Close 13955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13956 NT_STATUS_OK
ReadX 13956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13956 0 4096 4096 NT_STATUS_OK
Close 13953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13936 NT_STATUS_OK
Close 13930 NT_STATUS_OK
Close 13944 NT_STATUS_OK
Close 13933 NT_STATUS_OK
Close 13934 NT_STATUS_OK
Close 13935 NT_STATUS_OK
Close 13931 NT_STATUS_OK
Close 13924 NT_STATUS_OK
Close 13925 NT_STATUS_OK
Close 13928 NT_STATUS_OK
Close 13929 NT_STATUS_OK
Close 13926 NT_STATUS_OK
Close 13927 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13959 NT_STATUS_OK
Close 13959 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13961 NT_STATUS_OK
ReadX 13961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13962 NT_STATUS_OK
Close 13962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13963 NT_STATUS_OK
WriteX 13963 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13963 258 NT_STATUS_OK
WriteX 13963 0 2048 2048 NT_STATUS_OK
Close 13963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13964 NT_STATUS_OK
ReadX 13964 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13965 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13966 NT_STATUS_OK
ReadX 13966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13967 NT_STATUS_OK
ReadX 13967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13968 NT_STATUS_OK
ReadX 13968 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13969 NT_STATUS_OK
ReadX 13969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13970 NT_STATUS_OK
ReadX 13970 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13971 NT_STATUS_OK
ReadX 13971 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13972 NT_STATUS_OK
ReadX 13972 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13973 NT_STATUS_OK
ReadX 13973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13974 NT_STATUS_OK
ReadX 13974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13975 NT_STATUS_OK
ReadX 13975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13976 NT_STATUS_OK
ReadX 13976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13977 NT_STATUS_OK
ReadX 13977 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13978 NT_STATUS_OK
QUERY_FILE_INFORMATION 13978 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13961 NT_STATUS_OK
Close 13964 NT_STATUS_OK
Close 13976 NT_STATUS_OK
Close 13971 NT_STATUS_OK
Close 13972 NT_STATUS_OK
Close 13973 NT_STATUS_OK
Close 13974 NT_STATUS_OK
Close 13975 NT_STATUS_OK
Close 13977 NT_STATUS_OK
Close 13965 NT_STATUS_OK
Close 13966 NT_STATUS_OK
Close 13969 NT_STATUS_OK
Close 13970 NT_STATUS_OK
Close 13967 NT_STATUS_OK
Close 13968 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13980 NT_STATUS_OK
QUERY_FILE_INFORMATION 13980 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13982 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13983 NT_STATUS_OK
ReadX 13983 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13984 NT_STATUS_OK
ReadX 13984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13985 NT_STATUS_OK
ReadX 13985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13986 NT_STATUS_OK
ReadX 13986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13987 NT_STATUS_OK
ReadX 13987 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13988 NT_STATUS_OK
ReadX 13988 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13989 NT_STATUS_OK
ReadX 13989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13990 NT_STATUS_OK
ReadX 13990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13991 NT_STATUS_OK
ReadX 13991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13992 NT_STATUS_OK
ReadX 13992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13993 NT_STATUS_OK
ReadX 13993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13994 NT_STATUS_OK
ReadX 13994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13995 NT_STATUS_OK
ReadX 13995 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13999 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14000 NT_STATUS_OK
QUERY_FILE_INFORMATION 14000 1004 NT_STATUS_OK
WriteX 14000 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14000 258 NT_STATUS_OK
WriteX 14000 0 2048 2048 NT_STATUS_OK
Close 14000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14001 NT_STATUS_OK
ReadX 14001 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14002 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14003 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14004 NT_STATUS_OK
ReadX 14004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14005 NT_STATUS_OK
ReadX 14005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14006 NT_STATUS_OK
ReadX 14006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14007 NT_STATUS_OK
ReadX 14007 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 14011 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14012 NT_STATUS_OK
QUERY_FILE_INFORMATION 14012 1004 NT_STATUS_OK
WriteX 14012 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14012 258 NT_STATUS_OK
WriteX 14012 0 2048 2048 NT_STATUS_OK
Close 14012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14013 NT_STATUS_OK
ReadX 14013 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14015 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14015 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 14019 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14020 NT_STATUS_OK
QUERY_FILE_INFORMATION 14020 1004 NT_STATUS_OK
WriteX 14020 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14020 258 NT_STATUS_OK
WriteX 14020 0 2048 2048 NT_STATUS_OK
Close 14020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14021 NT_STATUS_OK
ReadX 14021 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 14001 0 4096 4096 NT_STATUS_OK
Flush 14001 NT_STATUS_OK
WriteX 14013 0 4096 4096 NT_STATUS_OK
Flush 14013 NT_STATUS_OK
WriteX 14021 0 4096 4096 NT_STATUS_OK
Flush 14021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 14001 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 14013 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 14021 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14003 4096 16384 16384 NT_STATUS_OK
ReadX 13983 4096 16384 16384 NT_STATUS_OK
ReadX 14015 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14022 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14023 NT_STATUS_OK
ReadX 14023 0 2048 2048 NT_STATUS_OK
WriteX 14023 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 14001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14024 NT_STATUS_OK
QUERY_FILE_INFORMATION 14024 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 14024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 14023 NT_STATUS_OK
Close 14007 NT_STATUS_OK
Close 13995 NT_STATUS_OK
Close 13987 NT_STATUS_OK
Close 14003 NT_STATUS_OK
Close 14004 NT_STATUS_OK
Close 14005 NT_STATUS_OK
Close 14006 NT_STATUS_OK
Close 13994 NT_STATUS_OK
Close 14015 NT_STATUS_OK
Close 13989 NT_STATUS_OK
Close 13992 NT_STATUS_OK
Close 13993 NT_STATUS_OK
Close 13990 NT_STATUS_OK
Close 13991 NT_STATUS_OK
Close 13983 NT_STATUS_OK
Close 13984 NT_STATUS_OK
Close 13985 NT_STATUS_OK
Close 13986 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 14013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14026 NT_STATUS_OK
QUERY_FILE_INFORMATION 14026 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 14026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 14021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14028 NT_STATUS_OK
QUERY_FILE_INFORMATION 14028 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 14028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14030 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14031 NT_STATUS_OK
ReadX 14031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14032 NT_STATUS_OK
ReadX 14032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14033 NT_STATUS_OK
ReadX 14033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14034 NT_STATUS_OK
ReadX 14034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14035 NT_STATUS_OK
ReadX 14035 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14031 4096 16384 16384 NT_STATUS_OK
WriteX 14031 0 4096 4096 NT_STATUS_OK
WriteX 14032 0 4096 4096 NT_STATUS_OK
WriteX 14033 0 4096 4096 NT_STATUS_OK
WriteX 14034 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14036 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14037 NT_STATUS_OK
ReadX 14037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14038 NT_STATUS_OK
ReadX 14038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14039 NT_STATUS_OK
ReadX 14039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14041 NT_STATUS_OK
ReadX 14041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14042 NT_STATUS_OK
ReadX 14042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14043 NT_STATUS_OK
ReadX 14043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14044 NT_STATUS_OK
ReadX 14044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14045 NT_STATUS_OK
ReadX 14045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14046 NT_STATUS_OK
ReadX 14046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14047 NT_STATUS_OK
ReadX 14047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14048 NT_STATUS_OK
ReadX 14048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14049 NT_STATUS_OK
ReadX 14049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 14050 NT_STATUS_OK
ReadX 14050 0 8192 8192 NT_STATUS_OK
ReadX 14037 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 14051 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14051 0 4096 4096 NT_STATUS_OK
ReadX 14051 4096 4096 4096 NT_STATUS_OK
ReadX 14051 8192 4096 4096 NT_STATUS_OK
WriteX 14037 0 4096 4096 NT_STATUS_OK
WriteX 14038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 14052 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
ReadX 14052 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 14031 0 4096 4096 NT_STATUS_OK
WriteX 14032 0 4096 4096 NT_STATUS_OK
WriteX 14033 0 4096 4096 NT_STATUS_OK
WriteX 14034 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 14056 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14057 NT_STATUS_OK
QUERY_FILE_INFORMATION 14057 1004 NT_STATUS_OK
WriteX 14057 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14057 258 NT_STATUS_OK
WriteX 14057 0 2048 2048 NT_STATUS_OK
Close 14057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14058 NT_STATUS_OK
ReadX 14058 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14058 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14058 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14059 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14060 NT_STATUS_OK
ReadX 14060 0 4096 4096 NT_STATUS_OK
ReadX 14060 4096 4096 4096 NT_STATUS_OK
WriteX 14060 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14058 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14060 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14061 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14062 NT_STATUS_OK
ReadX 14062 0 4096 4096 NT_STATUS_OK
ReadX 14062 4096 4096 4096 NT_STATUS_OK
WriteX 14062 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 14058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14063 NT_STATUS_OK
QUERY_FILE_INFORMATION 14063 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 14063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 14050 NT_STATUS_OK
Close 14035 NT_STATUS_OK
Close 14031 NT_STATUS_OK
Close 14032 NT_STATUS_OK
Close 14033 NT_STATUS_OK
Close 14034 NT_STATUS_OK
Close 14043 NT_STATUS_OK
Close 14048 NT_STATUS_OK
Close 14044 NT_STATUS_OK
Close 14045 NT_STATUS_OK
Close 14046 NT_STATUS_OK
Close 14047 NT_STATUS_OK
Close 14049 NT_STATUS_OK
Close 14037 NT_STATUS_OK
Close 14038 NT_STATUS_OK
Close 14041 NT_STATUS_OK
Close 14042 NT_STATUS_OK
Close 14039 NT_STATUS_OK
Close 14040 NT_STATUS_OK
Close 14062 NT_STATUS_OK
Close 14051 NT_STATUS_OK
Close 14052 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 14065 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14065 0 4096 4096 NT_STATUS_OK
ReadX 14065 4096 4096 4096 NT_STATUS_OK
ReadX 14065 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14068 NT_STATUS_OK
ReadX 14068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14069 NT_STATUS_OK
ReadX 14069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14070 NT_STATUS_OK
ReadX 14070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14071 NT_STATUS_OK
ReadX 14071 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14072 NT_STATUS_OK
ReadX 14072 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14073 NT_STATUS_OK
ReadX 14073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14074 NT_STATUS_OK
ReadX 14074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14075 NT_STATUS_OK
ReadX 14075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14076 NT_STATUS_OK
ReadX 14076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14077 NT_STATUS_OK
ReadX 14077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14078 NT_STATUS_OK
ReadX 14078 0 4096 4096 NT_STATUS_OK
ReadX 14066 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 14082 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14083 NT_STATUS_OK
QUERY_FILE_INFORMATION 14083 1004 NT_STATUS_OK
WriteX 14083 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14083 258 NT_STATUS_OK
WriteX 14083 0 2048 2048 NT_STATUS_OK
Close 14083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14084 NT_STATUS_OK
ReadX 14084 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 14084 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 14088 NT_STATUS_OK
Close 14088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 14089 NT_STATUS_OK
QUERY_FILE_INFORMATION 14089 1004 NT_STATUS_OK
WriteX 14089 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14089 258 NT_STATUS_OK
WriteX 14089 0 2048 2048 NT_STATUS_OK
Close 14089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 14090 NT_STATUS_OK
ReadX 14090 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 14090 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14073 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 14084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14091 NT_STATUS_OK
QUERY_FILE_INFORMATION 14091 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 14091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 14077 NT_STATUS_OK
Close 14072 NT_STATUS_OK
Close 14078 NT_STATUS_OK
Close 14066 NT_STATUS_OK
Close 14067 NT_STATUS_OK
Close 14070 NT_STATUS_OK
Close 14071 NT_STATUS_OK
Close 14068 NT_STATUS_OK
Close 14069 NT_STATUS_OK
Close 14073 NT_STATUS_OK
Close 14074 NT_STATUS_OK
Close 14075 NT_STATUS_OK
Close 14076 NT_STATUS_OK
Close 14065 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 14090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 14093 NT_STATUS_OK
QUERY_FILE_INFORMATION 14093 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 14093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 14095 NT_STATUS_OK
ReadX 14095 61440 4096 4096 NT_STATUS_OK
ReadX 14095 126976 4096 4096 NT_STATUS_OK
WriteX 14095 0 65536 65536 NT_STATUS_OK
WriteX 14095 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9780 NT_STATUS_OK
ReadX 9780 61440 4096 4096 NT_STATUS_OK
ReadX 9780 126976 4096 4096 NT_STATUS_OK
ReadX 9780 192512 4096 4096 NT_STATUS_OK
ReadX 9780 258048 4096 4096 NT_STATUS_OK
WriteX 9780 0 65536 65536 NT_STATUS_OK
WriteX 9780 65536 65536 65536 NT_STATUS_OK
WriteX 9780 131072 65536 65536 NT_STATUS_OK
WriteX 9780 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9781 NT_STATUS_OK
ReadX 9781 61440 4096 4096 NT_STATUS_OK
ReadX 9781 126976 4096 4096 NT_STATUS_OK
ReadX 9781 192512 4096 4096 NT_STATUS_OK
ReadX 9781 258048 4096 4096 NT_STATUS_OK
ReadX 9781 323584 4096 4096 NT_STATUS_OK
ReadX 9781 389120 4096 4096 NT_STATUS_OK
ReadX 9781 454656 4096 4096 NT_STATUS_OK
ReadX 9781 520192 4096 4096 NT_STATUS_OK
WriteX 9781 0 65536 65536 NT_STATUS_OK
WriteX 9781 65536 65536 65536 NT_STATUS_OK
WriteX 9781 131072 65536 65536 NT_STATUS_OK
WriteX 9781 196608 65536 65536 NT_STATUS_OK
WriteX 9781 262144 65536 65536 NT_STATUS_OK
WriteX 9781 327680 65536 65536 NT_STATUS_OK
WriteX 9781 393216 65536 65536 NT_STATUS_OK
WriteX 9781 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9782 NT_STATUS_OK
ReadX 9782 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9782 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9782 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9782 8192 4096 4096 NT_STATUS_OK
ReadX 9782 12288 4096 4096 NT_STATUS_OK
ReadX 9782 16384 4096 4096 NT_STATUS_OK
ReadX 9782 20480 4096 4096 NT_STATUS_OK
ReadX 9782 24576 4096 4096 NT_STATUS_OK
ReadX 9782 28672 4096 4096 NT_STATUS_OK
ReadX 9782 32768 4096 4096 NT_STATUS_OK
ReadX 9782 36864 4096 4096 NT_STATUS_OK
ReadX 9782 40960 4096 4096 NT_STATUS_OK
ReadX 9782 45056 4096 4096 NT_STATUS_OK
ReadX 9782 49152 4096 4096 NT_STATUS_OK
ReadX 9782 53248 4096 4096 NT_STATUS_OK
ReadX 9782 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9782 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 9783 NT_STATUS_OK
Close 9783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 14095 NT_STATUS_OK
Close 9780 NT_STATUS_OK
Close 9781 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 9785 NT_STATUS_OK
WriteX 9785 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9785 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9785 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9785 1004 NT_STATUS_OK
WriteX 9785 0 57088 57088 NT_STATUS_OK
WriteX 9785 0 4096 4096 NT_STATUS_OK
Flush 9785 NT_STATUS_OK
Close 9782 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9786 NT_STATUS_OK
SET_FILE_INFORMATION 9786 1004 NT_STATUS_OK
Close 9786 NT_STATUS_OK
SET_FILE_INFORMATION 9785 1004 NT_STATUS_OK
WriteX 9785 0 4096 4096 NT_STATUS_OK
Close 9785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 9787 NT_STATUS_OK
Close 9787 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9789 NT_STATUS_OK
ReadX 9789 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9789 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 9790 NT_STATUS_OK
WriteX 9790 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9790 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9790 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9790 1004 NT_STATUS_OK
WriteX 9790 0 51456 51456 NT_STATUS_OK
WriteX 9790 0 4096 4096 NT_STATUS_OK
Flush 9790 NT_STATUS_OK
SET_FILE_INFORMATION 9790 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9790 1004 NT_STATUS_OK
WriteX 9790 0 4096 4096 NT_STATUS_OK
Close 9790 NT_STATUS_OK
Close 9789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 9792 NT_STATUS_OK
Close 9792 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9794 NT_STATUS_OK
ReadX 9794 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9794 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9796 NT_STATUS_OK
Close 9796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9799 NT_STATUS_OK
WriteX 9799 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9799 258 NT_STATUS_OK
WriteX 9799 0 53077 53077 NT_STATUS_OK
Close 9799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 9800 NT_STATUS_OK
WriteX 9800 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9800 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9800 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9800 1004 NT_STATUS_OK
WriteX 9800 0 65536 65536 NT_STATUS_OK
WriteX 9800 65536 1856 1856 NT_STATUS_OK
WriteX 9800 0 4096 4096 NT_STATUS_OK
Flush 9800 NT_STATUS_OK
SET_FILE_INFORMATION 9800 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9800 1004 NT_STATUS_OK
WriteX 9800 0 4096 4096 NT_STATUS_OK
Close 9800 NT_STATUS_OK
Close 9794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 9802 NT_STATUS_OK
Close 9802 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9804 NT_STATUS_OK
ReadX 9804 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9806 NT_STATUS_OK
Close 9806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9809 NT_STATUS_OK
WriteX 9809 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9809 258 NT_STATUS_OK
WriteX 9809 0 7983 7983 NT_STATUS_OK
Close 9809 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9811 NT_STATUS_OK
Close 9811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9814 NT_STATUS_OK
WriteX 9814 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9814 258 NT_STATUS_OK
WriteX 9814 0 65536 65536 NT_STATUS_OK
WriteX 9814 65536 65536 65536 NT_STATUS_OK
WriteX 9814 131072 65536 65536 NT_STATUS_OK
WriteX 9814 196608 65536 65536 NT_STATUS_OK
WriteX 9814 262144 65536 65536 NT_STATUS_OK
WriteX 9814 327680 65536 65536 NT_STATUS_OK
WriteX 9814 393216 65536 65536 NT_STATUS_OK
WriteX 9814 458752 46731 46731 NT_STATUS_OK
Close 9814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 9815 NT_STATUS_OK
WriteX 9815 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9815 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9804 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 9815 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9815 1004 NT_STATUS_OK
WriteX 9815 0 65536 65536 NT_STATUS_OK
WriteX 9815 65536 22848 22848 NT_STATUS_OK
WriteX 9815 0 4096 4096 NT_STATUS_OK
Flush 9815 NT_STATUS_OK
SET_FILE_INFORMATION 9815 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9815 1004 NT_STATUS_OK
WriteX 9815 0 4096 4096 NT_STATUS_OK
Close 9815 NT_STATUS_OK
Close 9804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 9817 NT_STATUS_OK
Close 9817 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9819 NT_STATUS_OK
ReadX 9819 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9819 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9820 NT_STATUS_OK
ReadX 9820 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9820 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9820 1004 NT_STATUS_OK
ReadX 9820 8192 4096 4096 NT_STATUS_OK
ReadX 9820 12288 4096 4096 NT_STATUS_OK
ReadX 9820 16384 4096 4096 NT_STATUS_OK
ReadX 9820 20480 4096 4096 NT_STATUS_OK
ReadX 9820 24576 4096 4096 NT_STATUS_OK
ReadX 9820 28672 4096 4096 NT_STATUS_OK
ReadX 9820 32768 4096 4096 NT_STATUS_OK
ReadX 9820 36864 4096 4096 NT_STATUS_OK
ReadX 9820 40960 4096 4096 NT_STATUS_OK
ReadX 9820 45056 4096 4096 NT_STATUS_OK
ReadX 9820 49152 4096 4096 NT_STATUS_OK
ReadX 9820 53248 4096 4096 NT_STATUS_OK
ReadX 9820 57344 4096 4096 NT_STATUS_OK
ReadX 9820 61440 4096 4096 NT_STATUS_OK
ReadX 9820 65536 4096 4096 NT_STATUS_OK
ReadX 9820 69632 4096 4096 NT_STATUS_OK
ReadX 9820 73728 4096 4096 NT_STATUS_OK
ReadX 9820 77824 4096 4096 NT_STATUS_OK
ReadX 9820 81920 4096 4096 NT_STATUS_OK
ReadX 9820 86016 4096 4096 NT_STATUS_OK
ReadX 9820 90112 4096 4096 NT_STATUS_OK
ReadX 9820 94208 4096 4096 NT_STATUS_OK
ReadX 9820 98304 4096 4096 NT_STATUS_OK
ReadX 9820 102400 4096 4096 NT_STATUS_OK
ReadX 9820 106496 4096 4096 NT_STATUS_OK
ReadX 9820 110592 4096 4096 NT_STATUS_OK
ReadX 9820 114688 4096 4096 NT_STATUS_OK
ReadX 9820 118784 4096 4096 NT_STATUS_OK
ReadX 9820 122880 4096 4096 NT_STATUS_OK
ReadX 9820 126976 4096 4096 NT_STATUS_OK
ReadX 9820 131072 4096 4096 NT_STATUS_OK
ReadX 9820 135168 4096 4096 NT_STATUS_OK
ReadX 9820 139264 4096 4096 NT_STATUS_OK
ReadX 9820 143360 4096 4096 NT_STATUS_OK
ReadX 9820 147456 4096 4096 NT_STATUS_OK
ReadX 9820 151552 4096 4096 NT_STATUS_OK
ReadX 9820 155648 4096 4096 NT_STATUS_OK
ReadX 9820 159744 4096 4096 NT_STATUS_OK
ReadX 9820 163840 4096 4096 NT_STATUS_OK
ReadX 9820 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9820 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 9821 NT_STATUS_OK
Close 9821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 9819 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 9823 NT_STATUS_OK
WriteX 9823 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9823 258 NT_STATUS_OK
Close 9820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9824 NT_STATUS_OK
SET_FILE_INFORMATION 9824 1004 NT_STATUS_OK
Close 9824 NT_STATUS_OK
WriteX 9823 0 42388 42388 NT_STATUS_OK
Close 9823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 9825 NT_STATUS_OK
Close 9825 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9827 NT_STATUS_OK
ReadX 9827 0 4096 4096 NT_STATUS_OK
ReadX 9827 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 9828 NT_STATUS_OK
WriteX 9828 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9828 258 NT_STATUS_OK
SET_FILE_INFORMATION 9828 1004 NT_STATUS_OK
WriteX 9828 0 42652 42652 NT_STATUS_OK
Close 9828 NT_STATUS_OK
Close 9827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 9830 NT_STATUS_OK
Close 9830 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9832 NT_STATUS_OK
ReadX 9832 0 4096 4096 NT_STATUS_OK
ReadX 9832 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9834 NT_STATUS_OK
Close 9834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9837 NT_STATUS_OK
WriteX 9837 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9837 258 NT_STATUS_OK
WriteX 9837 0 65536 65536 NT_STATUS_OK
WriteX 9837 65536 49 49 NT_STATUS_OK
Close 9837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9838 NT_STATUS_OK
ReadX 9838 0 61440 61440 NT_STATUS_OK
ReadX 9838 61440 4096 4096 NT_STATUS_OK
ReadX 9838 65536 61440 61440 NT_STATUS_OK
ReadX 9838 126976 4096 4096 NT_STATUS_OK
ReadX 9838 131072 61440 61440 NT_STATUS_OK
ReadX 9838 192512 4096 4096 NT_STATUS_OK
ReadX 9838 196608 61440 61440 NT_STATUS_OK
ReadX 9838 258048 4096 4096 NT_STATUS_OK
ReadX 9838 262144 61440 61440 NT_STATUS_OK
ReadX 9838 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9839 NT_STATUS_OK
ReadX 9839 0 61440 61440 NT_STATUS_OK
ReadX 9839 61440 4096 4096 NT_STATUS_OK
ReadX 9839 65536 61440 61440 NT_STATUS_OK
ReadX 9839 126976 4096 4096 NT_STATUS_OK
ReadX 9839 131072 61440 61440 NT_STATUS_OK
ReadX 9839 192512 4096 4096 NT_STATUS_OK
ReadX 9839 196608 61440 61440 NT_STATUS_OK
ReadX 9839 258048 4096 4096 NT_STATUS_OK
ReadX 9839 262144 61440 61440 NT_STATUS_OK
ReadX 9839 323584 4096 4096 NT_STATUS_OK
ReadX 9839 327680 61440 61440 NT_STATUS_OK
ReadX 9839 389120 4096 4096 NT_STATUS_OK
ReadX 9839 393216 61440 61440 NT_STATUS_OK
ReadX 9839 454656 4096 4096 NT_STATUS_OK
ReadX 9839 458752 61440 61440 NT_STATUS_OK
ReadX 9839 520192 4096 4096 NT_STATUS_OK
ReadX 9839 524288 61440 61440 NT_STATUS_OK
ReadX 9839 585728 4096 4096 NT_STATUS_OK
ReadX 9839 589824 61440 61440 NT_STATUS_OK
ReadX 9839 651264 4096 4096 NT_STATUS_OK
ReadX 9839 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9840 NT_STATUS_OK
ReadX 9840 0 61440 61440 NT_STATUS_OK
ReadX 9840 61440 4096 4096 NT_STATUS_OK
ReadX 9840 65536 61440 61440 NT_STATUS_OK
ReadX 9840 126976 4096 4096 NT_STATUS_OK
ReadX 9840 131072 61440 61440 NT_STATUS_OK
ReadX 9840 192512 4096 4096 NT_STATUS_OK
ReadX 9840 196608 61440 61440 NT_STATUS_OK
ReadX 9840 258048 4096 4096 NT_STATUS_OK
ReadX 9840 262144 61440 61440 NT_STATUS_OK
ReadX 9840 323584 4096 4096 NT_STATUS_OK
ReadX 9840 327680 61440 61440 NT_STATUS_OK
ReadX 9840 389120 4096 4096 NT_STATUS_OK
ReadX 9840 393216 61440 61440 NT_STATUS_OK
ReadX 9840 454656 4096 4096 NT_STATUS_OK
ReadX 9840 458752 61440 61440 NT_STATUS_OK
ReadX 9840 520192 4096 4096 NT_STATUS_OK
ReadX 9840 524288 61440 61440 NT_STATUS_OK
ReadX 9840 585728 4096 4096 NT_STATUS_OK
ReadX 9840 589824 61440 61440 NT_STATUS_OK
ReadX 9840 651264 4096 4096 NT_STATUS_OK
ReadX 9840 655360 61440 61440 NT_STATUS_OK
ReadX 9840 716800 4096 4096 NT_STATUS_OK
ReadX 9840 720896 61440 61440 NT_STATUS_OK
ReadX 9840 782336 4096 4096 NT_STATUS_OK
ReadX 9840 786432 61440 61440 NT_STATUS_OK
ReadX 9840 847872 4096 4096 NT_STATUS_OK
ReadX 9840 851968 61440 61440 NT_STATUS_OK
ReadX 9840 913408 4096 4096 NT_STATUS_OK
ReadX 9840 917504 61440 61440 NT_STATUS_OK
ReadX 9840 978944 4096 4096 NT_STATUS_OK
ReadX 9840 983040 61440 61440 NT_STATUS_OK
ReadX 9840 1044480 4096 4096 NT_STATUS_OK
ReadX 9840 1048576 61440 61440 NT_STATUS_OK
ReadX 9840 1110016 4096 4096 NT_STATUS_OK
ReadX 9840 1114112 61440 61440 NT_STATUS_OK
ReadX 9840 1175552 4096 4096 NT_STATUS_OK
ReadX 9840 1179648 61440 61440 NT_STATUS_OK
ReadX 9840 1241088 4096 4096 NT_STATUS_OK
ReadX 9840 1245184 61440 61440 NT_STATUS_OK
ReadX 9840 1306624 4096 4096 NT_STATUS_OK
ReadX 9840 1310720 61440 61440 NT_STATUS_OK
ReadX 9840 1372160 4096 4096 NT_STATUS_OK
ReadX 9840 1376256 61440 61440 NT_STATUS_OK
ReadX 9840 1437696 4096 4096 NT_STATUS_OK
ReadX 9840 1441792 61440 61440 NT_STATUS_OK
ReadX 9840 1503232 4096 4096 NT_STATUS_OK
ReadX 9840 1507328 61440 61440 NT_STATUS_OK
ReadX 9840 1568768 4096 4096 NT_STATUS_OK
ReadX 9840 1572864 61440 61440 NT_STATUS_OK
ReadX 9840 1634304 4096 4096 NT_STATUS_OK
ReadX 9840 1638400 61440 61440 NT_STATUS_OK
ReadX 9840 1699840 4096 4096 NT_STATUS_OK
ReadX 9840 1703936 61440 61440 NT_STATUS_OK
ReadX 9840 1765376 4096 4096 NT_STATUS_OK
ReadX 9840 1769472 61440 61440 NT_STATUS_OK
ReadX 9840 1830912 4096 4096 NT_STATUS_OK
ReadX 9840 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9842 NT_STATUS_OK
QUERY_FILE_INFORMATION 9842 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9842 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9842 1005 NT_STATUS_OK
ReadX 9842 2156 24 24 NT_STATUS_OK
ReadX 9842 2139 276 276 NT_STATUS_OK
ReadX 9842 2136 14 14 NT_STATUS_OK
ReadX 9842 2136 7 7 NT_STATUS_OK
ReadX 9842 2138 12 12 NT_STATUS_OK
ReadX 9842 2137 8 8 NT_STATUS_OK
ReadX 9842 2135 15 15 NT_STATUS_OK
ReadX 9842 0 16 16 NT_STATUS_OK
ReadX 9842 16 2048 2048 NT_STATUS_OK
ReadX 9842 2064 2048 2048 NT_STATUS_OK
ReadX 9842 257 2048 2048 NT_STATUS_OK
ReadX 9842 385 2048 2048 NT_STATUS_OK
ReadX 9842 513 2048 2048 NT_STATUS_OK
ReadX 9842 641 2048 2048 NT_STATUS_OK
ReadX 9842 769 2048 2048 NT_STATUS_OK
ReadX 9842 897 2048 2048 NT_STATUS_OK
ReadX 9842 1025 2048 2048 NT_STATUS_OK
ReadX 9842 1153 2048 2048 NT_STATUS_OK
ReadX 9842 1281 2048 2048 NT_STATUS_OK
ReadX 9842 1409 2048 2048 NT_STATUS_OK
ReadX 9842 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 9844 NT_STATUS_OK
Close 9844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 9838 NT_STATUS_OK
Close 9839 NT_STATUS_OK
Close 9840 NT_STATUS_OK
Close 9832 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9847 NT_STATUS_OK
WriteX 9847 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9847 258 NT_STATUS_OK
WriteX 9847 0 10575 10575 NT_STATUS_OK
Flush 9847 NT_STATUS_OK
Close 9847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9848 NT_STATUS_OK
Close 9848 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9850 NT_STATUS_OK
ReadX 9850 0 4096 4096 NT_STATUS_OK
Close 9842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9852 NT_STATUS_OK
LockX 9852 2147483538 1 NT_STATUS_OK
UnlockX 9852 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9852 1005 NT_STATUS_OK
ReadX 9852 0 512 512 NT_STATUS_OK
ReadX 9852 512 512 512 NT_STATUS_OK
ReadX 9852 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 9852 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9852 1004 NT_STATUS_OK
Close 9852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9853 NT_STATUS_OK
QUERY_FILE_INFORMATION 9853 1005 NT_STATUS_OK
ReadX 9853 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9854 NT_STATUS_OK
LockX 9854 2147483538 1 NT_STATUS_OK
UnlockX 9854 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9854 1005 NT_STATUS_OK
ReadX 9854 0 512 512 NT_STATUS_OK
ReadX 9854 512 512 512 NT_STATUS_OK
ReadX 9854 1024 512 512 NT_STATUS_OK
ReadX 9854 288 20 20 NT_STATUS_OK
ReadX 9854 308 2084 2084 NT_STATUS_OK
ReadX 9854 388 2084 2084 NT_STATUS_OK
ReadX 9854 388 2084 2084 NT_STATUS_OK
ReadX 9841 2157 1386 1386 NT_STATUS_OK
ReadX 9854 2472 399 399 NT_STATUS_OK
ReadX 9854 3072 1536 1536 NT_STATUS_OK
ReadX 9854 544 149 149 NT_STATUS_OK
ReadX 9854 693 485 485 NT_STATUS_OK
Close 9854 NT_STATUS_OK
ReadX 9841 2157 4096 4096 NT_STATUS_OK
ReadX 9841 6253 4096 4096 NT_STATUS_OK
ReadX 9841 10349 4096 4096 NT_STATUS_OK
ReadX 9841 14445 4096 4096 NT_STATUS_OK
ReadX 9841 18541 4096 4096 NT_STATUS_OK
ReadX 9841 22637 256 256 NT_STATUS_OK
ReadX 9841 22893 4096 4096 NT_STATUS_OK
ReadX 9841 26989 4096 4096 NT_STATUS_OK
ReadX 9841 31085 4096 4096 NT_STATUS_OK
ReadX 9841 35181 4096 4096 NT_STATUS_OK
ReadX 9841 39277 4096 4096 NT_STATUS_OK
ReadX 9841 43373 4096 4096 NT_STATUS_OK
ReadX 9841 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9841 2157 1024 1024 NT_STATUS_OK
ReadX 9841 1667 4688 4688 NT_STATUS_OK
ReadX 9841 6355 3516 3516 NT_STATUS_OK
ReadX 9841 9871 16384 16384 NT_STATUS_OK
ReadX 9841 26255 3771 3771 NT_STATUS_OK
ReadX 9841 30026 2048 2048 NT_STATUS_OK
ReadX 9841 32074 1024 1024 NT_STATUS_OK
ReadX 9841 33098 6652 6652 NT_STATUS_OK
ReadX 9841 39750 16384 16384 NT_STATUS_OK
ReadX 9841 56134 10496 10496 NT_STATUS_OK
ReadX 9841 66630 1784 1784 NT_STATUS_OK
ReadX 9841 68414 90 90 NT_STATUS_OK
ReadX 9841 68504 273 273 NT_STATUS_OK
ReadX 9841 68777 1600 1600 NT_STATUS_OK
ReadX 9841 70377 640 640 NT_STATUS_OK
ReadX 9841 71017 1280 1280 NT_STATUS_OK
ReadX 9841 72297 8464 8464 NT_STATUS_OK
ReadX 9841 80761 158 158 NT_STATUS_OK
ReadX 9841 80919 912 912 NT_STATUS_OK
ReadX 9841 81831 1980 1980 NT_STATUS_OK
ReadX 9841 83811 2256 2256 NT_STATUS_OK
ReadX 9841 86067 400 400 NT_STATUS_OK
ReadX 9841 86467 252 252 NT_STATUS_OK
ReadX 9841 86719 42 42 NT_STATUS_OK
ReadX 9841 86761 725 725 NT_STATUS_OK
ReadX 9841 2009 512 512 NT_STATUS_OK
ReadX 9841 3895 9 9 NT_STATUS_OK
ReadX 9841 3781 46 46 NT_STATUS_OK
ReadX 9841 4059 92 92 NT_STATUS_OK
ReadX 9841 3781 92 92 NT_STATUS_OK
ReadX 9841 3986 184 184 NT_STATUS_OK
ReadX 9841 3987 16384 16384 NT_STATUS_OK
ReadX 9841 3902 16384 16384 NT_STATUS_OK
ReadX 9841 3781 10240 10240 NT_STATUS_OK
ReadX 9841 3821 16384 16384 NT_STATUS_OK
ReadX 9841 3891 935 935 NT_STATUS_OK
ReadX 9841 4060 10240 10240 NT_STATUS_OK
ReadX 9841 4059 184 184 NT_STATUS_OK
ReadX 9841 256 184 184 NT_STATUS_OK
ReadX 9841 256 1026 1026 NT_STATUS_OK
ReadX 9841 3901 326 326 NT_STATUS_OK
ReadX 9841 3899 652 652 NT_STATUS_OK
ReadX 9841 256 2 2 NT_STATUS_OK
ReadX 9841 258 4948 4948 NT_STATUS_OK
Close 9841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9856 NT_STATUS_OK
Close 9856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9859 NT_STATUS_OK
WriteX 9859 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9859 258 NT_STATUS_OK
WriteX 9859 0 65536 65536 NT_STATUS_OK
WriteX 9859 65536 65536 65536 NT_STATUS_OK
WriteX 9859 131072 65536 65536 NT_STATUS_OK
WriteX 9859 196608 65536 65536 NT_STATUS_OK
WriteX 9859 262144 65536 65536 NT_STATUS_OK
WriteX 9859 327680 65536 65536 NT_STATUS_OK
WriteX 9859 393216 65536 65536 NT_STATUS_OK
WriteX 9859 458752 65536 65536 NT_STATUS_OK
WriteX 9859 524288 65536 65536 NT_STATUS_OK
WriteX 9859 589824 35257 35257 NT_STATUS_OK
Close 9859 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9861 NT_STATUS_OK
Close 9861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9864 NT_STATUS_OK
WriteX 9864 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9864 258 NT_STATUS_OK
WriteX 9864 0 65536 65536 NT_STATUS_OK
WriteX 9864 65536 65536 65536 NT_STATUS_OK
WriteX 9864 131072 65536 65536 NT_STATUS_OK
WriteX 9864 196608 65536 65536 NT_STATUS_OK
WriteX 9864 262144 65536 65536 NT_STATUS_OK
WriteX 9864 327680 65536 65536 NT_STATUS_OK
WriteX 9864 393216 65536 65536 NT_STATUS_OK
WriteX 9864 458752 65536 65536 NT_STATUS_OK
WriteX 9864 524288 65536 65536 NT_STATUS_OK
WriteX 9864 589824 57598 57598 NT_STATUS_OK
Close 9864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9866 NT_STATUS_OK
WriteX 9866 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9866 258 NT_STATUS_OK
WriteX 9866 0 12543 12543 NT_STATUS_OK
Flush 9866 NT_STATUS_OK
Close 9866 NT_STATUS_OK
Close 9850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9868 NT_STATUS_OK
Close 9868 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9870 NT_STATUS_OK
ReadX 9870 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9871 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9872 NT_STATUS_OK
QUERY_FILE_INFORMATION 9872 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9872 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9872 1005 NT_STATUS_OK
ReadX 9872 1938 24 24 NT_STATUS_OK
ReadX 9872 1920 276 276 NT_STATUS_OK
ReadX 9872 1918 14 14 NT_STATUS_OK
ReadX 9872 1918 7 7 NT_STATUS_OK
ReadX 9872 1919 12 12 NT_STATUS_OK
ReadX 9872 1919 8 8 NT_STATUS_OK
ReadX 9872 1917 15 15 NT_STATUS_OK
ReadX 9872 0 16 16 NT_STATUS_OK
ReadX 9872 16 2048 2048 NT_STATUS_OK
ReadX 9872 2064 2048 2048 NT_STATUS_OK
ReadX 9872 257 2048 2048 NT_STATUS_OK
ReadX 9872 385 2048 2048 NT_STATUS_OK
ReadX 9872 513 2048 2048 NT_STATUS_OK
ReadX 9872 641 2048 2048 NT_STATUS_OK
ReadX 9872 769 2048 2048 NT_STATUS_OK
ReadX 9872 897 2048 2048 NT_STATUS_OK
ReadX 9872 1025 2048 2048 NT_STATUS_OK
ReadX 9872 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 9874 NT_STATUS_OK
Close 9874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9877 NT_STATUS_OK
WriteX 9877 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9877 258 NT_STATUS_OK
WriteX 9877 0 11588 11588 NT_STATUS_OK
Flush 9877 NT_STATUS_OK
Close 9877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9878 NT_STATUS_OK
Close 9878 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9880 NT_STATUS_OK
ReadX 9880 0 4096 4096 NT_STATUS_OK
Close 9872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9882 NT_STATUS_OK
WriteX 9882 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9882 258 NT_STATUS_OK
WriteX 9882 0 11615 11615 NT_STATUS_OK
Flush 9882 NT_STATUS_OK
Close 9882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9884 NT_STATUS_OK
Close 9884 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9886 NT_STATUS_OK
ReadX 9886 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9888 NT_STATUS_OK
Close 9888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9891 NT_STATUS_OK
WriteX 9891 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9891 258 NT_STATUS_OK
WriteX 9891 0 65536 65536 NT_STATUS_OK
WriteX 9891 65536 16050 16050 NT_STATUS_OK
Close 9891 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9871 1939 64 64 NT_STATUS_OK
ReadX 9871 128 248 248 NT_STATUS_OK
ReadX 9871 128 568 568 NT_STATUS_OK
ReadX 9871 3872 1536 1536 NT_STATUS_OK
ReadX 9871 3456 2560 2560 NT_STATUS_OK
ReadX 9871 3136 512 512 NT_STATUS_OK
ReadX 9871 2880 4096 4096 NT_STATUS_OK
ReadX 9871 3264 3072 3072 NT_STATUS_OK
ReadX 9871 320 4096 4096 NT_STATUS_OK
ReadX 9871 1024 4096 4096 NT_STATUS_OK
ReadX 9871 3616 4096 4096 NT_STATUS_OK
ReadX 9871 1939 64 64 NT_STATUS_OK
ReadX 9871 128 248 248 NT_STATUS_OK
ReadX 9871 128 608 608 NT_STATUS_OK
ReadX 9871 2858 1024 1024 NT_STATUS_OK
ReadX 9871 2810 4096 4096 NT_STATUS_OK
ReadX 9871 2826 4096 4096 NT_STATUS_OK
ReadX 9871 2580 2048 2048 NT_STATUS_OK
ReadX 9871 2800 2560 2560 NT_STATUS_OK
ReadX 9871 2100 4096 4096 NT_STATUS_OK
ReadX 9871 2084 4096 4096 NT_STATUS_OK
ReadX 9871 868 4096 4096 NT_STATUS_OK
ReadX 9871 2324 4096 4096 NT_STATUS_OK
ReadX 9871 884 4096 4096 NT_STATUS_OK
ReadX 9871 2604 1024 1024 NT_STATUS_OK
ReadX 9871 580 4096 4096 NT_STATUS_OK
ReadX 9871 596 4096 4096 NT_STATUS_OK
ReadX 9871 2752 4096 4096 NT_STATUS_OK
ReadX 9871 2842 1024 1024 NT_STATUS_OK
ReadX 9871 660 4096 4096 NT_STATUS_OK
ReadX 9871 2720 4096 4096 NT_STATUS_OK
ReadX 9871 2736 4096 4096 NT_STATUS_OK
ReadX 9871 628 4096 4096 NT_STATUS_OK
ReadX 9871 2704 4096 4096 NT_STATUS_OK
ReadX 9871 1556 4096 4096 NT_STATUS_OK
ReadX 9871 576 4096 4096 NT_STATUS_OK
ReadX 9871 3168 1536 1536 NT_STATUS_OK
ReadX 9871 832 4096 4096 NT_STATUS_OK
ReadX 9871 1088 4096 4096 NT_STATUS_OK
ReadX 9871 1344 4096 4096 NT_STATUS_OK
ReadX 9871 1600 4096 4096 NT_STATUS_OK
ReadX 9871 1856 4096 4096 NT_STATUS_OK
ReadX 9871 2112 4096 4096 NT_STATUS_OK
ReadX 9871 1892 4096 4096 NT_STATUS_OK
ReadX 9871 820 4096 4096 NT_STATUS_OK
ReadX 9871 788 4096 4096 NT_STATUS_OK
ReadX 9871 1604 4096 4096 NT_STATUS_OK
ReadX 9871 3648 4096 4096 NT_STATUS_OK
ReadX 9871 2608 4096 4096 NT_STATUS_OK
ReadX 9871 548 4096 4096 NT_STATUS_OK
ReadX 9871 740 4096 4096 NT_STATUS_OK
ReadX 9871 1344 4096 4096 NT_STATUS_OK
ReadX 9871 3392 4096 4096 NT_STATUS_OK
ReadX 9871 3904 4096 4096 NT_STATUS_OK
ReadX 9871 644 4096 4096 NT_STATUS_OK
ReadX 9871 676 4096 4096 NT_STATUS_OK
ReadX 9871 2688 4096 4096 NT_STATUS_OK
ReadX 9871 320 4096 4096 NT_STATUS_OK
ReadX 9871 900 4096 4096 NT_STATUS_OK
ReadX 9871 1908 4096 4096 NT_STATUS_OK
ReadX 9871 852 4096 4096 NT_STATUS_OK
ReadX 9871 724 4096 4096 NT_STATUS_OK
ReadX 9871 2292 4096 4096 NT_STATUS_OK
ReadX 9871 612 4096 4096 NT_STATUS_OK
ReadX 9871 388 4096 4096 NT_STATUS_OK
ReadX 9871 2368 4096 4096 NT_STATUS_OK
ReadX 9871 2624 4096 4096 NT_STATUS_OK
ReadX 9871 500 4096 4096 NT_STATUS_OK
ReadX 9871 356 4096 4096 NT_STATUS_OK
ReadX 9871 1024 4096 4096 NT_STATUS_OK
ReadX 9871 576 4096 4096 NT_STATUS_OK
ReadX 9871 340 4096 4096 NT_STATUS_OK
ReadX 9871 420 4096 4096 NT_STATUS_OK
ReadX 9871 1600 4096 4096 NT_STATUS_OK
ReadX 9871 404 4096 4096 NT_STATUS_OK
ReadX 9871 1428 4096 4096 NT_STATUS_OK
ReadX 9871 2656 4096 4096 NT_STATUS_OK
ReadX 9871 2624 4096 4096 NT_STATUS_OK
ReadX 9871 452 4096 4096 NT_STATUS_OK
ReadX 9871 692 4096 4096 NT_STATUS_OK
ReadX 9871 564 4096 4096 NT_STATUS_OK
ReadX 9871 372 4096 4096 NT_STATUS_OK
ReadX 9871 468 4096 4096 NT_STATUS_OK
ReadX 9871 484 4096 4096 NT_STATUS_OK
ReadX 9871 1088 4096 4096 NT_STATUS_OK
ReadX 9871 1924 4096 4096 NT_STATUS_OK
ReadX 9871 2768 4096 4096 NT_STATUS_OK
ReadX 9871 832 4096 4096 NT_STATUS_OK
ReadX 9871 836 4096 4096 NT_STATUS_OK
ReadX 9871 1856 4096 4096 NT_STATUS_OK
ReadX 9871 2640 4096 4096 NT_STATUS_OK
ReadX 9871 436 4096 4096 NT_STATUS_OK
ReadX 9871 1828 4096 4096 NT_STATUS_OK
ReadX 9871 804 4096 4096 NT_STATUS_OK
ReadX 9871 1860 4096 4096 NT_STATUS_OK
ReadX 9871 1812 4096 4096 NT_STATUS_OK
ReadX 9871 756 4096 4096 NT_STATUS_OK
ReadX 9871 1636 4096 4096 NT_STATUS_OK
ReadX 9871 772 4096 4096 NT_STATUS_OK
ReadX 9871 2036 4096 4096 NT_STATUS_OK
ReadX 9871 1220 4096 4096 NT_STATUS_OK
ReadX 9871 1652 4096 4096 NT_STATUS_OK
ReadX 9871 2588 4096 4096 NT_STATUS_OK
ReadX 9871 916 4096 4096 NT_STATUS_OK
ReadX 9871 260 4096 4096 NT_STATUS_OK
ReadX 9871 932 4096 4096 NT_STATUS_OK
ReadX 9871 2624 4096 4096 NT_STATUS_OK
ReadX 9871 308 4096 4096 NT_STATUS_OK
ReadX 9871 292 4096 4096 NT_STATUS_OK
ReadX 9871 1140 4096 4096 NT_STATUS_OK
ReadX 9871 276 4096 4096 NT_STATUS_OK
ReadX 9871 2020 4096 4096 NT_STATUS_OK
ReadX 9871 2880 4096 4096 NT_STATUS_OK
ReadX 9871 516 4096 4096 NT_STATUS_OK
ReadX 9871 1844 4096 4096 NT_STATUS_OK
ReadX 9871 1124 4096 4096 NT_STATUS_OK
ReadX 9871 3136 4096 4096 NT_STATUS_OK
ReadX 9871 324 4096 4096 NT_STATUS_OK
ReadX 9871 1156 4096 4096 NT_STATUS_OK
ReadX 9871 1172 4096 4096 NT_STATUS_OK
ReadX 9871 2112 4096 4096 NT_STATUS_OK
ReadX 9871 2368 4096 4096 NT_STATUS_OK
ReadX 9871 964 4096 4096 NT_STATUS_OK
ReadX 9871 980 4096 4096 NT_STATUS_OK
ReadX 9871 1012 4096 4096 NT_STATUS_OK
ReadX 9871 532 4096 4096 NT_STATUS_OK
ReadX 9871 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9871 1620 4096 4096 NT_STATUS_OK
ReadX 9871 1604 4096 4096 NT_STATUS_OK
ReadX 9871 2116 4096 4096 NT_STATUS_OK
ReadX 9871 2132 4096 4096 NT_STATUS_OK
ReadX 9871 2148 4096 4096 NT_STATUS_OK
ReadX 9871 2276 4096 4096 NT_STATUS_OK
ReadX 9871 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9893 NT_STATUS_OK
Close 9893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9896 NT_STATUS_OK
QUERY_FILE_INFORMATION 9851 1004 NT_STATUS_OK
Close 9851 NT_STATUS_OK
WriteX 9896 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9896 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 9853 1004 NT_STATUS_OK
Close 9853 NT_STATUS_OK
WriteX 9896 0 65536 65536 NT_STATUS_OK
WriteX 9896 65536 64850 64850 NT_STATUS_OK
Close 9896 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9898 NT_STATUS_OK
WriteX 9898 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9898 258 NT_STATUS_OK
ReadX 9871 2068 4096 4096 NT_STATUS_OK
ReadX 9871 1588 4096 4096 NT_STATUS_OK
ReadX 9871 1572 4096 4096 NT_STATUS_OK
WriteX 9898 0 18630 18630 NT_STATUS_OK
Flush 9898 NT_STATUS_OK
Close 9898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9900 NT_STATUS_OK
Close 9900 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9902 NT_STATUS_OK
ReadX 9902 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9871 612 4096 4096 NT_STATUS_OK
ReadX 9871 564 4096 4096 NT_STATUS_OK
ReadX 9871 1876 4096 4096 NT_STATUS_OK
ReadX 9871 628 4096 4096 NT_STATUS_OK
ReadX 9871 740 4096 4096 NT_STATUS_OK
ReadX 9871 724 4096 4096 NT_STATUS_OK
ReadX 9871 644 4096 4096 NT_STATUS_OK
ReadX 9871 2324 4096 4096 NT_STATUS_OK
ReadX 9871 660 4096 4096 NT_STATUS_OK
ReadX 9871 852 4096 4096 NT_STATUS_OK
ReadX 9871 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9871 2368 4096 4096 NT_STATUS_OK
ReadX 9871 1024 4096 4096 NT_STATUS_OK
ReadX 9871 320 4096 4096 NT_STATUS_OK
ReadX 9871 580 4096 4096 NT_STATUS_OK
ReadX 9871 3136 512 512 NT_STATUS_OK
ReadX 9871 2880 4096 4096 NT_STATUS_OK
Close 9871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9903 NT_STATUS_OK
ReadX 9903 61440 4096 4096 NT_STATUS_OK
ReadX 9903 126976 4096 4096 NT_STATUS_OK
WriteX 9903 0 65536 65536 NT_STATUS_OK
WriteX 9903 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9904 NT_STATUS_OK
ReadX 9904 61440 4096 4096 NT_STATUS_OK
ReadX 9904 126976 4096 4096 NT_STATUS_OK
ReadX 9904 192512 4096 4096 NT_STATUS_OK
ReadX 9904 258048 4096 4096 NT_STATUS_OK
WriteX 9904 0 65536 65536 NT_STATUS_OK
WriteX 9904 65536 65536 65536 NT_STATUS_OK
WriteX 9904 131072 65536 65536 NT_STATUS_OK
WriteX 9904 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9905 NT_STATUS_OK
ReadX 9905 61440 4096 4096 NT_STATUS_OK
ReadX 9905 126976 4096 4096 NT_STATUS_OK
ReadX 9905 192512 4096 4096 NT_STATUS_OK
ReadX 9905 258048 4096 4096 NT_STATUS_OK
ReadX 9905 323584 4096 4096 NT_STATUS_OK
ReadX 9905 389120 4096 4096 NT_STATUS_OK
ReadX 9905 454656 4096 4096 NT_STATUS_OK
ReadX 9905 520192 4096 4096 NT_STATUS_OK
WriteX 9905 0 65536 65536 NT_STATUS_OK
WriteX 9905 65536 65536 65536 NT_STATUS_OK
WriteX 9905 131072 65536 65536 NT_STATUS_OK
WriteX 9905 196608 65536 65536 NT_STATUS_OK
WriteX 9905 262144 65536 65536 NT_STATUS_OK
WriteX 9905 327680 65536 65536 NT_STATUS_OK
WriteX 9905 393216 65536 65536 NT_STATUS_OK
WriteX 9905 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 9906 NT_STATUS_OK
ReadX 9906 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 9907 NT_STATUS_OK
Close 9907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 9908 NT_STATUS_OK
WriteX 9908 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9908 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9906 0 8192 8192 NT_STATUS_OK
Flush 9906 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9906 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9906 0 8192 8192 NT_STATUS_OK
Flush 9906 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9906 0 8192 8192 NT_STATUS_OK
Flush 9906 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9906 0 8192 8192 NT_STATUS_OK
Flush 9906 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9910 NT_STATUS_OK
Close 9910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 9902 NT_STATUS_OK
Close 9870 NT_STATUS_OK
Close 9903 NT_STATUS_OK
Close 9904 NT_STATUS_OK
Close 9905 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9913 NT_STATUS_OK
WriteX 9913 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9913 258 NT_STATUS_OK
WriteX 9913 0 62591 62591 NT_STATUS_OK
Close 9913 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9915 NT_STATUS_OK
Close 9915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9918 NT_STATUS_OK
WriteX 9918 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9918 258 NT_STATUS_OK
WriteX 9918 0 10845 10845 NT_STATUS_OK
Close 9918 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9920 NT_STATUS_OK
Close 9920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9923 NT_STATUS_OK
WriteX 9923 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9923 258 NT_STATUS_OK
WriteX 9923 0 30118 30118 NT_STATUS_OK
Close 9923 NT_STATUS_OK
WriteX 9906 0 4096 4096 NT_STATUS_OK
WriteX 9908 0 64 64 NT_STATUS_OK
Close 9908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 9906 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9925 NT_STATUS_OK
ReadX 9925 0 61440 61440 NT_STATUS_OK
ReadX 9925 61440 4096 4096 NT_STATUS_OK
ReadX 9925 65536 61440 61440 NT_STATUS_OK
ReadX 9925 126976 4096 4096 NT_STATUS_OK
ReadX 9925 131072 61440 61440 NT_STATUS_OK
ReadX 9925 192512 4096 4096 NT_STATUS_OK
ReadX 9925 196608 61440 61440 NT_STATUS_OK
ReadX 9925 258048 4096 4096 NT_STATUS_OK
ReadX 9925 262144 61440 61440 NT_STATUS_OK
ReadX 9925 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9926 NT_STATUS_OK
ReadX 9926 0 61440 61440 NT_STATUS_OK
ReadX 9926 61440 4096 4096 NT_STATUS_OK
ReadX 9926 65536 61440 61440 NT_STATUS_OK
ReadX 9926 126976 4096 4096 NT_STATUS_OK
ReadX 9926 131072 61440 61440 NT_STATUS_OK
ReadX 9926 192512 4096 4096 NT_STATUS_OK
ReadX 9926 196608 61440 61440 NT_STATUS_OK
ReadX 9926 258048 4096 4096 NT_STATUS_OK
ReadX 9926 262144 61440 61440 NT_STATUS_OK
ReadX 9926 323584 4096 4096 NT_STATUS_OK
ReadX 9926 327680 61440 61440 NT_STATUS_OK
ReadX 9926 389120 4096 4096 NT_STATUS_OK
ReadX 9926 393216 61440 61440 NT_STATUS_OK
ReadX 9926 454656 4096 4096 NT_STATUS_OK
ReadX 9926 458752 61440 61440 NT_STATUS_OK
ReadX 9926 520192 4096 4096 NT_STATUS_OK
ReadX 9926 524288 61440 61440 NT_STATUS_OK
ReadX 9926 585728 4096 4096 NT_STATUS_OK
ReadX 9926 589824 61440 61440 NT_STATUS_OK
ReadX 9926 651264 4096 4096 NT_STATUS_OK
ReadX 9926 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9927 NT_STATUS_OK
ReadX 9927 0 61440 61440 NT_STATUS_OK
ReadX 9927 61440 4096 4096 NT_STATUS_OK
ReadX 9927 65536 61440 61440 NT_STATUS_OK
ReadX 9927 126976 4096 4096 NT_STATUS_OK
ReadX 9927 131072 61440 61440 NT_STATUS_OK
ReadX 9927 192512 4096 4096 NT_STATUS_OK
ReadX 9927 196608 61440 61440 NT_STATUS_OK
ReadX 9927 258048 4096 4096 NT_STATUS_OK
ReadX 9927 262144 61440 61440 NT_STATUS_OK
ReadX 9927 323584 4096 4096 NT_STATUS_OK
ReadX 9927 327680 61440 61440 NT_STATUS_OK
ReadX 9927 389120 4096 4096 NT_STATUS_OK
ReadX 9927 393216 61440 61440 NT_STATUS_OK
ReadX 9927 454656 4096 4096 NT_STATUS_OK
ReadX 9927 458752 61440 61440 NT_STATUS_OK
ReadX 9927 520192 4096 4096 NT_STATUS_OK
ReadX 9927 524288 61440 61440 NT_STATUS_OK
ReadX 9927 585728 4096 4096 NT_STATUS_OK
ReadX 9927 589824 61440 61440 NT_STATUS_OK
ReadX 9927 651264 4096 4096 NT_STATUS_OK
ReadX 9927 655360 61440 61440 NT_STATUS_OK
ReadX 9927 716800 4096 4096 NT_STATUS_OK
ReadX 9927 720896 61440 61440 NT_STATUS_OK
ReadX 9927 782336 4096 4096 NT_STATUS_OK
ReadX 9927 786432 61440 61440 NT_STATUS_OK
ReadX 9927 847872 4096 4096 NT_STATUS_OK
ReadX 9927 851968 61440 61440 NT_STATUS_OK
ReadX 9927 913408 4096 4096 NT_STATUS_OK
ReadX 9927 917504 61440 61440 NT_STATUS_OK
ReadX 9927 978944 4096 4096 NT_STATUS_OK
ReadX 9927 983040 61440 61440 NT_STATUS_OK
ReadX 9927 1044480 4096 4096 NT_STATUS_OK
ReadX 9927 1048576 61440 61440 NT_STATUS_OK
ReadX 9927 1110016 4096 4096 NT_STATUS_OK
ReadX 9927 1114112 61440 61440 NT_STATUS_OK
ReadX 9927 1175552 4096 4096 NT_STATUS_OK
ReadX 9927 1179648 61440 61440 NT_STATUS_OK
ReadX 9927 1241088 4096 4096 NT_STATUS_OK
ReadX 9927 1245184 61440 61440 NT_STATUS_OK
ReadX 9927 1306624 4096 4096 NT_STATUS_OK
ReadX 9927 1310720 61440 61440 NT_STATUS_OK
ReadX 9927 1372160 4096 4096 NT_STATUS_OK
ReadX 9927 1376256 61440 61440 NT_STATUS_OK
ReadX 9927 1437696 4096 4096 NT_STATUS_OK
ReadX 9927 1441792 61440 61440 NT_STATUS_OK
ReadX 9927 1503232 4096 4096 NT_STATUS_OK
ReadX 9927 1507328 61440 61440 NT_STATUS_OK
ReadX 9927 1568768 4096 4096 NT_STATUS_OK
ReadX 9927 1572864 61440 61440 NT_STATUS_OK
ReadX 9927 1634304 4096 4096 NT_STATUS_OK
ReadX 9927 1638400 61440 61440 NT_STATUS_OK
ReadX 9927 1699840 4096 4096 NT_STATUS_OK
ReadX 9927 1703936 61440 61440 NT_STATUS_OK
ReadX 9927 1765376 4096 4096 NT_STATUS_OK
ReadX 9927 1769472 61440 61440 NT_STATUS_OK
ReadX 9927 1830912 4096 4096 NT_STATUS_OK
ReadX 9927 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9928 NT_STATUS_OK
Close 9928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9925 NT_STATUS_OK
Close 9926 NT_STATUS_OK
Close 9927 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9930 NT_STATUS_OK
ReadX 9930 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9931 NT_STATUS_OK
ReadX 9931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 9932 NT_STATUS_OK
ReadX 9932 0 4096 4096 NT_STATUS_OK
ReadX 9932 4096 4096 4096 NT_STATUS_OK
ReadX 9932 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9933 NT_STATUS_OK
Close 9933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9930 NT_STATUS_OK
Close 9931 NT_STATUS_OK
Close 9932 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9935 NT_STATUS_OK
ReadX 9935 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9936 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9936 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9937 NT_STATUS_OK
Close 9937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9935 NT_STATUS_OK
Close 9936 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9939 NT_STATUS_OK
ReadX 9939 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9940 NT_STATUS_OK
ReadX 9940 0 8192 8192 NT_STATUS_OK
ReadX 9940 8192 8192 8192 NT_STATUS_OK
ReadX 9940 16384 8192 8192 NT_STATUS_OK
ReadX 9940 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9942 NT_STATUS_OK
Close 9942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9940 NT_STATUS_OK
Close 9939 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9945 NT_STATUS_OK
WriteX 9945 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9945 258 NT_STATUS_OK
WriteX 9945 0 10438 10438 NT_STATUS_OK
Close 9945 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9946 NT_STATUS_OK
Close 9946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9947 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9948 NT_STATUS_OK
Close 9948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9949 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9950 NT_STATUS_OK
Close 9950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9951 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9952 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9953 NT_STATUS_OK
Close 9953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9954 NT_STATUS_OK
ReadX 9954 0 4096 4096 NT_STATUS_OK
ReadX 9954 4096 4096 4096 NT_STATUS_OK
ReadX 9954 8192 4096 4096 NT_STATUS_OK
ReadX 9954 12288 8192 8192 NT_STATUS_OK
ReadX 9954 20480 8192 8192 NT_STATUS_OK
ReadX 9954 28672 8192 8192 NT_STATUS_OK
ReadX 9954 36864 8192 8192 NT_STATUS_OK
ReadX 9954 45056 8192 8192 NT_STATUS_OK
ReadX 9954 53248 8192 8192 NT_STATUS_OK
ReadX 9954 61440 8192 8192 NT_STATUS_OK
ReadX 9954 69632 8192 8192 NT_STATUS_OK
ReadX 9954 77824 8192 8192 NT_STATUS_OK
ReadX 9954 86016 8192 8192 NT_STATUS_OK
ReadX 9954 94208 8192 8192 NT_STATUS_OK
ReadX 9954 102400 8192 8192 NT_STATUS_OK
ReadX 9954 110592 8192 8192 NT_STATUS_OK
ReadX 9954 118784 8192 8192 NT_STATUS_OK
ReadX 9954 126976 8192 8192 NT_STATUS_OK
ReadX 9954 135168 8192 8192 NT_STATUS_OK
ReadX 9954 143360 8192 8192 NT_STATUS_OK
ReadX 9954 151552 8192 8192 NT_STATUS_OK
ReadX 9954 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 9955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9954 NT_STATUS_OK
Close 9947 NT_STATUS_OK
Close 9949 NT_STATUS_OK
Close 9951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 9956 NT_STATUS_OK
Close 9956 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9959 NT_STATUS_OK
WriteX 9959 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9959 258 NT_STATUS_OK
WriteX 9959 0 28489 28489 NT_STATUS_OK
Close 9959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9960 NT_STATUS_OK
Close 9960 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9962 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9962 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9963 NT_STATUS_OK
Close 9963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9962 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9965 NT_STATUS_OK
ReadX 9965 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9966 NT_STATUS_OK
ReadX 9966 0 8192 8192 NT_STATUS_OK
ReadX 9966 8192 8192 8192 NT_STATUS_OK
ReadX 9966 16384 8192 8192 NT_STATUS_OK
ReadX 9966 24576 8192 8192 NT_STATUS_OK
ReadX 9966 32768 16384 16384 NT_STATUS_OK
ReadX 9966 49152 8192 8192 NT_STATUS_OK
ReadX 9966 57344 8192 8192 NT_STATUS_OK
ReadX 9966 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9968 NT_STATUS_OK
Close 9968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9966 NT_STATUS_OK
Close 9965 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9971 NT_STATUS_OK
WriteX 9971 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9971 258 NT_STATUS_OK
WriteX 9971 0 29253 29253 NT_STATUS_OK
Close 9971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 9972 NT_STATUS_OK
Close 9972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 9973 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 9974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 9975 NT_STATUS_OK
Close 9975 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9978 NT_STATUS_OK
WriteX 9978 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9978 258 NT_STATUS_OK
WriteX 9978 0 30183 30183 NT_STATUS_OK
Close 9978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9979 NT_STATUS_OK
Close 9979 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9981 NT_STATUS_OK
WriteX 9981 0 510 510 NT_STATUS_OK
WriteX 9981 510 512 512 NT_STATUS_OK
WriteX 9981 1022 510 510 NT_STATUS_OK
WriteX 9981 1532 510 510 NT_STATUS_OK
WriteX 9981 2042 168 168 NT_STATUS_OK
Close 9981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9982 NT_STATUS_OK
Close 9982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9984 NT_STATUS_OK
ReadX 9984 0 4096 4096 NT_STATUS_OK
WriteX 9984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9985 NT_STATUS_OK
ReadX 9985 61440 4096 4096 NT_STATUS_OK
ReadX 9985 126976 4096 4096 NT_STATUS_OK
WriteX 9985 0 65536 65536 NT_STATUS_OK
WriteX 9985 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9986 NT_STATUS_OK
ReadX 9986 61440 4096 4096 NT_STATUS_OK
ReadX 9986 126976 4096 4096 NT_STATUS_OK
ReadX 9986 192512 4096 4096 NT_STATUS_OK
ReadX 9986 258048 4096 4096 NT_STATUS_OK
WriteX 9986 0 65536 65536 NT_STATUS_OK
WriteX 9986 65536 65536 65536 NT_STATUS_OK
WriteX 9986 131072 65536 65536 NT_STATUS_OK
WriteX 9986 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9987 NT_STATUS_OK
ReadX 9987 61440 4096 4096 NT_STATUS_OK
ReadX 9987 126976 4096 4096 NT_STATUS_OK
ReadX 9987 192512 4096 4096 NT_STATUS_OK
ReadX 9987 258048 4096 4096 NT_STATUS_OK
ReadX 9987 323584 4096 4096 NT_STATUS_OK
ReadX 9987 389120 4096 4096 NT_STATUS_OK
ReadX 9987 454656 4096 4096 NT_STATUS_OK
ReadX 9987 520192 4096 4096 NT_STATUS_OK
WriteX 9987 0 65536 65536 NT_STATUS_OK
WriteX 9987 65536 65536 65536 NT_STATUS_OK
WriteX 9987 131072 65536 65536 NT_STATUS_OK
WriteX 9987 196608 65536 65536 NT_STATUS_OK
WriteX 9987 262144 65536 65536 NT_STATUS_OK
WriteX 9987 327680 65536 65536 NT_STATUS_OK
WriteX 9987 393216 65536 65536 NT_STATUS_OK
WriteX 9987 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9988 NT_STATUS_OK
Close 9988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 9984 NT_STATUS_OK
Close 9985 NT_STATUS_OK
Close 9986 NT_STATUS_OK
Close 9987 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9990 NT_STATUS_OK
Close 9990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 9994 NT_STATUS_OK
Close 9994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 9997 NT_STATUS_OK
Close 9997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 9999 NT_STATUS_OK
Close 9999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10003 NT_STATUS_OK
Close 10003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10006 NT_STATUS_OK
Close 10006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10008 NT_STATUS_OK
Close 10008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10012 NT_STATUS_OK
Close 10012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10017 NT_STATUS_OK
Close 10017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10022 NT_STATUS_OK
Close 10022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10027 NT_STATUS_OK
Close 10027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10032 NT_STATUS_OK
Close 10032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10037 NT_STATUS_OK
Close 10037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10042 NT_STATUS_OK
Close 10042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10047 NT_STATUS_OK
Close 10047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10050 NT_STATUS_OK
Close 10050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10053 NT_STATUS_OK
Close 10053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10056 NT_STATUS_OK
WriteX 10056 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10056 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10056 0 65536 65536 NT_STATUS_OK
WriteX 10056 65536 65536 65536 NT_STATUS_OK
WriteX 10056 131072 65536 65536 NT_STATUS_OK
WriteX 10056 196608 65536 65536 NT_STATUS_OK
WriteX 10056 262144 26634 26634 NT_STATUS_OK
Close 10056 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10061 NT_STATUS_OK
Close 10061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10062 NT_STATUS_OK
Close 10062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10063 NT_STATUS_OK
ReadX 10063 0 4096 4096 NT_STATUS_OK
Close 10063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10064 NT_STATUS_OK
ReadX 10064 0 4096 4096 NT_STATUS_OK
ReadX 10064 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10065 NT_STATUS_OK
Close 10065 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10064 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10069 NT_STATUS_OK
Close 10069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10072 NT_STATUS_OK
Close 10072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10074 NT_STATUS_OK
Close 10074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10078 NT_STATUS_OK
Close 10078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10081 NT_STATUS_OK
Close 10081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10083 NT_STATUS_OK
Close 10083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10087 NT_STATUS_OK
Close 10087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10092 NT_STATUS_OK
Close 10092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10097 NT_STATUS_OK
Close 10097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10102 NT_STATUS_OK
Close 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10107 NT_STATUS_OK
Close 10107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10112 NT_STATUS_OK
Close 10112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10116 NT_STATUS_OK
Close 10116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10121 NT_STATUS_OK
Close 10121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10126 NT_STATUS_OK
Close 10126 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10129 NT_STATUS_OK
Close 10129 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10131 NT_STATUS_OK
Close 10131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10141 NT_STATUS_OK
Close 10141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10142 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10143 NT_STATUS_OK
ReadX 10143 0 4096 4096 NT_STATUS_OK
Close 10143 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10144 NT_STATUS_OK
ReadX 10144 0 4096 4096 NT_STATUS_OK
Close 10144 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10145 NT_STATUS_OK
ReadX 10145 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10155 NT_STATUS_OK
Close 10155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10156 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
Close 10157 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10158 NT_STATUS_OK
ReadX 10158 0 4096 4096 NT_STATUS_OK
Close 10158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10159 NT_STATUS_OK
ReadX 10159 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10145 NT_STATUS_OK
Close 10159 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10188 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10188 0 4096 4096 NT_STATUS_OK
Close 10188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10189 NT_STATUS_OK
ReadX 10189 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10190 NT_STATUS_OK
ReadX 10190 0 4096 4096 NT_STATUS_OK
ReadX 10190 4096 4096 4096 NT_STATUS_OK
ReadX 10190 8192 4096 4096 NT_STATUS_OK
ReadX 10190 12288 4096 4096 NT_STATUS_OK
ReadX 10190 16384 4096 4096 NT_STATUS_OK
ReadX 10190 20480 4096 4096 NT_STATUS_OK
ReadX 10190 24576 4096 4096 NT_STATUS_OK
ReadX 10190 28672 4096 4096 NT_STATUS_OK
ReadX 10190 32768 4096 4096 NT_STATUS_OK
ReadX 10190 36864 4096 4096 NT_STATUS_OK
ReadX 10190 40960 4096 4096 NT_STATUS_OK
ReadX 10190 45056 4096 4096 NT_STATUS_OK
ReadX 10190 49152 4096 4096 NT_STATUS_OK
ReadX 10190 53248 4096 4096 NT_STATUS_OK
ReadX 10190 57344 4096 4096 NT_STATUS_OK
ReadX 10190 61440 4096 4096 NT_STATUS_OK
ReadX 10190 65536 4096 4096 NT_STATUS_OK
ReadX 10190 69632 4096 4096 NT_STATUS_OK
ReadX 10190 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10190 1004 NT_STATUS_OK
WriteX 10190 0 4096 4096 NT_STATUS_OK
Close 10190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10191 NT_STATUS_OK
SET_FILE_INFORMATION 10191 1004 NT_STATUS_OK
Close 10191 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10192 NT_STATUS_OK
ReadX 10192 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10193 NT_STATUS_OK
Close 10193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10196 NT_STATUS_OK
WriteX 10196 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10196 258 NT_STATUS_OK
WriteX 10196 0 65536 65536 NT_STATUS_OK
WriteX 10196 65536 19979 19979 NT_STATUS_OK
Close 10196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10197 NT_STATUS_OK
ReadX 10197 0 4096 4096 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
QUERY_FILE_INFORMATION 10197 1004 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
SET_FILE_INFORMATION 10197 1004 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
Close 10197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10198 NT_STATUS_OK
ReadX 10198 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10199 NT_STATUS_OK
ReadX 10199 0 4096 4096 NT_STATUS_OK
Close 10198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10200 NT_STATUS_OK
ReadX 10200 0 4096 4096 NT_STATUS_OK
Close 10200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10201 NT_STATUS_OK
ReadX 10201 0 4096 4096 NT_STATUS_OK
Close 10201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10202 NT_STATUS_OK
ReadX 10202 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10202 1004 NT_STATUS_OK
WriteX 10202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10203 NT_STATUS_OK
Close 10203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10199 NT_STATUS_OK
Close 10202 NT_STATUS_OK
Close 10192 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10205 NT_STATUS_OK
Close 10205 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10208 NT_STATUS_OK
WriteX 10208 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10208 258 NT_STATUS_OK
WriteX 10208 0 65536 65536 NT_STATUS_OK
WriteX 10208 65536 17654 17654 NT_STATUS_OK
Close 10208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10209 NT_STATUS_OK
ReadX 10209 0 4096 4096 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
QUERY_FILE_INFORMATION 10209 1004 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
SET_FILE_INFORMATION 10209 1004 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
Close 10209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10210 NT_STATUS_OK
SET_FILE_INFORMATION 10210 1004 NT_STATUS_OK
Close 10210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10211 NT_STATUS_OK
ReadX 10211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10212 NT_STATUS_OK
Close 10212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10214 NT_STATUS_OK
ReadX 10214 0 4096 4096 NT_STATUS_OK
ReadX 10214 4096 4096 4096 NT_STATUS_OK
ReadX 10214 8192 4096 4096 NT_STATUS_OK
ReadX 10214 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10214 16384 4096 4096 NT_STATUS_OK
ReadX 10214 20480 4096 4096 NT_STATUS_OK
ReadX 10214 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10215 NT_STATUS_OK
ReadX 10215 0 4096 4096 NT_STATUS_OK
Close 10215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10216 NT_STATUS_OK
ReadX 10216 0 4096 4096 NT_STATUS_OK
Close 10216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10217 NT_STATUS_OK
ReadX 10217 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10217 1004 NT_STATUS_OK
WriteX 10217 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10218 NT_STATUS_OK
Close 10218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10217 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10220 NT_STATUS_OK
Close 10220 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10223 NT_STATUS_OK
WriteX 10223 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10223 258 NT_STATUS_OK
WriteX 10223 0 65536 65536 NT_STATUS_OK
WriteX 10223 65536 19490 19490 NT_STATUS_OK
Close 10223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10224 NT_STATUS_OK
ReadX 10224 0 4096 4096 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
Flush 10224 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
Flush 10224 NT_STATUS_OK
QUERY_FILE_INFORMATION 10224 1004 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
Flush 10224 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
Flush 10224 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
Flush 10224 NT_STATUS_OK
SET_FILE_INFORMATION 10224 1004 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
Flush 10224 NT_STATUS_OK
Close 10224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10225 NT_STATUS_OK
SET_FILE_INFORMATION 10225 1004 NT_STATUS_OK
Close 10225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10226 NT_STATUS_OK
ReadX 10226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10227 NT_STATUS_OK
Close 10227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10229 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10229 0 4096 4096 NT_STATUS_OK
Close 10229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10230 NT_STATUS_OK
ReadX 10230 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 0 4096 4096 NT_STATUS_OK
ReadX 10231 4096 4096 4096 NT_STATUS_OK
ReadX 10231 8192 4096 4096 NT_STATUS_OK
ReadX 10231 12288 4096 4096 NT_STATUS_OK
ReadX 10231 16384 4096 4096 NT_STATUS_OK
ReadX 10231 20480 4096 4096 NT_STATUS_OK
ReadX 10231 24576 4096 4096 NT_STATUS_OK
ReadX 10231 28672 4096 4096 NT_STATUS_OK
ReadX 10231 32768 4096 4096 NT_STATUS_OK
ReadX 10231 36864 4096 4096 NT_STATUS_OK
ReadX 10231 40960 4096 4096 NT_STATUS_OK
ReadX 10231 45056 4096 4096 NT_STATUS_OK
ReadX 10231 49152 4096 4096 NT_STATUS_OK
ReadX 10231 53248 4096 4096 NT_STATUS_OK
ReadX 10231 57344 4096 4096 NT_STATUS_OK
ReadX 10231 61440 4096 4096 NT_STATUS_OK
ReadX 10231 65536 4096 4096 NT_STATUS_OK
ReadX 10231 69632 4096 4096 NT_STATUS_OK
ReadX 10231 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10231 1004 NT_STATUS_OK
WriteX 10231 0 4096 4096 NT_STATUS_OK
Close 10231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10232 NT_STATUS_OK
SET_FILE_INFORMATION 10232 1004 NT_STATUS_OK
Close 10232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10234 NT_STATUS_OK
Close 10234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10226 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10237 NT_STATUS_OK
WriteX 10237 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10237 258 NT_STATUS_OK
WriteX 10237 0 65536 65536 NT_STATUS_OK
WriteX 10237 65536 8866 8866 NT_STATUS_OK
Close 10237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10238 NT_STATUS_OK
ReadX 10238 0 4096 4096 NT_STATUS_OK
WriteX 10238 0 4096 4096 NT_STATUS_OK
Flush 10238 NT_STATUS_OK
SET_FILE_INFORMATION 10238 1004 NT_STATUS_OK
WriteX 10238 0 4096 4096 NT_STATUS_OK
Flush 10238 NT_STATUS_OK
Close 10238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10239 NT_STATUS_OK
ReadX 10239 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10240 NT_STATUS_OK
ReadX 10240 0 4096 4096 NT_STATUS_OK
Close 10240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10241 NT_STATUS_OK
ReadX 10241 0 4096 4096 NT_STATUS_OK
Close 10241 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10242 NT_STATUS_OK
ReadX 10242 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10242 1004 NT_STATUS_OK
WriteX 10242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10243 NT_STATUS_OK
Close 10243 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10242 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10245 NT_STATUS_OK
Close 10245 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10248 NT_STATUS_OK
WriteX 10248 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10248 258 NT_STATUS_OK
WriteX 10248 0 65536 65536 NT_STATUS_OK
WriteX 10248 65536 9298 9298 NT_STATUS_OK
Close 10248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10249 NT_STATUS_OK
ReadX 10249 0 4096 4096 NT_STATUS_OK
WriteX 10249 0 4096 4096 NT_STATUS_OK
Flush 10249 NT_STATUS_OK
SET_FILE_INFORMATION 10249 1004 NT_STATUS_OK
WriteX 10249 0 4096 4096 NT_STATUS_OK
Flush 10249 NT_STATUS_OK
Close 10249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10250 NT_STATUS_OK
SET_FILE_INFORMATION 10250 1004 NT_STATUS_OK
Close 10250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10251 NT_STATUS_OK
ReadX 10251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10252 NT_STATUS_OK
Close 10252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10255 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10255 0 4096 4096 NT_STATUS_OK
Close 10255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10256 NT_STATUS_OK
ReadX 10256 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10256 4096 4096 4096 NT_STATUS_OK
ReadX 10256 8192 4096 4096 NT_STATUS_OK
ReadX 10256 12288 4096 4096 NT_STATUS_OK
ReadX 10256 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10257 NT_STATUS_OK
ReadX 10257 0 4096 4096 NT_STATUS_OK
Close 10257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10258 NT_STATUS_OK
ReadX 10258 0 4096 4096 NT_STATUS_OK
Close 10258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10259 NT_STATUS_OK
ReadX 10259 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10259 1004 NT_STATUS_OK
WriteX 10259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10260 NT_STATUS_OK
Close 10260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10259 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10262 NT_STATUS_OK
Close 10262 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10265 NT_STATUS_OK
WriteX 10265 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10265 258 NT_STATUS_OK
WriteX 10265 0 65536 65536 NT_STATUS_OK
WriteX 10265 65536 11540 11540 NT_STATUS_OK
Close 10265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10266 NT_STATUS_OK
ReadX 10266 0 4096 4096 NT_STATUS_OK
WriteX 10266 0 4096 4096 NT_STATUS_OK
Flush 10266 NT_STATUS_OK
SET_FILE_INFORMATION 10266 1004 NT_STATUS_OK
WriteX 10266 0 4096 4096 NT_STATUS_OK
Flush 10266 NT_STATUS_OK
Close 10266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10267 NT_STATUS_OK
SET_FILE_INFORMATION 10267 1004 NT_STATUS_OK
Close 10267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10268 NT_STATUS_OK
ReadX 10268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10269 NT_STATUS_OK
Close 10269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10271 NT_STATUS_OK
ReadX 10271 61440 4096 4096 NT_STATUS_OK
ReadX 10271 126976 4096 4096 NT_STATUS_OK
WriteX 10271 0 65536 65536 NT_STATUS_OK
WriteX 10271 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10272 NT_STATUS_OK
ReadX 10272 61440 4096 4096 NT_STATUS_OK
ReadX 10272 126976 4096 4096 NT_STATUS_OK
ReadX 10272 192512 4096 4096 NT_STATUS_OK
ReadX 10272 258048 4096 4096 NT_STATUS_OK
WriteX 10272 0 65536 65536 NT_STATUS_OK
WriteX 10272 65536 65536 65536 NT_STATUS_OK
WriteX 10272 131072 65536 65536 NT_STATUS_OK
WriteX 10272 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10273 NT_STATUS_OK
ReadX 10273 61440 4096 4096 NT_STATUS_OK
ReadX 10273 126976 4096 4096 NT_STATUS_OK
ReadX 10273 192512 4096 4096 NT_STATUS_OK
ReadX 10273 258048 4096 4096 NT_STATUS_OK
ReadX 10273 323584 4096 4096 NT_STATUS_OK
ReadX 10273 389120 4096 4096 NT_STATUS_OK
ReadX 10273 454656 4096 4096 NT_STATUS_OK
ReadX 10273 520192 4096 4096 NT_STATUS_OK
WriteX 10273 0 65536 65536 NT_STATUS_OK
WriteX 10273 65536 65536 65536 NT_STATUS_OK
WriteX 10273 131072 65536 65536 NT_STATUS_OK
WriteX 10273 196608 65536 65536 NT_STATUS_OK
WriteX 10273 262144 65536 65536 NT_STATUS_OK
WriteX 10273 327680 65536 65536 NT_STATUS_OK
WriteX 10273 393216 65536 65536 NT_STATUS_OK
WriteX 10273 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10274 NT_STATUS_OK
ReadX 10274 0 4096 4096 NT_STATUS_OK
ReadX 10274 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10275 NT_STATUS_OK
WriteX 10275 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10275 258 NT_STATUS_OK
WriteX 10275 0 53 53 NT_STATUS_OK
Close 10275 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10276 NT_STATUS_OK
Close 10276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10268 NT_STATUS_OK
Close 10214 NT_STATUS_OK
Close 10271 NT_STATUS_OK
Close 10272 NT_STATUS_OK
Close 10273 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10274 8192 4096 4096 NT_STATUS_OK
ReadX 10274 12288 4096 4096 NT_STATUS_OK
WriteX 10278 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10278 258 NT_STATUS_OK
ReadX 10274 16384 4096 4096 NT_STATUS_OK
ReadX 10274 20480 4096 4096 NT_STATUS_OK
WriteX 10278 0 15360 15360 NT_STATUS_OK
Close 10278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10279 NT_STATUS_OK
ReadX 10279 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10279 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10279 1004 NT_STATUS_OK
WriteX 10279 0 4096 4096 NT_STATUS_OK
Close 10279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10280 NT_STATUS_OK
Close 10280 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10282 NT_STATUS_OK
ReadX 10282 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10283 NT_STATUS_OK
Close 10283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10282 4096 4096 4096 NT_STATUS_OK
ReadX 10282 8192 4096 4096 NT_STATUS_OK
ReadX 10282 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10285 NT_STATUS_OK
ReadX 10285 0 4096 4096 NT_STATUS_OK
ReadX 10285 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10286 NT_STATUS_OK
ReadX 10286 0 4096 4096 NT_STATUS_OK
ReadX 10286 4096 4096 4096 NT_STATUS_OK
ReadX 10286 8192 4096 4096 NT_STATUS_OK
Close 10285 NT_STATUS_OK
Close 10286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10287 NT_STATUS_OK
WriteX 10287 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10287 258 NT_STATUS_OK
WriteX 10287 0 15360 15360 NT_STATUS_OK
Close 10287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10288 NT_STATUS_OK
ReadX 10288 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10288 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10288 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10282 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10289 NT_STATUS_OK
Close 10289 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10291 NT_STATUS_OK
ReadX 10291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10292 NT_STATUS_OK
SET_FILE_INFORMATION 10292 1004 NT_STATUS_OK
Close 10292 NT_STATUS_OK
WriteX 10288 0 4096 4096 NT_STATUS_OK
Close 10288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10293 NT_STATUS_OK
Close 10293 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10295 NT_STATUS_OK
ReadX 10295 0 4096 4096 NT_STATUS_OK
ReadX 10295 4096 4096 4096 NT_STATUS_OK
ReadX 10295 8192 4096 4096 NT_STATUS_OK
ReadX 10295 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10295 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10295 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10296 NT_STATUS_OK
ReadX 10296 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10297 NT_STATUS_OK
WriteX 10297 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10297 258 NT_STATUS_OK
WriteX 10297 0 53 53 NT_STATUS_OK
Close 10297 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10298 NT_STATUS_OK
Close 10298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10296 4096 4096 4096 NT_STATUS_OK
ReadX 10296 8192 4096 4096 NT_STATUS_OK
ReadX 10296 12288 4096 4096 NT_STATUS_OK
WriteX 10300 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10300 258 NT_STATUS_OK
WriteX 10300 0 12006 12006 NT_STATUS_OK
Close 10300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10301 NT_STATUS_OK
ReadX 10301 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10301 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10301 1004 NT_STATUS_OK
WriteX 10301 0 4096 4096 NT_STATUS_OK
Close 10301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10302 NT_STATUS_OK
Close 10302 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10304 NT_STATUS_OK
ReadX 10304 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10305 NT_STATUS_OK
Close 10305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10304 4096 4096 4096 NT_STATUS_OK
ReadX 10304 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10307 NT_STATUS_OK
WriteX 10307 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10307 258 NT_STATUS_OK
WriteX 10307 0 11991 11991 NT_STATUS_OK
Close 10307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10308 NT_STATUS_OK
ReadX 10308 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10308 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10308 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10309 NT_STATUS_OK
Close 10309 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10311 NT_STATUS_OK
ReadX 10311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10312 NT_STATUS_OK
SET_FILE_INFORMATION 10312 1004 NT_STATUS_OK
Close 10312 NT_STATUS_OK
WriteX 10308 0 4096 4096 NT_STATUS_OK
Close 10308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10313 NT_STATUS_OK
Close 10313 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10315 NT_STATUS_OK
ReadX 10315 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10316 NT_STATUS_OK
Close 10316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10315 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10315 1004 NT_STATUS_OK
ReadX 10315 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10315 1004 NT_STATUS_OK
WriteX 10315 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10315 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10315 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10315 1004 NT_STATUS_OK
Close 10291 NT_STATUS_OK
WriteX 10295 0 19054 19054 NT_STATUS_OK
WriteX 10315 0 12288 12288 NT_STATUS_OK
Close 10311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10318 NT_STATUS_OK
Close 10318 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10295 NT_STATUS_OK
Close 10315 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10320 NT_STATUS_OK
Close 10320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10322 NT_STATUS_OK
ReadX 10322 0 61440 61440 NT_STATUS_OK
ReadX 10322 61440 4096 4096 NT_STATUS_OK
ReadX 10322 65536 61440 61440 NT_STATUS_OK
ReadX 10322 126976 4096 4096 NT_STATUS_OK
ReadX 10322 131072 61440 61440 NT_STATUS_OK
ReadX 10322 192512 4096 4096 NT_STATUS_OK
ReadX 10322 196608 61440 61440 NT_STATUS_OK
ReadX 10322 258048 4096 4096 NT_STATUS_OK
ReadX 10322 262144 61440 61440 NT_STATUS_OK
ReadX 10322 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10323 NT_STATUS_OK
ReadX 10323 0 61440 61440 NT_STATUS_OK
ReadX 10323 61440 4096 4096 NT_STATUS_OK
ReadX 10323 65536 61440 61440 NT_STATUS_OK
ReadX 10323 126976 4096 4096 NT_STATUS_OK
ReadX 10323 131072 61440 61440 NT_STATUS_OK
ReadX 10323 192512 4096 4096 NT_STATUS_OK
ReadX 10323 196608 61440 61440 NT_STATUS_OK
ReadX 10323 258048 4096 4096 NT_STATUS_OK
ReadX 10323 262144 61440 61440 NT_STATUS_OK
ReadX 10323 323584 4096 4096 NT_STATUS_OK
ReadX 10323 327680 61440 61440 NT_STATUS_OK
ReadX 10323 389120 4096 4096 NT_STATUS_OK
ReadX 10323 393216 61440 61440 NT_STATUS_OK
ReadX 10323 454656 4096 4096 NT_STATUS_OK
ReadX 10323 458752 61440 61440 NT_STATUS_OK
ReadX 10323 520192 4096 4096 NT_STATUS_OK
ReadX 10323 524288 61440 61440 NT_STATUS_OK
ReadX 10323 585728 4096 4096 NT_STATUS_OK
ReadX 10323 589824 61440 61440 NT_STATUS_OK
ReadX 10323 651264 4096 4096 NT_STATUS_OK
ReadX 10323 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10324 NT_STATUS_OK
ReadX 10324 0 61440 61440 NT_STATUS_OK
ReadX 10324 61440 4096 4096 NT_STATUS_OK
ReadX 10324 65536 61440 61440 NT_STATUS_OK
ReadX 10324 126976 4096 4096 NT_STATUS_OK
ReadX 10324 131072 61440 61440 NT_STATUS_OK
ReadX 10324 192512 4096 4096 NT_STATUS_OK
ReadX 10324 196608 61440 61440 NT_STATUS_OK
ReadX 10324 258048 4096 4096 NT_STATUS_OK
ReadX 10324 262144 61440 61440 NT_STATUS_OK
ReadX 10324 323584 4096 4096 NT_STATUS_OK
ReadX 10324 327680 61440 61440 NT_STATUS_OK
ReadX 10324 389120 4096 4096 NT_STATUS_OK
ReadX 10324 393216 61440 61440 NT_STATUS_OK
ReadX 10324 454656 4096 4096 NT_STATUS_OK
ReadX 10324 458752 61440 61440 NT_STATUS_OK
ReadX 10324 520192 4096 4096 NT_STATUS_OK
ReadX 10324 524288 61440 61440 NT_STATUS_OK
ReadX 10324 585728 4096 4096 NT_STATUS_OK
ReadX 10324 589824 61440 61440 NT_STATUS_OK
ReadX 10324 651264 4096 4096 NT_STATUS_OK
ReadX 10324 655360 61440 61440 NT_STATUS_OK
ReadX 10324 716800 4096 4096 NT_STATUS_OK
ReadX 10324 720896 61440 61440 NT_STATUS_OK
ReadX 10324 782336 4096 4096 NT_STATUS_OK
ReadX 10324 786432 61440 61440 NT_STATUS_OK
ReadX 10324 847872 4096 4096 NT_STATUS_OK
ReadX 10324 851968 61440 61440 NT_STATUS_OK
ReadX 10324 913408 4096 4096 NT_STATUS_OK
ReadX 10324 917504 61440 61440 NT_STATUS_OK
ReadX 10324 978944 4096 4096 NT_STATUS_OK
ReadX 10324 983040 61440 61440 NT_STATUS_OK
ReadX 10324 1044480 4096 4096 NT_STATUS_OK
ReadX 10324 1048576 61440 61440 NT_STATUS_OK
ReadX 10324 1110016 4096 4096 NT_STATUS_OK
ReadX 10324 1114112 61440 61440 NT_STATUS_OK
ReadX 10324 1175552 4096 4096 NT_STATUS_OK
ReadX 10324 1179648 61440 61440 NT_STATUS_OK
ReadX 10324 1241088 4096 4096 NT_STATUS_OK
ReadX 10324 1245184 61440 61440 NT_STATUS_OK
ReadX 10324 1306624 4096 4096 NT_STATUS_OK
ReadX 10324 1310720 61440 61440 NT_STATUS_OK
ReadX 10324 1372160 4096 4096 NT_STATUS_OK
ReadX 10324 1376256 61440 61440 NT_STATUS_OK
ReadX 10324 1437696 4096 4096 NT_STATUS_OK
ReadX 10324 1441792 61440 61440 NT_STATUS_OK
ReadX 10324 1503232 4096 4096 NT_STATUS_OK
ReadX 10324 1507328 61440 61440 NT_STATUS_OK
ReadX 10324 1568768 4096 4096 NT_STATUS_OK
ReadX 10324 1572864 61440 61440 NT_STATUS_OK
ReadX 10324 1634304 4096 4096 NT_STATUS_OK
ReadX 10324 1638400 61440 61440 NT_STATUS_OK
ReadX 10324 1699840 4096 4096 NT_STATUS_OK
ReadX 10324 1703936 61440 61440 NT_STATUS_OK
ReadX 10324 1765376 4096 4096 NT_STATUS_OK
ReadX 10324 1769472 61440 61440 NT_STATUS_OK
ReadX 10324 1830912 4096 4096 NT_STATUS_OK
ReadX 10324 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10325 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10326 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10326 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10327 NT_STATUS_OK
ReadX 10327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10328 NT_STATUS_OK
ReadX 10328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10329 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10330 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10331 NT_STATUS_OK
QUERY_FILE_INFORMATION 10331 1004 NT_STATUS_OK
WriteX 10331 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10331 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10332 NT_STATUS_OK
Close 10332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10333 NT_STATUS_OK
WriteX 10333 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10333 258 NT_STATUS_OK
WriteX 10333 0 491 491 NT_STATUS_OK
Close 10333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10334 NT_STATUS_OK
ReadX 10334 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10331 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10336 NT_STATUS_OK
Close 10336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10337 NT_STATUS_OK
WriteX 10337 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10337 258 NT_STATUS_OK
WriteX 10337 0 543 543 NT_STATUS_OK
Close 10337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10338 NT_STATUS_OK
ReadX 10338 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10322 NT_STATUS_OK
Close 10323 NT_STATUS_OK
Close 10324 NT_STATUS_OK
Close 10338 NT_STATUS_OK
Close 10326 NT_STATUS_OK
Close 10327 NT_STATUS_OK
Close 10328 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10341 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10342 NT_STATUS_OK
ReadX 10342 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10343 NT_STATUS_OK
ReadX 10343 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10344 NT_STATUS_OK
ReadX 10344 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10345 NT_STATUS_OK
ReadX 10345 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10346 NT_STATUS_OK
ReadX 10346 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10350 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10350 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10351 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 1004 NT_STATUS_OK
WriteX 10351 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 258 NT_STATUS_OK
WriteX 10351 0 2048 2048 NT_STATUS_OK
Close 10351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10352 NT_STATUS_OK
ReadX 10352 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10352 0 4096 4096 NT_STATUS_OK
Flush 10352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10352 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10356 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10357 NT_STATUS_OK
WriteX 10357 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10357 258 NT_STATUS_OK
WriteX 10357 0 2048 2048 NT_STATUS_OK
Close 10357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10358 NT_STATUS_OK
ReadX 10358 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10362 NT_STATUS_OK
Close 10362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10363 NT_STATUS_OK
WriteX 10363 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10363 258 NT_STATUS_OK
WriteX 10363 0 2048 2048 NT_STATUS_OK
Close 10363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10364 NT_STATUS_OK
ReadX 10364 0 2048 2048 NT_STATUS_OK
ReadX 10342 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10346 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10358 0 4096 4096 NT_STATUS_OK
WriteX 10342 0 8192 8192 NT_STATUS_OK
WriteX 10343 0 4096 4096 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
ReadX 10358 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10342 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10367 NT_STATUS_OK
ReadX 10367 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10368 NT_STATUS_OK
QUERY_FILE_INFORMATION 10368 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10367 NT_STATUS_OK
Close 10343 NT_STATUS_OK
Close 10344 NT_STATUS_OK
Close 10345 NT_STATUS_OK
Close 10358 NT_STATUS_OK
Close 10342 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10370 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10371 NT_STATUS_OK
ReadX 10371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10372 NT_STATUS_OK
ReadX 10372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10373 NT_STATUS_OK
ReadX 10373 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10374 NT_STATUS_OK
ReadX 10374 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10375 NT_STATUS_OK
ReadX 10375 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10376 NT_STATUS_OK
ReadX 10376 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10377 NT_STATUS_OK
ReadX 10377 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10378 NT_STATUS_OK
ReadX 10378 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10379 NT_STATUS_OK
ReadX 10379 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10380 NT_STATUS_OK
ReadX 10380 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10381 NT_STATUS_OK
ReadX 10381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10382 NT_STATUS_OK
ReadX 10382 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10383 NT_STATUS_OK
ReadX 10383 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10387 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10388 NT_STATUS_OK
QUERY_FILE_INFORMATION 10388 1004 NT_STATUS_OK
WriteX 10388 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10388 258 NT_STATUS_OK
WriteX 10388 0 2048 2048 NT_STATUS_OK
Close 10388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10389 NT_STATUS_OK
ReadX 10389 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10390 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10391 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10391 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10395 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10396 NT_STATUS_OK
QUERY_FILE_INFORMATION 10396 1004 NT_STATUS_OK
WriteX 10396 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10396 258 NT_STATUS_OK
WriteX 10396 0 2048 2048 NT_STATUS_OK
Close 10396 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10397 NT_STATUS_OK
ReadX 10397 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10389 0 4096 4096 NT_STATUS_OK
Flush 10389 NT_STATUS_OK
WriteX 10397 0 4096 4096 NT_STATUS_OK
Flush 10397 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10389 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10397 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10391 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10398 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10399 NT_STATUS_OK
WriteX 10399 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10399 258 NT_STATUS_OK
WriteX 10399 0 4096 4096 NT_STATUS_OK
Close 10399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10400 NT_STATUS_OK
ReadX 10400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10401 NT_STATUS_OK
Close 10401 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10402 NT_STATUS_OK
WriteX 10402 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10402 258 NT_STATUS_OK
WriteX 10402 0 4096 4096 NT_STATUS_OK
Close 10402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10403 NT_STATUS_OK
ReadX 10403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10403 0 4096 4096 NT_STATUS_OK
Close 10400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10383 NT_STATUS_OK
Close 10377 NT_STATUS_OK
Close 10391 NT_STATUS_OK
Close 10380 NT_STATUS_OK
Close 10381 NT_STATUS_OK
Close 10382 NT_STATUS_OK
Close 10378 NT_STATUS_OK
Close 10371 NT_STATUS_OK
Close 10372 NT_STATUS_OK
Close 10375 NT_STATUS_OK
Close 10376 NT_STATUS_OK
Close 10373 NT_STATUS_OK
Close 10374 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10406 NT_STATUS_OK
Close 10406 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10408 NT_STATUS_OK
ReadX 10408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10409 NT_STATUS_OK
Close 10409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10410 NT_STATUS_OK
WriteX 10410 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10410 258 NT_STATUS_OK
WriteX 10410 0 2048 2048 NT_STATUS_OK
Close 10410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10411 NT_STATUS_OK
ReadX 10411 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10412 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10413 NT_STATUS_OK
ReadX 10413 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10414 NT_STATUS_OK
ReadX 10414 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10415 NT_STATUS_OK
ReadX 10415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10417 NT_STATUS_OK
ReadX 10417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10418 NT_STATUS_OK
ReadX 10418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10419 NT_STATUS_OK
ReadX 10419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10420 NT_STATUS_OK
ReadX 10420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10421 NT_STATUS_OK
ReadX 10421 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10422 NT_STATUS_OK
ReadX 10422 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10423 NT_STATUS_OK
ReadX 10423 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10424 NT_STATUS_OK
ReadX 10424 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10425 NT_STATUS_OK
QUERY_FILE_INFORMATION 10425 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10408 NT_STATUS_OK
Close 10411 NT_STATUS_OK
Close 10423 NT_STATUS_OK
Close 10418 NT_STATUS_OK
Close 10419 NT_STATUS_OK
Close 10420 NT_STATUS_OK
Close 10421 NT_STATUS_OK
Close 10422 NT_STATUS_OK
Close 10424 NT_STATUS_OK
Close 10412 NT_STATUS_OK
Close 10413 NT_STATUS_OK
Close 10416 NT_STATUS_OK
Close 10417 NT_STATUS_OK
Close 10414 NT_STATUS_OK
Close 10415 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10427 NT_STATUS_OK
QUERY_FILE_INFORMATION 10427 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10429 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10430 NT_STATUS_OK
ReadX 10430 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10431 NT_STATUS_OK
ReadX 10431 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10432 NT_STATUS_OK
ReadX 10432 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10433 NT_STATUS_OK
ReadX 10433 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10434 NT_STATUS_OK
ReadX 10434 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10435 NT_STATUS_OK
ReadX 10435 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10437 NT_STATUS_OK
ReadX 10437 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10438 NT_STATUS_OK
ReadX 10438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10439 NT_STATUS_OK
ReadX 10439 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10440 NT_STATUS_OK
ReadX 10440 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10441 NT_STATUS_OK
ReadX 10441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10442 NT_STATUS_OK
ReadX 10442 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10446 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10447 NT_STATUS_OK
QUERY_FILE_INFORMATION 10447 1004 NT_STATUS_OK
WriteX 10447 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10447 258 NT_STATUS_OK
WriteX 10447 0 2048 2048 NT_STATUS_OK
Close 10447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10448 NT_STATUS_OK
ReadX 10448 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10449 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10450 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10451 NT_STATUS_OK
ReadX 10451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10452 NT_STATUS_OK
ReadX 10452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10453 NT_STATUS_OK
ReadX 10453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10454 NT_STATUS_OK
ReadX 10454 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10458 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10459 NT_STATUS_OK
QUERY_FILE_INFORMATION 10459 1004 NT_STATUS_OK
WriteX 10459 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10459 258 NT_STATUS_OK
WriteX 10459 0 2048 2048 NT_STATUS_OK
Close 10459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10460 NT_STATUS_OK
ReadX 10460 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10462 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10462 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10466 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10467 NT_STATUS_OK
QUERY_FILE_INFORMATION 10467 1004 NT_STATUS_OK
WriteX 10467 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10467 258 NT_STATUS_OK
WriteX 10467 0 2048 2048 NT_STATUS_OK
Close 10467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10468 NT_STATUS_OK
ReadX 10468 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10448 0 4096 4096 NT_STATUS_OK
Flush 10448 NT_STATUS_OK
WriteX 10460 0 4096 4096 NT_STATUS_OK
Flush 10460 NT_STATUS_OK
WriteX 10468 0 4096 4096 NT_STATUS_OK
WriteX 10448 0 4096 4096 NT_STATUS_OK
WriteX 10460 0 4096 4096 NT_STATUS_OK
Flush 10468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10468 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10450 4096 16384 16384 NT_STATUS_OK
ReadX 10430 4096 16384 16384 NT_STATUS_OK
ReadX 10462 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10469 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10470 NT_STATUS_OK
ReadX 10470 0 2048 2048 NT_STATUS_OK
WriteX 10470 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10471 NT_STATUS_OK
QUERY_FILE_INFORMATION 10471 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10470 NT_STATUS_OK
Close 10454 NT_STATUS_OK
Close 10442 NT_STATUS_OK
Close 10434 NT_STATUS_OK
Close 10450 NT_STATUS_OK
Close 10451 NT_STATUS_OK
Close 10452 NT_STATUS_OK
Close 10453 NT_STATUS_OK
Close 10441 NT_STATUS_OK
Close 10462 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Close 10439 NT_STATUS_OK
Close 10440 NT_STATUS_OK
Close 10437 NT_STATUS_OK
Close 10438 NT_STATUS_OK
Close 10430 NT_STATUS_OK
Close 10431 NT_STATUS_OK
Close 10432 NT_STATUS_OK
Close 10433 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10473 NT_STATUS_OK
QUERY_FILE_INFORMATION 10473 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10475 NT_STATUS_OK
QUERY_FILE_INFORMATION 10475 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10477 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10478 NT_STATUS_OK
ReadX 10478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10479 NT_STATUS_OK
ReadX 10479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10480 NT_STATUS_OK
ReadX 10480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10482 NT_STATUS_OK
ReadX 10482 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10478 4096 16384 16384 NT_STATUS_OK
WriteX 10478 0 4096 4096 NT_STATUS_OK
WriteX 10479 0 4096 4096 NT_STATUS_OK
WriteX 10480 0 4096 4096 NT_STATUS_OK
WriteX 10481 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10484 NT_STATUS_OK
ReadX 10484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10485 NT_STATUS_OK
ReadX 10485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10486 NT_STATUS_OK
ReadX 10486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10487 NT_STATUS_OK
ReadX 10487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10488 NT_STATUS_OK
ReadX 10488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10489 NT_STATUS_OK
ReadX 10489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10490 NT_STATUS_OK
ReadX 10490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10491 NT_STATUS_OK
ReadX 10491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10492 NT_STATUS_OK
ReadX 10492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10493 NT_STATUS_OK
ReadX 10493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10494 NT_STATUS_OK
ReadX 10494 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10495 NT_STATUS_OK
ReadX 10495 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10496 NT_STATUS_OK
ReadX 10496 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10497 NT_STATUS_OK
ReadX 10497 0 8192 8192 NT_STATUS_OK
ReadX 10484 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10498 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10498 0 4096 4096 NT_STATUS_OK
ReadX 10498 4096 4096 4096 NT_STATUS_OK
ReadX 10498 8192 4096 4096 NT_STATUS_OK
WriteX 10484 0 4096 4096 NT_STATUS_OK
WriteX 10485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10499 0 4096 4096 NT_STATUS_OK
ReadX 10499 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10478 0 4096 4096 NT_STATUS_OK
WriteX 10479 0 4096 4096 NT_STATUS_OK
WriteX 10480 0 4096 4096 NT_STATUS_OK
WriteX 10481 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10503 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10504 NT_STATUS_OK
QUERY_FILE_INFORMATION 10504 1004 NT_STATUS_OK
WriteX 10504 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10504 258 NT_STATUS_OK
WriteX 10504 0 2048 2048 NT_STATUS_OK
Close 10504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10505 NT_STATUS_OK
ReadX 10505 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10505 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10505 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10506 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10507 NT_STATUS_OK
ReadX 10507 0 4096 4096 NT_STATUS_OK
ReadX 10507 4096 4096 4096 NT_STATUS_OK
WriteX 10507 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10505 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10508 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10509 NT_STATUS_OK
ReadX 10509 0 4096 4096 NT_STATUS_OK
ReadX 10509 4096 4096 4096 NT_STATUS_OK
WriteX 10509 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10510 NT_STATUS_OK
QUERY_FILE_INFORMATION 10510 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10497 NT_STATUS_OK
Close 10482 NT_STATUS_OK
Close 10478 NT_STATUS_OK
Close 10479 NT_STATUS_OK
Close 10480 NT_STATUS_OK
Close 10481 NT_STATUS_OK
Close 10490 NT_STATUS_OK
Close 10495 NT_STATUS_OK
Close 10491 NT_STATUS_OK
Close 10492 NT_STATUS_OK
Close 10493 NT_STATUS_OK
Close 10494 NT_STATUS_OK
Close 10496 NT_STATUS_OK
Close 10484 NT_STATUS_OK
Close 10485 NT_STATUS_OK
Close 10488 NT_STATUS_OK
Close 10489 NT_STATUS_OK
Close 10486 NT_STATUS_OK
Close 10487 NT_STATUS_OK
Close 10509 NT_STATUS_OK
Close 10498 NT_STATUS_OK
Close 10499 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10512 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10512 0 4096 4096 NT_STATUS_OK
ReadX 10512 4096 4096 4096 NT_STATUS_OK
ReadX 10512 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10513 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10514 NT_STATUS_OK
ReadX 10514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10515 NT_STATUS_OK
ReadX 10515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10516 NT_STATUS_OK
ReadX 10516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10517 NT_STATUS_OK
ReadX 10517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10518 NT_STATUS_OK
ReadX 10518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10519 NT_STATUS_OK
ReadX 10519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10520 NT_STATUS_OK
ReadX 10520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10521 NT_STATUS_OK
ReadX 10521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10522 NT_STATUS_OK
ReadX 10522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10523 NT_STATUS_OK
ReadX 10523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10524 NT_STATUS_OK
ReadX 10524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10525 NT_STATUS_OK
ReadX 10525 0 4096 4096 NT_STATUS_OK
ReadX 10513 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10529 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10530 NT_STATUS_OK
QUERY_FILE_INFORMATION 10530 1004 NT_STATUS_OK
WriteX 10530 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10530 258 NT_STATUS_OK
WriteX 10530 0 2048 2048 NT_STATUS_OK
Close 10530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10531 NT_STATUS_OK
ReadX 10531 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10535 NT_STATUS_OK
Close 10535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10536 NT_STATUS_OK
QUERY_FILE_INFORMATION 10536 1004 NT_STATUS_OK
WriteX 10536 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10536 258 NT_STATUS_OK
WriteX 10536 0 2048 2048 NT_STATUS_OK
Close 10536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10537 NT_STATUS_OK
ReadX 10537 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10537 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10520 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10538 NT_STATUS_OK
QUERY_FILE_INFORMATION 10538 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10524 NT_STATUS_OK
Close 10519 NT_STATUS_OK
Close 10525 NT_STATUS_OK
Close 10513 NT_STATUS_OK
Close 10514 NT_STATUS_OK
Close 10517 NT_STATUS_OK
Close 10518 NT_STATUS_OK
Close 10515 NT_STATUS_OK
Close 10516 NT_STATUS_OK
Close 10520 NT_STATUS_OK
Close 10521 NT_STATUS_OK
Close 10522 NT_STATUS_OK
Close 10523 NT_STATUS_OK
Close 10512 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10540 NT_STATUS_OK
QUERY_FILE_INFORMATION 10540 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10542 NT_STATUS_OK
ReadX 10542 61440 4096 4096 NT_STATUS_OK
ReadX 10542 126976 4096 4096 NT_STATUS_OK
WriteX 10542 0 65536 65536 NT_STATUS_OK
WriteX 10542 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10543 NT_STATUS_OK
ReadX 10543 61440 4096 4096 NT_STATUS_OK
ReadX 10543 126976 4096 4096 NT_STATUS_OK
ReadX 10543 192512 4096 4096 NT_STATUS_OK
ReadX 10543 258048 4096 4096 NT_STATUS_OK
WriteX 10543 0 65536 65536 NT_STATUS_OK
WriteX 10543 65536 65536 65536 NT_STATUS_OK
WriteX 10543 131072 65536 65536 NT_STATUS_OK
WriteX 10543 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10544 NT_STATUS_OK
ReadX 10544 61440 4096 4096 NT_STATUS_OK
ReadX 10544 126976 4096 4096 NT_STATUS_OK
ReadX 10544 192512 4096 4096 NT_STATUS_OK
ReadX 10544 258048 4096 4096 NT_STATUS_OK
ReadX 10544 323584 4096 4096 NT_STATUS_OK
ReadX 10544 389120 4096 4096 NT_STATUS_OK
ReadX 10544 454656 4096 4096 NT_STATUS_OK
ReadX 10544 520192 4096 4096 NT_STATUS_OK
WriteX 10544 0 65536 65536 NT_STATUS_OK
WriteX 10544 65536 65536 65536 NT_STATUS_OK
WriteX 10544 131072 65536 65536 NT_STATUS_OK
WriteX 10544 196608 65536 65536 NT_STATUS_OK
WriteX 10544 262144 65536 65536 NT_STATUS_OK
WriteX 10544 327680 65536 65536 NT_STATUS_OK
WriteX 10544 393216 65536 65536 NT_STATUS_OK
WriteX 10544 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10545 NT_STATUS_OK
ReadX 10545 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10545 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10545 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10545 8192 4096 4096 NT_STATUS_OK
ReadX 10545 12288 4096 4096 NT_STATUS_OK
ReadX 10545 16384 4096 4096 NT_STATUS_OK
ReadX 10545 20480 4096 4096 NT_STATUS_OK
ReadX 10545 24576 4096 4096 NT_STATUS_OK
ReadX 10545 28672 4096 4096 NT_STATUS_OK
ReadX 10545 32768 4096 4096 NT_STATUS_OK
ReadX 10545 36864 4096 4096 NT_STATUS_OK
ReadX 10545 40960 4096 4096 NT_STATUS_OK
ReadX 10545 45056 4096 4096 NT_STATUS_OK
ReadX 10545 49152 4096 4096 NT_STATUS_OK
ReadX 10545 53248 4096 4096 NT_STATUS_OK
ReadX 10545 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10545 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10546 NT_STATUS_OK
Close 10546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10542 NT_STATUS_OK
Close 10543 NT_STATUS_OK
Close 10544 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10548 NT_STATUS_OK
WriteX 10548 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10548 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10548 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10548 1004 NT_STATUS_OK
WriteX 10548 0 57088 57088 NT_STATUS_OK
WriteX 10548 0 4096 4096 NT_STATUS_OK
Flush 10548 NT_STATUS_OK
Close 10545 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10549 NT_STATUS_OK
SET_FILE_INFORMATION 10549 1004 NT_STATUS_OK
Close 10549 NT_STATUS_OK
SET_FILE_INFORMATION 10548 1004 NT_STATUS_OK
WriteX 10548 0 4096 4096 NT_STATUS_OK
Close 10548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10550 NT_STATUS_OK
Close 10550 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10552 NT_STATUS_OK
ReadX 10552 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10552 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10553 NT_STATUS_OK
WriteX 10553 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10553 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10553 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10553 1004 NT_STATUS_OK
WriteX 10553 0 51456 51456 NT_STATUS_OK
WriteX 10553 0 4096 4096 NT_STATUS_OK
Flush 10553 NT_STATUS_OK
SET_FILE_INFORMATION 10553 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10553 1004 NT_STATUS_OK
WriteX 10553 0 4096 4096 NT_STATUS_OK
Close 10553 NT_STATUS_OK
Close 10552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10555 NT_STATUS_OK
Close 10555 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10557 NT_STATUS_OK
ReadX 10557 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10557 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10559 NT_STATUS_OK
Close 10559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10562 NT_STATUS_OK
WriteX 10562 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10562 258 NT_STATUS_OK
WriteX 10562 0 53077 53077 NT_STATUS_OK
Close 10562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10563 NT_STATUS_OK
WriteX 10563 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10563 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10563 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10563 1004 NT_STATUS_OK
WriteX 10563 0 65536 65536 NT_STATUS_OK
WriteX 10563 65536 1856 1856 NT_STATUS_OK
WriteX 10563 0 4096 4096 NT_STATUS_OK
Flush 10563 NT_STATUS_OK
SET_FILE_INFORMATION 10563 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10563 1004 NT_STATUS_OK
WriteX 10563 0 4096 4096 NT_STATUS_OK
Close 10563 NT_STATUS_OK
Close 10557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10565 NT_STATUS_OK
Close 10565 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10567 NT_STATUS_OK
ReadX 10567 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10569 NT_STATUS_OK
Close 10569 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10572 NT_STATUS_OK
WriteX 10572 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10572 258 NT_STATUS_OK
WriteX 10572 0 7983 7983 NT_STATUS_OK
Close 10572 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10574 NT_STATUS_OK
Close 10574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10577 NT_STATUS_OK
WriteX 10577 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10577 258 NT_STATUS_OK
WriteX 10577 0 65536 65536 NT_STATUS_OK
WriteX 10577 65536 65536 65536 NT_STATUS_OK
WriteX 10577 131072 65536 65536 NT_STATUS_OK
WriteX 10577 196608 65536 65536 NT_STATUS_OK
WriteX 10577 262144 65536 65536 NT_STATUS_OK
WriteX 10577 327680 65536 65536 NT_STATUS_OK
WriteX 10577 393216 65536 65536 NT_STATUS_OK
WriteX 10577 458752 46731 46731 NT_STATUS_OK
Close 10577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10578 NT_STATUS_OK
WriteX 10578 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10578 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10567 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10578 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10578 1004 NT_STATUS_OK
WriteX 10578 0 65536 65536 NT_STATUS_OK
WriteX 10578 65536 22848 22848 NT_STATUS_OK
WriteX 10578 0 4096 4096 NT_STATUS_OK
Flush 10578 NT_STATUS_OK
SET_FILE_INFORMATION 10578 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10578 1004 NT_STATUS_OK
WriteX 10578 0 4096 4096 NT_STATUS_OK
Close 10578 NT_STATUS_OK
Close 10567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10580 NT_STATUS_OK
Close 10580 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10582 NT_STATUS_OK
ReadX 10582 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10582 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10583 NT_STATUS_OK
ReadX 10583 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10583 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10583 1004 NT_STATUS_OK
ReadX 10583 8192 4096 4096 NT_STATUS_OK
ReadX 10583 12288 4096 4096 NT_STATUS_OK
ReadX 10583 16384 4096 4096 NT_STATUS_OK
ReadX 10583 20480 4096 4096 NT_STATUS_OK
ReadX 10583 24576 4096 4096 NT_STATUS_OK
ReadX 10583 28672 4096 4096 NT_STATUS_OK
ReadX 10583 32768 4096 4096 NT_STATUS_OK
ReadX 10583 36864 4096 4096 NT_STATUS_OK
ReadX 10583 40960 4096 4096 NT_STATUS_OK
ReadX 10583 45056 4096 4096 NT_STATUS_OK
ReadX 10583 49152 4096 4096 NT_STATUS_OK
ReadX 10583 53248 4096 4096 NT_STATUS_OK
ReadX 10583 57344 4096 4096 NT_STATUS_OK
ReadX 10583 61440 4096 4096 NT_STATUS_OK
ReadX 10583 65536 4096 4096 NT_STATUS_OK
ReadX 10583 69632 4096 4096 NT_STATUS_OK
ReadX 10583 73728 4096 4096 NT_STATUS_OK
ReadX 10583 77824 4096 4096 NT_STATUS_OK
ReadX 10583 81920 4096 4096 NT_STATUS_OK
ReadX 10583 86016 4096 4096 NT_STATUS_OK
ReadX 10583 90112 4096 4096 NT_STATUS_OK
ReadX 10583 94208 4096 4096 NT_STATUS_OK
ReadX 10583 98304 4096 4096 NT_STATUS_OK
ReadX 10583 102400 4096 4096 NT_STATUS_OK
ReadX 10583 106496 4096 4096 NT_STATUS_OK
ReadX 10583 110592 4096 4096 NT_STATUS_OK
ReadX 10583 114688 4096 4096 NT_STATUS_OK
ReadX 10583 118784 4096 4096 NT_STATUS_OK
ReadX 10583 122880 4096 4096 NT_STATUS_OK
ReadX 10583 126976 4096 4096 NT_STATUS_OK
ReadX 10583 131072 4096 4096 NT_STATUS_OK
ReadX 10583 135168 4096 4096 NT_STATUS_OK
ReadX 10583 139264 4096 4096 NT_STATUS_OK
ReadX 10583 143360 4096 4096 NT_STATUS_OK
ReadX 10583 147456 4096 4096 NT_STATUS_OK
ReadX 10583 151552 4096 4096 NT_STATUS_OK
ReadX 10583 155648 4096 4096 NT_STATUS_OK
ReadX 10583 159744 4096 4096 NT_STATUS_OK
ReadX 10583 163840 4096 4096 NT_STATUS_OK
ReadX 10583 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10583 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10584 NT_STATUS_OK
Close 10584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10582 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10586 NT_STATUS_OK
WriteX 10586 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10586 258 NT_STATUS_OK
Close 10583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10587 NT_STATUS_OK
SET_FILE_INFORMATION 10587 1004 NT_STATUS_OK
Close 10587 NT_STATUS_OK
WriteX 10586 0 42388 42388 NT_STATUS_OK
Close 10586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10588 NT_STATUS_OK
Close 10588 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10590 NT_STATUS_OK
ReadX 10590 0 4096 4096 NT_STATUS_OK
ReadX 10590 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10591 NT_STATUS_OK
WriteX 10591 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10591 258 NT_STATUS_OK
SET_FILE_INFORMATION 10591 1004 NT_STATUS_OK
WriteX 10591 0 42652 42652 NT_STATUS_OK
Close 10591 NT_STATUS_OK
Close 10590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10593 NT_STATUS_OK
Close 10593 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10595 NT_STATUS_OK
ReadX 10595 0 4096 4096 NT_STATUS_OK
ReadX 10595 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10597 NT_STATUS_OK
Close 10597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10600 NT_STATUS_OK
WriteX 10600 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10600 258 NT_STATUS_OK
WriteX 10600 0 65536 65536 NT_STATUS_OK
WriteX 10600 65536 49 49 NT_STATUS_OK
Close 10600 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10601 NT_STATUS_OK
ReadX 10601 0 61440 61440 NT_STATUS_OK
ReadX 10601 61440 4096 4096 NT_STATUS_OK
ReadX 10601 65536 61440 61440 NT_STATUS_OK
ReadX 10601 126976 4096 4096 NT_STATUS_OK
ReadX 10601 131072 61440 61440 NT_STATUS_OK
ReadX 10601 192512 4096 4096 NT_STATUS_OK
ReadX 10601 196608 61440 61440 NT_STATUS_OK
ReadX 10601 258048 4096 4096 NT_STATUS_OK
ReadX 10601 262144 61440 61440 NT_STATUS_OK
ReadX 10601 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10602 NT_STATUS_OK
ReadX 10602 0 61440 61440 NT_STATUS_OK
ReadX 10602 61440 4096 4096 NT_STATUS_OK
ReadX 10602 65536 61440 61440 NT_STATUS_OK
ReadX 10602 126976 4096 4096 NT_STATUS_OK
ReadX 10602 131072 61440 61440 NT_STATUS_OK
ReadX 10602 192512 4096 4096 NT_STATUS_OK
ReadX 10602 196608 61440 61440 NT_STATUS_OK
ReadX 10602 258048 4096 4096 NT_STATUS_OK
ReadX 10602 262144 61440 61440 NT_STATUS_OK
ReadX 10602 323584 4096 4096 NT_STATUS_OK
ReadX 10602 327680 61440 61440 NT_STATUS_OK
ReadX 10602 389120 4096 4096 NT_STATUS_OK
ReadX 10602 393216 61440 61440 NT_STATUS_OK
ReadX 10602 454656 4096 4096 NT_STATUS_OK
ReadX 10602 458752 61440 61440 NT_STATUS_OK
ReadX 10602 520192 4096 4096 NT_STATUS_OK
ReadX 10602 524288 61440 61440 NT_STATUS_OK
ReadX 10602 585728 4096 4096 NT_STATUS_OK
ReadX 10602 589824 61440 61440 NT_STATUS_OK
ReadX 10602 651264 4096 4096 NT_STATUS_OK
ReadX 10602 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10603 NT_STATUS_OK
ReadX 10603 0 61440 61440 NT_STATUS_OK
ReadX 10603 61440 4096 4096 NT_STATUS_OK
ReadX 10603 65536 61440 61440 NT_STATUS_OK
ReadX 10603 126976 4096 4096 NT_STATUS_OK
ReadX 10603 131072 61440 61440 NT_STATUS_OK
ReadX 10603 192512 4096 4096 NT_STATUS_OK
ReadX 10603 196608 61440 61440 NT_STATUS_OK
ReadX 10603 258048 4096 4096 NT_STATUS_OK
ReadX 10603 262144 61440 61440 NT_STATUS_OK
ReadX 10603 323584 4096 4096 NT_STATUS_OK
ReadX 10603 327680 61440 61440 NT_STATUS_OK
ReadX 10603 389120 4096 4096 NT_STATUS_OK
ReadX 10603 393216 61440 61440 NT_STATUS_OK
ReadX 10603 454656 4096 4096 NT_STATUS_OK
ReadX 10603 458752 61440 61440 NT_STATUS_OK
ReadX 10603 520192 4096 4096 NT_STATUS_OK
ReadX 10603 524288 61440 61440 NT_STATUS_OK
ReadX 10603 585728 4096 4096 NT_STATUS_OK
ReadX 10603 589824 61440 61440 NT_STATUS_OK
ReadX 10603 651264 4096 4096 NT_STATUS_OK
ReadX 10603 655360 61440 61440 NT_STATUS_OK
ReadX 10603 716800 4096 4096 NT_STATUS_OK
ReadX 10603 720896 61440 61440 NT_STATUS_OK
ReadX 10603 782336 4096 4096 NT_STATUS_OK
ReadX 10603 786432 61440 61440 NT_STATUS_OK
ReadX 10603 847872 4096 4096 NT_STATUS_OK
ReadX 10603 851968 61440 61440 NT_STATUS_OK
ReadX 10603 913408 4096 4096 NT_STATUS_OK
ReadX 10603 917504 61440 61440 NT_STATUS_OK
ReadX 10603 978944 4096 4096 NT_STATUS_OK
ReadX 10603 983040 61440 61440 NT_STATUS_OK
ReadX 10603 1044480 4096 4096 NT_STATUS_OK
ReadX 10603 1048576 61440 61440 NT_STATUS_OK
ReadX 10603 1110016 4096 4096 NT_STATUS_OK
ReadX 10603 1114112 61440 61440 NT_STATUS_OK
ReadX 10603 1175552 4096 4096 NT_STATUS_OK
ReadX 10603 1179648 61440 61440 NT_STATUS_OK
ReadX 10603 1241088 4096 4096 NT_STATUS_OK
ReadX 10603 1245184 61440 61440 NT_STATUS_OK
ReadX 10603 1306624 4096 4096 NT_STATUS_OK
ReadX 10603 1310720 61440 61440 NT_STATUS_OK
ReadX 10603 1372160 4096 4096 NT_STATUS_OK
ReadX 10603 1376256 61440 61440 NT_STATUS_OK
ReadX 10603 1437696 4096 4096 NT_STATUS_OK
ReadX 10603 1441792 61440 61440 NT_STATUS_OK
ReadX 10603 1503232 4096 4096 NT_STATUS_OK
ReadX 10603 1507328 61440 61440 NT_STATUS_OK
ReadX 10603 1568768 4096 4096 NT_STATUS_OK
ReadX 10603 1572864 61440 61440 NT_STATUS_OK
ReadX 10603 1634304 4096 4096 NT_STATUS_OK
ReadX 10603 1638400 61440 61440 NT_STATUS_OK
ReadX 10603 1699840 4096 4096 NT_STATUS_OK
ReadX 10603 1703936 61440 61440 NT_STATUS_OK
ReadX 10603 1765376 4096 4096 NT_STATUS_OK
ReadX 10603 1769472 61440 61440 NT_STATUS_OK
ReadX 10603 1830912 4096 4096 NT_STATUS_OK
ReadX 10603 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10605 NT_STATUS_OK
QUERY_FILE_INFORMATION 10605 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10605 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10605 1005 NT_STATUS_OK
ReadX 10605 2156 24 24 NT_STATUS_OK
ReadX 10605 2139 276 276 NT_STATUS_OK
ReadX 10605 2136 14 14 NT_STATUS_OK
ReadX 10605 2136 7 7 NT_STATUS_OK
ReadX 10605 2138 12 12 NT_STATUS_OK
ReadX 10605 2137 8 8 NT_STATUS_OK
ReadX 10605 2135 15 15 NT_STATUS_OK
ReadX 10605 0 16 16 NT_STATUS_OK
ReadX 10605 16 2048 2048 NT_STATUS_OK
ReadX 10605 2064 2048 2048 NT_STATUS_OK
ReadX 10605 257 2048 2048 NT_STATUS_OK
ReadX 10605 385 2048 2048 NT_STATUS_OK
ReadX 10605 513 2048 2048 NT_STATUS_OK
ReadX 10605 641 2048 2048 NT_STATUS_OK
ReadX 10605 769 2048 2048 NT_STATUS_OK
ReadX 10605 897 2048 2048 NT_STATUS_OK
ReadX 10605 1025 2048 2048 NT_STATUS_OK
ReadX 10605 1153 2048 2048 NT_STATUS_OK
ReadX 10605 1281 2048 2048 NT_STATUS_OK
ReadX 10605 1409 2048 2048 NT_STATUS_OK
ReadX 10605 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10607 NT_STATUS_OK
Close 10607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10601 NT_STATUS_OK
Close 10602 NT_STATUS_OK
Close 10603 NT_STATUS_OK
Close 10595 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10610 NT_STATUS_OK
WriteX 10610 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10610 258 NT_STATUS_OK
WriteX 10610 0 10575 10575 NT_STATUS_OK
Flush 10610 NT_STATUS_OK
Close 10610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10611 NT_STATUS_OK
Close 10611 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10613 NT_STATUS_OK
ReadX 10613 0 4096 4096 NT_STATUS_OK
Close 10605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10615 NT_STATUS_OK
LockX 10615 2147483538 1 NT_STATUS_OK
UnlockX 10615 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10615 1005 NT_STATUS_OK
ReadX 10615 0 512 512 NT_STATUS_OK
ReadX 10615 512 512 512 NT_STATUS_OK
ReadX 10615 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10615 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10615 1004 NT_STATUS_OK
Close 10615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10616 NT_STATUS_OK
QUERY_FILE_INFORMATION 10616 1005 NT_STATUS_OK
ReadX 10616 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10617 NT_STATUS_OK
LockX 10617 2147483538 1 NT_STATUS_OK
UnlockX 10617 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10617 1005 NT_STATUS_OK
ReadX 10617 0 512 512 NT_STATUS_OK
ReadX 10617 512 512 512 NT_STATUS_OK
ReadX 10617 1024 512 512 NT_STATUS_OK
ReadX 10617 288 20 20 NT_STATUS_OK
ReadX 10617 308 2084 2084 NT_STATUS_OK
ReadX 10617 388 2084 2084 NT_STATUS_OK
ReadX 10617 388 2084 2084 NT_STATUS_OK
ReadX 10604 2157 1386 1386 NT_STATUS_OK
ReadX 10617 2472 399 399 NT_STATUS_OK
ReadX 10617 3072 1536 1536 NT_STATUS_OK
ReadX 10617 544 149 149 NT_STATUS_OK
ReadX 10617 693 485 485 NT_STATUS_OK
Close 10617 NT_STATUS_OK
ReadX 10604 2157 4096 4096 NT_STATUS_OK
ReadX 10604 6253 4096 4096 NT_STATUS_OK
ReadX 10604 10349 4096 4096 NT_STATUS_OK
ReadX 10604 14445 4096 4096 NT_STATUS_OK
ReadX 10604 18541 4096 4096 NT_STATUS_OK
ReadX 10604 22637 256 256 NT_STATUS_OK
ReadX 10604 22893 4096 4096 NT_STATUS_OK
ReadX 10604 26989 4096 4096 NT_STATUS_OK
ReadX 10604 31085 4096 4096 NT_STATUS_OK
ReadX 10604 35181 4096 4096 NT_STATUS_OK
ReadX 10604 39277 4096 4096 NT_STATUS_OK
ReadX 10604 43373 4096 4096 NT_STATUS_OK
ReadX 10604 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10604 2157 1024 1024 NT_STATUS_OK
ReadX 10604 1667 4688 4688 NT_STATUS_OK
ReadX 10604 6355 3516 3516 NT_STATUS_OK
ReadX 10604 9871 16384 16384 NT_STATUS_OK
ReadX 10604 26255 3771 3771 NT_STATUS_OK
ReadX 10604 30026 2048 2048 NT_STATUS_OK
ReadX 10604 32074 1024 1024 NT_STATUS_OK
ReadX 10604 33098 6652 6652 NT_STATUS_OK
ReadX 10604 39750 16384 16384 NT_STATUS_OK
ReadX 10604 56134 10496 10496 NT_STATUS_OK
ReadX 10604 66630 1784 1784 NT_STATUS_OK
ReadX 10604 68414 90 90 NT_STATUS_OK
ReadX 10604 68504 273 273 NT_STATUS_OK
ReadX 10604 68777 1600 1600 NT_STATUS_OK
ReadX 10604 70377 640 640 NT_STATUS_OK
ReadX 10604 71017 1280 1280 NT_STATUS_OK
ReadX 10604 72297 8464 8464 NT_STATUS_OK
ReadX 10604 80761 158 158 NT_STATUS_OK
ReadX 10604 80919 912 912 NT_STATUS_OK
ReadX 10604 81831 1980 1980 NT_STATUS_OK
ReadX 10604 83811 2256 2256 NT_STATUS_OK
ReadX 10604 86067 400 400 NT_STATUS_OK
ReadX 10604 86467 252 252 NT_STATUS_OK
ReadX 10604 86719 42 42 NT_STATUS_OK
ReadX 10604 86761 725 725 NT_STATUS_OK
ReadX 10604 2009 512 512 NT_STATUS_OK
ReadX 10604 3895 9 9 NT_STATUS_OK
ReadX 10604 3781 46 46 NT_STATUS_OK
ReadX 10604 4059 92 92 NT_STATUS_OK
ReadX 10604 3781 92 92 NT_STATUS_OK
ReadX 10604 3986 184 184 NT_STATUS_OK
ReadX 10604 3987 16384 16384 NT_STATUS_OK
ReadX 10604 3902 16384 16384 NT_STATUS_OK
ReadX 10604 3781 10240 10240 NT_STATUS_OK
ReadX 10604 3821 16384 16384 NT_STATUS_OK
ReadX 10604 3891 935 935 NT_STATUS_OK
ReadX 10604 4060 10240 10240 NT_STATUS_OK
ReadX 10604 4059 184 184 NT_STATUS_OK
ReadX 10604 256 184 184 NT_STATUS_OK
ReadX 10604 256 1026 1026 NT_STATUS_OK
ReadX 10604 3901 326 326 NT_STATUS_OK
ReadX 10604 3899 652 652 NT_STATUS_OK
ReadX 10604 256 2 2 NT_STATUS_OK
ReadX 10604 258 4948 4948 NT_STATUS_OK
Close 10604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10619 NT_STATUS_OK
Close 10619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10622 NT_STATUS_OK
WriteX 10622 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10622 258 NT_STATUS_OK
WriteX 10622 0 65536 65536 NT_STATUS_OK
WriteX 10622 65536 65536 65536 NT_STATUS_OK
WriteX 10622 131072 65536 65536 NT_STATUS_OK
WriteX 10622 196608 65536 65536 NT_STATUS_OK
WriteX 10622 262144 65536 65536 NT_STATUS_OK
WriteX 10622 327680 65536 65536 NT_STATUS_OK
WriteX 10622 393216 65536 65536 NT_STATUS_OK
WriteX 10622 458752 65536 65536 NT_STATUS_OK
WriteX 10622 524288 65536 65536 NT_STATUS_OK
WriteX 10622 589824 35257 35257 NT_STATUS_OK
Close 10622 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10624 NT_STATUS_OK
Close 10624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10627 NT_STATUS_OK
WriteX 10627 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10627 258 NT_STATUS_OK
WriteX 10627 0 65536 65536 NT_STATUS_OK
WriteX 10627 65536 65536 65536 NT_STATUS_OK
WriteX 10627 131072 65536 65536 NT_STATUS_OK
WriteX 10627 196608 65536 65536 NT_STATUS_OK
WriteX 10627 262144 65536 65536 NT_STATUS_OK
WriteX 10627 327680 65536 65536 NT_STATUS_OK
WriteX 10627 393216 65536 65536 NT_STATUS_OK
WriteX 10627 458752 65536 65536 NT_STATUS_OK
WriteX 10627 524288 65536 65536 NT_STATUS_OK
WriteX 10627 589824 57598 57598 NT_STATUS_OK
Close 10627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10629 NT_STATUS_OK
WriteX 10629 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10629 258 NT_STATUS_OK
WriteX 10629 0 12543 12543 NT_STATUS_OK
Flush 10629 NT_STATUS_OK
Close 10629 NT_STATUS_OK
Close 10613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10631 NT_STATUS_OK
Close 10631 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10633 NT_STATUS_OK
ReadX 10633 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10634 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10635 NT_STATUS_OK
QUERY_FILE_INFORMATION 10635 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10635 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10635 1005 NT_STATUS_OK
ReadX 10635 1938 24 24 NT_STATUS_OK
ReadX 10635 1920 276 276 NT_STATUS_OK
ReadX 10635 1918 14 14 NT_STATUS_OK
ReadX 10635 1918 7 7 NT_STATUS_OK
ReadX 10635 1919 12 12 NT_STATUS_OK
ReadX 10635 1919 8 8 NT_STATUS_OK
ReadX 10635 1917 15 15 NT_STATUS_OK
ReadX 10635 0 16 16 NT_STATUS_OK
ReadX 10635 16 2048 2048 NT_STATUS_OK
ReadX 10635 2064 2048 2048 NT_STATUS_OK
ReadX 10635 257 2048 2048 NT_STATUS_OK
ReadX 10635 385 2048 2048 NT_STATUS_OK
ReadX 10635 513 2048 2048 NT_STATUS_OK
ReadX 10635 641 2048 2048 NT_STATUS_OK
ReadX 10635 769 2048 2048 NT_STATUS_OK
ReadX 10635 897 2048 2048 NT_STATUS_OK
ReadX 10635 1025 2048 2048 NT_STATUS_OK
ReadX 10635 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10637 NT_STATUS_OK
Close 10637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10640 NT_STATUS_OK
WriteX 10640 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10640 258 NT_STATUS_OK
WriteX 10640 0 11588 11588 NT_STATUS_OK
Flush 10640 NT_STATUS_OK
Close 10640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10641 NT_STATUS_OK
Close 10641 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10643 NT_STATUS_OK
ReadX 10643 0 4096 4096 NT_STATUS_OK
Close 10635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10645 NT_STATUS_OK
WriteX 10645 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10645 258 NT_STATUS_OK
WriteX 10645 0 11615 11615 NT_STATUS_OK
Flush 10645 NT_STATUS_OK
Close 10645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10647 NT_STATUS_OK
Close 10647 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10649 NT_STATUS_OK
ReadX 10649 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10651 NT_STATUS_OK
Close 10651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10654 NT_STATUS_OK
WriteX 10654 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10654 258 NT_STATUS_OK
WriteX 10654 0 65536 65536 NT_STATUS_OK
WriteX 10654 65536 16050 16050 NT_STATUS_OK
Close 10654 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10634 1939 64 64 NT_STATUS_OK
ReadX 10634 128 248 248 NT_STATUS_OK
ReadX 10634 128 568 568 NT_STATUS_OK
ReadX 10634 3872 1536 1536 NT_STATUS_OK
ReadX 10634 3456 2560 2560 NT_STATUS_OK
ReadX 10634 3136 512 512 NT_STATUS_OK
ReadX 10634 2880 4096 4096 NT_STATUS_OK
ReadX 10634 3264 3072 3072 NT_STATUS_OK
ReadX 10634 320 4096 4096 NT_STATUS_OK
ReadX 10634 1024 4096 4096 NT_STATUS_OK
ReadX 10634 3616 4096 4096 NT_STATUS_OK
ReadX 10634 1939 64 64 NT_STATUS_OK
ReadX 10634 128 248 248 NT_STATUS_OK
ReadX 10634 128 608 608 NT_STATUS_OK
ReadX 10634 2858 1024 1024 NT_STATUS_OK
ReadX 10634 2810 4096 4096 NT_STATUS_OK
ReadX 10634 2826 4096 4096 NT_STATUS_OK
ReadX 10634 2580 2048 2048 NT_STATUS_OK
ReadX 10634 2800 2560 2560 NT_STATUS_OK
ReadX 10634 2100 4096 4096 NT_STATUS_OK
ReadX 10634 2084 4096 4096 NT_STATUS_OK
ReadX 10634 868 4096 4096 NT_STATUS_OK
ReadX 10634 2324 4096 4096 NT_STATUS_OK
ReadX 10634 884 4096 4096 NT_STATUS_OK
ReadX 10634 2604 1024 1024 NT_STATUS_OK
ReadX 10634 580 4096 4096 NT_STATUS_OK
ReadX 10634 596 4096 4096 NT_STATUS_OK
ReadX 10634 2752 4096 4096 NT_STATUS_OK
ReadX 10634 2842 1024 1024 NT_STATUS_OK
ReadX 10634 660 4096 4096 NT_STATUS_OK
ReadX 10634 2720 4096 4096 NT_STATUS_OK
ReadX 10634 2736 4096 4096 NT_STATUS_OK
ReadX 10634 628 4096 4096 NT_STATUS_OK
ReadX 10634 2704 4096 4096 NT_STATUS_OK
ReadX 10634 1556 4096 4096 NT_STATUS_OK
ReadX 10634 576 4096 4096 NT_STATUS_OK
ReadX 10634 3168 1536 1536 NT_STATUS_OK
ReadX 10634 832 4096 4096 NT_STATUS_OK
ReadX 10634 1088 4096 4096 NT_STATUS_OK
ReadX 10634 1344 4096 4096 NT_STATUS_OK
ReadX 10634 1600 4096 4096 NT_STATUS_OK
ReadX 10634 1856 4096 4096 NT_STATUS_OK
ReadX 10634 2112 4096 4096 NT_STATUS_OK
ReadX 10634 1892 4096 4096 NT_STATUS_OK
ReadX 10634 820 4096 4096 NT_STATUS_OK
ReadX 10634 788 4096 4096 NT_STATUS_OK
ReadX 10634 1604 4096 4096 NT_STATUS_OK
ReadX 10634 3648 4096 4096 NT_STATUS_OK
ReadX 10634 2608 4096 4096 NT_STATUS_OK
ReadX 10634 548 4096 4096 NT_STATUS_OK
ReadX 10634 740 4096 4096 NT_STATUS_OK
ReadX 10634 1344 4096 4096 NT_STATUS_OK
ReadX 10634 3392 4096 4096 NT_STATUS_OK
ReadX 10634 3904 4096 4096 NT_STATUS_OK
ReadX 10634 644 4096 4096 NT_STATUS_OK
ReadX 10634 676 4096 4096 NT_STATUS_OK
ReadX 10634 2688 4096 4096 NT_STATUS_OK
ReadX 10634 320 4096 4096 NT_STATUS_OK
ReadX 10634 900 4096 4096 NT_STATUS_OK
ReadX 10634 1908 4096 4096 NT_STATUS_OK
ReadX 10634 852 4096 4096 NT_STATUS_OK
ReadX 10634 724 4096 4096 NT_STATUS_OK
ReadX 10634 2292 4096 4096 NT_STATUS_OK
ReadX 10634 612 4096 4096 NT_STATUS_OK
ReadX 10634 388 4096 4096 NT_STATUS_OK
ReadX 10634 2368 4096 4096 NT_STATUS_OK
ReadX 10634 2624 4096 4096 NT_STATUS_OK
ReadX 10634 500 4096 4096 NT_STATUS_OK
ReadX 10634 356 4096 4096 NT_STATUS_OK
ReadX 10634 1024 4096 4096 NT_STATUS_OK
ReadX 10634 576 4096 4096 NT_STATUS_OK
ReadX 10634 340 4096 4096 NT_STATUS_OK
ReadX 10634 420 4096 4096 NT_STATUS_OK
ReadX 10634 1600 4096 4096 NT_STATUS_OK
ReadX 10634 404 4096 4096 NT_STATUS_OK
ReadX 10634 1428 4096 4096 NT_STATUS_OK
ReadX 10634 2656 4096 4096 NT_STATUS_OK
ReadX 10634 2624 4096 4096 NT_STATUS_OK
ReadX 10634 452 4096 4096 NT_STATUS_OK
ReadX 10634 692 4096 4096 NT_STATUS_OK
ReadX 10634 564 4096 4096 NT_STATUS_OK
ReadX 10634 372 4096 4096 NT_STATUS_OK
ReadX 10634 468 4096 4096 NT_STATUS_OK
ReadX 10634 484 4096 4096 NT_STATUS_OK
ReadX 10634 1088 4096 4096 NT_STATUS_OK
ReadX 10634 1924 4096 4096 NT_STATUS_OK
ReadX 10634 2768 4096 4096 NT_STATUS_OK
ReadX 10634 832 4096 4096 NT_STATUS_OK
ReadX 10634 836 4096 4096 NT_STATUS_OK
ReadX 10634 1856 4096 4096 NT_STATUS_OK
ReadX 10634 2640 4096 4096 NT_STATUS_OK
ReadX 10634 436 4096 4096 NT_STATUS_OK
ReadX 10634 1828 4096 4096 NT_STATUS_OK
ReadX 10634 804 4096 4096 NT_STATUS_OK
ReadX 10634 1860 4096 4096 NT_STATUS_OK
ReadX 10634 1812 4096 4096 NT_STATUS_OK
ReadX 10634 756 4096 4096 NT_STATUS_OK
ReadX 10634 1636 4096 4096 NT_STATUS_OK
ReadX 10634 772 4096 4096 NT_STATUS_OK
ReadX 10634 2036 4096 4096 NT_STATUS_OK
ReadX 10634 1220 4096 4096 NT_STATUS_OK
ReadX 10634 1652 4096 4096 NT_STATUS_OK
ReadX 10634 2588 4096 4096 NT_STATUS_OK
ReadX 10634 916 4096 4096 NT_STATUS_OK
ReadX 10634 260 4096 4096 NT_STATUS_OK
ReadX 10634 932 4096 4096 NT_STATUS_OK
ReadX 10634 2624 4096 4096 NT_STATUS_OK
ReadX 10634 308 4096 4096 NT_STATUS_OK
ReadX 10634 292 4096 4096 NT_STATUS_OK
ReadX 10634 1140 4096 4096 NT_STATUS_OK
ReadX 10634 276 4096 4096 NT_STATUS_OK
ReadX 10634 2020 4096 4096 NT_STATUS_OK
ReadX 10634 2880 4096 4096 NT_STATUS_OK
ReadX 10634 516 4096 4096 NT_STATUS_OK
ReadX 10634 1844 4096 4096 NT_STATUS_OK
ReadX 10634 1124 4096 4096 NT_STATUS_OK
ReadX 10634 3136 4096 4096 NT_STATUS_OK
ReadX 10634 324 4096 4096 NT_STATUS_OK
ReadX 10634 1156 4096 4096 NT_STATUS_OK
ReadX 10634 1172 4096 4096 NT_STATUS_OK
ReadX 10634 2112 4096 4096 NT_STATUS_OK
ReadX 10634 2368 4096 4096 NT_STATUS_OK
ReadX 10634 964 4096 4096 NT_STATUS_OK
ReadX 10634 980 4096 4096 NT_STATUS_OK
ReadX 10634 1012 4096 4096 NT_STATUS_OK
ReadX 10634 532 4096 4096 NT_STATUS_OK
ReadX 10634 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10634 1620 4096 4096 NT_STATUS_OK
ReadX 10634 1604 4096 4096 NT_STATUS_OK
ReadX 10634 2116 4096 4096 NT_STATUS_OK
ReadX 10634 2132 4096 4096 NT_STATUS_OK
ReadX 10634 2148 4096 4096 NT_STATUS_OK
ReadX 10634 2276 4096 4096 NT_STATUS_OK
ReadX 10634 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10656 NT_STATUS_OK
Close 10656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10659 NT_STATUS_OK
QUERY_FILE_INFORMATION 10614 1004 NT_STATUS_OK
Close 10614 NT_STATUS_OK
WriteX 10659 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10659 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10616 1004 NT_STATUS_OK
Close 10616 NT_STATUS_OK
WriteX 10659 0 65536 65536 NT_STATUS_OK
WriteX 10659 65536 64850 64850 NT_STATUS_OK
Close 10659 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10661 NT_STATUS_OK
WriteX 10661 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10661 258 NT_STATUS_OK
ReadX 10634 2068 4096 4096 NT_STATUS_OK
ReadX 10634 1588 4096 4096 NT_STATUS_OK
ReadX 10634 1572 4096 4096 NT_STATUS_OK
WriteX 10661 0 18630 18630 NT_STATUS_OK
Flush 10661 NT_STATUS_OK
Close 10661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10663 NT_STATUS_OK
Close 10663 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10665 NT_STATUS_OK
ReadX 10665 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10634 612 4096 4096 NT_STATUS_OK
ReadX 10634 564 4096 4096 NT_STATUS_OK
ReadX 10634 1876 4096 4096 NT_STATUS_OK
ReadX 10634 628 4096 4096 NT_STATUS_OK
ReadX 10634 740 4096 4096 NT_STATUS_OK
ReadX 10634 724 4096 4096 NT_STATUS_OK
ReadX 10634 644 4096 4096 NT_STATUS_OK
ReadX 10634 2324 4096 4096 NT_STATUS_OK
ReadX 10634 660 4096 4096 NT_STATUS_OK
ReadX 10634 852 4096 4096 NT_STATUS_OK
ReadX 10634 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10634 2368 4096 4096 NT_STATUS_OK
ReadX 10634 1024 4096 4096 NT_STATUS_OK
ReadX 10634 320 4096 4096 NT_STATUS_OK
ReadX 10634 580 4096 4096 NT_STATUS_OK
ReadX 10634 3136 512 512 NT_STATUS_OK
ReadX 10634 2880 4096 4096 NT_STATUS_OK
Close 10634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10666 NT_STATUS_OK
ReadX 10666 61440 4096 4096 NT_STATUS_OK
ReadX 10666 126976 4096 4096 NT_STATUS_OK
WriteX 10666 0 65536 65536 NT_STATUS_OK
WriteX 10666 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10667 NT_STATUS_OK
ReadX 10667 61440 4096 4096 NT_STATUS_OK
ReadX 10667 126976 4096 4096 NT_STATUS_OK
ReadX 10667 192512 4096 4096 NT_STATUS_OK
ReadX 10667 258048 4096 4096 NT_STATUS_OK
WriteX 10667 0 65536 65536 NT_STATUS_OK
WriteX 10667 65536 65536 65536 NT_STATUS_OK
WriteX 10667 131072 65536 65536 NT_STATUS_OK
WriteX 10667 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10668 NT_STATUS_OK
ReadX 10668 61440 4096 4096 NT_STATUS_OK
ReadX 10668 126976 4096 4096 NT_STATUS_OK
ReadX 10668 192512 4096 4096 NT_STATUS_OK
ReadX 10668 258048 4096 4096 NT_STATUS_OK
ReadX 10668 323584 4096 4096 NT_STATUS_OK
ReadX 10668 389120 4096 4096 NT_STATUS_OK
ReadX 10668 454656 4096 4096 NT_STATUS_OK
ReadX 10668 520192 4096 4096 NT_STATUS_OK
WriteX 10668 0 65536 65536 NT_STATUS_OK
WriteX 10668 65536 65536 65536 NT_STATUS_OK
WriteX 10668 131072 65536 65536 NT_STATUS_OK
WriteX 10668 196608 65536 65536 NT_STATUS_OK
WriteX 10668 262144 65536 65536 NT_STATUS_OK
WriteX 10668 327680 65536 65536 NT_STATUS_OK
WriteX 10668 393216 65536 65536 NT_STATUS_OK
WriteX 10668 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10669 NT_STATUS_OK
ReadX 10669 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10670 NT_STATUS_OK
Close 10670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10671 NT_STATUS_OK
WriteX 10671 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10671 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10669 0 8192 8192 NT_STATUS_OK
Flush 10669 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10669 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10669 0 8192 8192 NT_STATUS_OK
Flush 10669 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10669 0 8192 8192 NT_STATUS_OK
Flush 10669 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10669 0 8192 8192 NT_STATUS_OK
Flush 10669 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10673 NT_STATUS_OK
Close 10673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10665 NT_STATUS_OK
Close 10633 NT_STATUS_OK
Close 10666 NT_STATUS_OK
Close 10667 NT_STATUS_OK
Close 10668 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10676 NT_STATUS_OK
WriteX 10676 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10676 258 NT_STATUS_OK
WriteX 10676 0 62591 62591 NT_STATUS_OK
Close 10676 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10678 NT_STATUS_OK
Close 10678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10681 NT_STATUS_OK
WriteX 10681 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10681 258 NT_STATUS_OK
WriteX 10681 0 10845 10845 NT_STATUS_OK
Close 10681 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10683 NT_STATUS_OK
Close 10683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10686 NT_STATUS_OK
WriteX 10686 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10686 258 NT_STATUS_OK
WriteX 10686 0 30118 30118 NT_STATUS_OK
Close 10686 NT_STATUS_OK
WriteX 10669 0 4096 4096 NT_STATUS_OK
WriteX 10671 0 64 64 NT_STATUS_OK
Close 10671 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10669 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10688 NT_STATUS_OK
ReadX 10688 0 61440 61440 NT_STATUS_OK
ReadX 10688 61440 4096 4096 NT_STATUS_OK
ReadX 10688 65536 61440 61440 NT_STATUS_OK
ReadX 10688 126976 4096 4096 NT_STATUS_OK
ReadX 10688 131072 61440 61440 NT_STATUS_OK
ReadX 10688 192512 4096 4096 NT_STATUS_OK
ReadX 10688 196608 61440 61440 NT_STATUS_OK
ReadX 10688 258048 4096 4096 NT_STATUS_OK
ReadX 10688 262144 61440 61440 NT_STATUS_OK
ReadX 10688 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10689 NT_STATUS_OK
ReadX 10689 0 61440 61440 NT_STATUS_OK
ReadX 10689 61440 4096 4096 NT_STATUS_OK
ReadX 10689 65536 61440 61440 NT_STATUS_OK
ReadX 10689 126976 4096 4096 NT_STATUS_OK
ReadX 10689 131072 61440 61440 NT_STATUS_OK
ReadX 10689 192512 4096 4096 NT_STATUS_OK
ReadX 10689 196608 61440 61440 NT_STATUS_OK
ReadX 10689 258048 4096 4096 NT_STATUS_OK
ReadX 10689 262144 61440 61440 NT_STATUS_OK
ReadX 10689 323584 4096 4096 NT_STATUS_OK
ReadX 10689 327680 61440 61440 NT_STATUS_OK
ReadX 10689 389120 4096 4096 NT_STATUS_OK
ReadX 10689 393216 61440 61440 NT_STATUS_OK
ReadX 10689 454656 4096 4096 NT_STATUS_OK
ReadX 10689 458752 61440 61440 NT_STATUS_OK
ReadX 10689 520192 4096 4096 NT_STATUS_OK
ReadX 10689 524288 61440 61440 NT_STATUS_OK
ReadX 10689 585728 4096 4096 NT_STATUS_OK
ReadX 10689 589824 61440 61440 NT_STATUS_OK
ReadX 10689 651264 4096 4096 NT_STATUS_OK
ReadX 10689 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10690 NT_STATUS_OK
ReadX 10690 0 61440 61440 NT_STATUS_OK
ReadX 10690 61440 4096 4096 NT_STATUS_OK
ReadX 10690 65536 61440 61440 NT_STATUS_OK
ReadX 10690 126976 4096 4096 NT_STATUS_OK
ReadX 10690 131072 61440 61440 NT_STATUS_OK
ReadX 10690 192512 4096 4096 NT_STATUS_OK
ReadX 10690 196608 61440 61440 NT_STATUS_OK
ReadX 10690 258048 4096 4096 NT_STATUS_OK
ReadX 10690 262144 61440 61440 NT_STATUS_OK
ReadX 10690 323584 4096 4096 NT_STATUS_OK
ReadX 10690 327680 61440 61440 NT_STATUS_OK
ReadX 10690 389120 4096 4096 NT_STATUS_OK
ReadX 10690 393216 61440 61440 NT_STATUS_OK
ReadX 10690 454656 4096 4096 NT_STATUS_OK
ReadX 10690 458752 61440 61440 NT_STATUS_OK
ReadX 10690 520192 4096 4096 NT_STATUS_OK
ReadX 10690 524288 61440 61440 NT_STATUS_OK
ReadX 10690 585728 4096 4096 NT_STATUS_OK
ReadX 10690 589824 61440 61440 NT_STATUS_OK
ReadX 10690 651264 4096 4096 NT_STATUS_OK
ReadX 10690 655360 61440 61440 NT_STATUS_OK
ReadX 10690 716800 4096 4096 NT_STATUS_OK
ReadX 10690 720896 61440 61440 NT_STATUS_OK
ReadX 10690 782336 4096 4096 NT_STATUS_OK
ReadX 10690 786432 61440 61440 NT_STATUS_OK
ReadX 10690 847872 4096 4096 NT_STATUS_OK
ReadX 10690 851968 61440 61440 NT_STATUS_OK
ReadX 10690 913408 4096 4096 NT_STATUS_OK
ReadX 10690 917504 61440 61440 NT_STATUS_OK
ReadX 10690 978944 4096 4096 NT_STATUS_OK
ReadX 10690 983040 61440 61440 NT_STATUS_OK
ReadX 10690 1044480 4096 4096 NT_STATUS_OK
ReadX 10690 1048576 61440 61440 NT_STATUS_OK
ReadX 10690 1110016 4096 4096 NT_STATUS_OK
ReadX 10690 1114112 61440 61440 NT_STATUS_OK
ReadX 10690 1175552 4096 4096 NT_STATUS_OK
ReadX 10690 1179648 61440 61440 NT_STATUS_OK
ReadX 10690 1241088 4096 4096 NT_STATUS_OK
ReadX 10690 1245184 61440 61440 NT_STATUS_OK
ReadX 10690 1306624 4096 4096 NT_STATUS_OK
ReadX 10690 1310720 61440 61440 NT_STATUS_OK
ReadX 10690 1372160 4096 4096 NT_STATUS_OK
ReadX 10690 1376256 61440 61440 NT_STATUS_OK
ReadX 10690 1437696 4096 4096 NT_STATUS_OK
ReadX 10690 1441792 61440 61440 NT_STATUS_OK
ReadX 10690 1503232 4096 4096 NT_STATUS_OK
ReadX 10690 1507328 61440 61440 NT_STATUS_OK
ReadX 10690 1568768 4096 4096 NT_STATUS_OK
ReadX 10690 1572864 61440 61440 NT_STATUS_OK
ReadX 10690 1634304 4096 4096 NT_STATUS_OK
ReadX 10690 1638400 61440 61440 NT_STATUS_OK
ReadX 10690 1699840 4096 4096 NT_STATUS_OK
ReadX 10690 1703936 61440 61440 NT_STATUS_OK
ReadX 10690 1765376 4096 4096 NT_STATUS_OK
ReadX 10690 1769472 61440 61440 NT_STATUS_OK
ReadX 10690 1830912 4096 4096 NT_STATUS_OK
ReadX 10690 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10691 NT_STATUS_OK
Close 10691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10688 NT_STATUS_OK
Close 10689 NT_STATUS_OK
Close 10690 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10693 NT_STATUS_OK
ReadX 10693 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10694 NT_STATUS_OK
ReadX 10694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10695 NT_STATUS_OK
ReadX 10695 0 4096 4096 NT_STATUS_OK
ReadX 10695 4096 4096 4096 NT_STATUS_OK
ReadX 10695 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10696 NT_STATUS_OK
Close 10696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10693 NT_STATUS_OK
Close 10694 NT_STATUS_OK
Close 10695 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10698 NT_STATUS_OK
ReadX 10698 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10699 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10699 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10700 NT_STATUS_OK
Close 10700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10698 NT_STATUS_OK
Close 10699 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10702 NT_STATUS_OK
ReadX 10702 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10703 NT_STATUS_OK
ReadX 10703 0 8192 8192 NT_STATUS_OK
ReadX 10703 8192 8192 8192 NT_STATUS_OK
ReadX 10703 16384 8192 8192 NT_STATUS_OK
ReadX 10703 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10705 NT_STATUS_OK
Close 10705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10703 NT_STATUS_OK
Close 10702 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10708 NT_STATUS_OK
WriteX 10708 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10708 258 NT_STATUS_OK
WriteX 10708 0 10438 10438 NT_STATUS_OK
Close 10708 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10709 NT_STATUS_OK
Close 10709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10710 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10711 NT_STATUS_OK
Close 10711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10712 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10713 NT_STATUS_OK
Close 10713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10714 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10715 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10715 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10716 NT_STATUS_OK
Close 10716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10717 NT_STATUS_OK
ReadX 10717 0 4096 4096 NT_STATUS_OK
ReadX 10717 4096 4096 4096 NT_STATUS_OK
ReadX 10717 8192 4096 4096 NT_STATUS_OK
ReadX 10717 12288 8192 8192 NT_STATUS_OK
ReadX 10717 20480 8192 8192 NT_STATUS_OK
ReadX 10717 28672 8192 8192 NT_STATUS_OK
ReadX 10717 36864 8192 8192 NT_STATUS_OK
ReadX 10717 45056 8192 8192 NT_STATUS_OK
ReadX 10717 53248 8192 8192 NT_STATUS_OK
ReadX 10717 61440 8192 8192 NT_STATUS_OK
ReadX 10717 69632 8192 8192 NT_STATUS_OK
ReadX 10717 77824 8192 8192 NT_STATUS_OK
ReadX 10717 86016 8192 8192 NT_STATUS_OK
ReadX 10717 94208 8192 8192 NT_STATUS_OK
ReadX 10717 102400 8192 8192 NT_STATUS_OK
ReadX 10717 110592 8192 8192 NT_STATUS_OK
ReadX 10717 118784 8192 8192 NT_STATUS_OK
ReadX 10717 126976 8192 8192 NT_STATUS_OK
ReadX 10717 135168 8192 8192 NT_STATUS_OK
ReadX 10717 143360 8192 8192 NT_STATUS_OK
ReadX 10717 151552 8192 8192 NT_STATUS_OK
ReadX 10717 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10717 NT_STATUS_OK
Close 10710 NT_STATUS_OK
Close 10712 NT_STATUS_OK
Close 10714 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10719 NT_STATUS_OK
Close 10719 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10722 NT_STATUS_OK
WriteX 10722 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10722 258 NT_STATUS_OK
WriteX 10722 0 28489 28489 NT_STATUS_OK
Close 10722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10723 NT_STATUS_OK
Close 10723 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10725 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10725 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10726 NT_STATUS_OK
Close 10726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10725 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10728 NT_STATUS_OK
ReadX 10728 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10729 NT_STATUS_OK
ReadX 10729 0 8192 8192 NT_STATUS_OK
ReadX 10729 8192 8192 8192 NT_STATUS_OK
ReadX 10729 16384 8192 8192 NT_STATUS_OK
ReadX 10729 24576 8192 8192 NT_STATUS_OK
ReadX 10729 32768 16384 16384 NT_STATUS_OK
ReadX 10729 49152 8192 8192 NT_STATUS_OK
ReadX 10729 57344 8192 8192 NT_STATUS_OK
ReadX 10729 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10731 NT_STATUS_OK
Close 10731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10729 NT_STATUS_OK
Close 10728 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10734 NT_STATUS_OK
WriteX 10734 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10734 258 NT_STATUS_OK
WriteX 10734 0 29253 29253 NT_STATUS_OK
Close 10734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10735 NT_STATUS_OK
Close 10735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10736 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10738 NT_STATUS_OK
Close 10738 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10741 NT_STATUS_OK
WriteX 10741 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10741 258 NT_STATUS_OK
WriteX 10741 0 30183 30183 NT_STATUS_OK
Close 10741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10742 NT_STATUS_OK
Close 10742 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10744 NT_STATUS_OK
WriteX 10744 0 510 510 NT_STATUS_OK
WriteX 10744 510 512 512 NT_STATUS_OK
WriteX 10744 1022 510 510 NT_STATUS_OK
WriteX 10744 1532 510 510 NT_STATUS_OK
WriteX 10744 2042 168 168 NT_STATUS_OK
Close 10744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10745 NT_STATUS_OK
Close 10745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10747 NT_STATUS_OK
ReadX 10747 0 4096 4096 NT_STATUS_OK
WriteX 10747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10748 NT_STATUS_OK
ReadX 10748 61440 4096 4096 NT_STATUS_OK
ReadX 10748 126976 4096 4096 NT_STATUS_OK
WriteX 10748 0 65536 65536 NT_STATUS_OK
WriteX 10748 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10749 NT_STATUS_OK
ReadX 10749 61440 4096 4096 NT_STATUS_OK
ReadX 10749 126976 4096 4096 NT_STATUS_OK
ReadX 10749 192512 4096 4096 NT_STATUS_OK
ReadX 10749 258048 4096 4096 NT_STATUS_OK
WriteX 10749 0 65536 65536 NT_STATUS_OK
WriteX 10749 65536 65536 65536 NT_STATUS_OK
WriteX 10749 131072 65536 65536 NT_STATUS_OK
WriteX 10749 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10750 NT_STATUS_OK
ReadX 10750 61440 4096 4096 NT_STATUS_OK
ReadX 10750 126976 4096 4096 NT_STATUS_OK
ReadX 10750 192512 4096 4096 NT_STATUS_OK
ReadX 10750 258048 4096 4096 NT_STATUS_OK
ReadX 10750 323584 4096 4096 NT_STATUS_OK
ReadX 10750 389120 4096 4096 NT_STATUS_OK
ReadX 10750 454656 4096 4096 NT_STATUS_OK
ReadX 10750 520192 4096 4096 NT_STATUS_OK
WriteX 10750 0 65536 65536 NT_STATUS_OK
WriteX 10750 65536 65536 65536 NT_STATUS_OK
WriteX 10750 131072 65536 65536 NT_STATUS_OK
WriteX 10750 196608 65536 65536 NT_STATUS_OK
WriteX 10750 262144 65536 65536 NT_STATUS_OK
WriteX 10750 327680 65536 65536 NT_STATUS_OK
WriteX 10750 393216 65536 65536 NT_STATUS_OK
WriteX 10750 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10751 NT_STATUS_OK
Close 10751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10747 NT_STATUS_OK
Close 10748 NT_STATUS_OK
Close 10749 NT_STATUS_OK
Close 10750 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10753 NT_STATUS_OK
Close 10753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10757 NT_STATUS_OK
Close 10757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10760 NT_STATUS_OK
Close 10760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10762 NT_STATUS_OK
Close 10762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10766 NT_STATUS_OK
Close 10766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10769 NT_STATUS_OK
Close 10769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10771 NT_STATUS_OK
Close 10771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10775 NT_STATUS_OK
Close 10775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10780 NT_STATUS_OK
Close 10780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10785 NT_STATUS_OK
Close 10785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10790 NT_STATUS_OK
Close 10790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10795 NT_STATUS_OK
Close 10795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10800 NT_STATUS_OK
Close 10800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10805 NT_STATUS_OK
Close 10805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10810 NT_STATUS_OK
Close 10810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10813 NT_STATUS_OK
Close 10813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10816 NT_STATUS_OK
Close 10816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10819 NT_STATUS_OK
WriteX 10819 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10819 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10819 0 65536 65536 NT_STATUS_OK
WriteX 10819 65536 65536 65536 NT_STATUS_OK
WriteX 10819 131072 65536 65536 NT_STATUS_OK
WriteX 10819 196608 65536 65536 NT_STATUS_OK
WriteX 10819 262144 26634 26634 NT_STATUS_OK
Close 10819 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10824 NT_STATUS_OK
Close 10824 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10825 NT_STATUS_OK
Close 10825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10826 NT_STATUS_OK
ReadX 10826 0 4096 4096 NT_STATUS_OK
Close 10826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10827 NT_STATUS_OK
ReadX 10827 0 4096 4096 NT_STATUS_OK
ReadX 10827 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10828 NT_STATUS_OK
Close 10828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10827 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10832 NT_STATUS_OK
Close 10832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10835 NT_STATUS_OK
Close 10835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10837 NT_STATUS_OK
Close 10837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10841 NT_STATUS_OK
Close 10841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10844 NT_STATUS_OK
Close 10844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10846 NT_STATUS_OK
Close 10846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10850 NT_STATUS_OK
Close 10850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10855 NT_STATUS_OK
Close 10855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10860 NT_STATUS_OK
Close 10860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10865 NT_STATUS_OK
Close 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10870 NT_STATUS_OK
Close 10870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10875 NT_STATUS_OK
Close 10875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10879 NT_STATUS_OK
Close 10879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10884 NT_STATUS_OK
Close 10884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10889 NT_STATUS_OK
Close 10889 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10892 NT_STATUS_OK
Close 10892 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10894 NT_STATUS_OK
Close 10894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10904 NT_STATUS_OK
Close 10904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10905 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10906 NT_STATUS_OK
ReadX 10906 0 4096 4096 NT_STATUS_OK
Close 10906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10907 NT_STATUS_OK
ReadX 10907 0 4096 4096 NT_STATUS_OK
Close 10907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10908 NT_STATUS_OK
ReadX 10908 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10918 NT_STATUS_OK
Close 10918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10919 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
Close 10920 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10921 NT_STATUS_OK
ReadX 10921 0 4096 4096 NT_STATUS_OK
Close 10921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10922 NT_STATUS_OK
ReadX 10922 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10908 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10951 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10951 0 4096 4096 NT_STATUS_OK
Close 10951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10952 NT_STATUS_OK
ReadX 10952 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10953 NT_STATUS_OK
ReadX 10953 0 4096 4096 NT_STATUS_OK
ReadX 10953 4096 4096 4096 NT_STATUS_OK
ReadX 10953 8192 4096 4096 NT_STATUS_OK
ReadX 10953 12288 4096 4096 NT_STATUS_OK
ReadX 10953 16384 4096 4096 NT_STATUS_OK
ReadX 10953 20480 4096 4096 NT_STATUS_OK
ReadX 10953 24576 4096 4096 NT_STATUS_OK
ReadX 10953 28672 4096 4096 NT_STATUS_OK
ReadX 10953 32768 4096 4096 NT_STATUS_OK
ReadX 10953 36864 4096 4096 NT_STATUS_OK
ReadX 10953 40960 4096 4096 NT_STATUS_OK
ReadX 10953 45056 4096 4096 NT_STATUS_OK
ReadX 10953 49152 4096 4096 NT_STATUS_OK
ReadX 10953 53248 4096 4096 NT_STATUS_OK
ReadX 10953 57344 4096 4096 NT_STATUS_OK
ReadX 10953 61440 4096 4096 NT_STATUS_OK
ReadX 10953 65536 4096 4096 NT_STATUS_OK
ReadX 10953 69632 4096 4096 NT_STATUS_OK
ReadX 10953 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10953 1004 NT_STATUS_OK
WriteX 10953 0 4096 4096 NT_STATUS_OK
Close 10953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10954 NT_STATUS_OK
SET_FILE_INFORMATION 10954 1004 NT_STATUS_OK
Close 10954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10955 NT_STATUS_OK
ReadX 10955 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10956 NT_STATUS_OK
Close 10956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10959 NT_STATUS_OK
WriteX 10959 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10959 258 NT_STATUS_OK
WriteX 10959 0 65536 65536 NT_STATUS_OK
WriteX 10959 65536 19979 19979 NT_STATUS_OK
Close 10959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10960 NT_STATUS_OK
ReadX 10960 0 4096 4096 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
QUERY_FILE_INFORMATION 10960 1004 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
SET_FILE_INFORMATION 10960 1004 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
Close 10960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10961 NT_STATUS_OK
ReadX 10961 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10962 NT_STATUS_OK
ReadX 10962 0 4096 4096 NT_STATUS_OK
Close 10961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10963 NT_STATUS_OK
ReadX 10963 0 4096 4096 NT_STATUS_OK
Close 10963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10964 NT_STATUS_OK
ReadX 10964 0 4096 4096 NT_STATUS_OK
Close 10964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10965 NT_STATUS_OK
ReadX 10965 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10965 1004 NT_STATUS_OK
WriteX 10965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10966 NT_STATUS_OK
Close 10966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10962 NT_STATUS_OK
Close 10965 NT_STATUS_OK
Close 10955 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10968 NT_STATUS_OK
Close 10968 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10971 NT_STATUS_OK
WriteX 10971 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10971 258 NT_STATUS_OK
WriteX 10971 0 65536 65536 NT_STATUS_OK
WriteX 10971 65536 17654 17654 NT_STATUS_OK
Close 10971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10972 NT_STATUS_OK
ReadX 10972 0 4096 4096 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
QUERY_FILE_INFORMATION 10972 1004 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
SET_FILE_INFORMATION 10972 1004 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
Close 10972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10973 NT_STATUS_OK
SET_FILE_INFORMATION 10973 1004 NT_STATUS_OK
Close 10973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10974 NT_STATUS_OK
ReadX 10974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10975 NT_STATUS_OK
Close 10975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10977 NT_STATUS_OK
ReadX 10977 0 4096 4096 NT_STATUS_OK
ReadX 10977 4096 4096 4096 NT_STATUS_OK
ReadX 10977 8192 4096 4096 NT_STATUS_OK
ReadX 10977 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10977 16384 4096 4096 NT_STATUS_OK
ReadX 10977 20480 4096 4096 NT_STATUS_OK
ReadX 10977 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10978 NT_STATUS_OK
ReadX 10978 0 4096 4096 NT_STATUS_OK
Close 10978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10979 NT_STATUS_OK
ReadX 10979 0 4096 4096 NT_STATUS_OK
Close 10979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10980 NT_STATUS_OK
ReadX 10980 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10980 1004 NT_STATUS_OK
WriteX 10980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10981 NT_STATUS_OK
Close 10981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10980 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10983 NT_STATUS_OK
Close 10983 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10986 NT_STATUS_OK
WriteX 10986 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10986 258 NT_STATUS_OK
WriteX 10986 0 65536 65536 NT_STATUS_OK
WriteX 10986 65536 19490 19490 NT_STATUS_OK
Close 10986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10987 NT_STATUS_OK
ReadX 10987 0 4096 4096 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
Flush 10987 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
Flush 10987 NT_STATUS_OK
QUERY_FILE_INFORMATION 10987 1004 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
Flush 10987 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
Flush 10987 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
Flush 10987 NT_STATUS_OK
SET_FILE_INFORMATION 10987 1004 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
Flush 10987 NT_STATUS_OK
Close 10987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10988 NT_STATUS_OK
SET_FILE_INFORMATION 10988 1004 NT_STATUS_OK
Close 10988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10989 NT_STATUS_OK
ReadX 10989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10990 NT_STATUS_OK
Close 10990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10992 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10992 0 4096 4096 NT_STATUS_OK
Close 10992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10993 NT_STATUS_OK
ReadX 10993 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 0 4096 4096 NT_STATUS_OK
ReadX 10994 4096 4096 4096 NT_STATUS_OK
ReadX 10994 8192 4096 4096 NT_STATUS_OK
ReadX 10994 12288 4096 4096 NT_STATUS_OK
ReadX 10994 16384 4096 4096 NT_STATUS_OK
ReadX 10994 20480 4096 4096 NT_STATUS_OK
ReadX 10994 24576 4096 4096 NT_STATUS_OK
ReadX 10994 28672 4096 4096 NT_STATUS_OK
ReadX 10994 32768 4096 4096 NT_STATUS_OK
ReadX 10994 36864 4096 4096 NT_STATUS_OK
ReadX 10994 40960 4096 4096 NT_STATUS_OK
ReadX 10994 45056 4096 4096 NT_STATUS_OK
ReadX 10994 49152 4096 4096 NT_STATUS_OK
ReadX 10994 53248 4096 4096 NT_STATUS_OK
ReadX 10994 57344 4096 4096 NT_STATUS_OK
ReadX 10994 61440 4096 4096 NT_STATUS_OK
ReadX 10994 65536 4096 4096 NT_STATUS_OK
ReadX 10994 69632 4096 4096 NT_STATUS_OK
ReadX 10994 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10994 1004 NT_STATUS_OK
WriteX 10994 0 4096 4096 NT_STATUS_OK
Close 10994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10995 NT_STATUS_OK
SET_FILE_INFORMATION 10995 1004 NT_STATUS_OK
Close 10995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10997 NT_STATUS_OK
Close 10997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10989 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11000 NT_STATUS_OK
WriteX 11000 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11000 258 NT_STATUS_OK
WriteX 11000 0 65536 65536 NT_STATUS_OK
WriteX 11000 65536 8866 8866 NT_STATUS_OK
Close 11000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11001 NT_STATUS_OK
ReadX 11001 0 4096 4096 NT_STATUS_OK
WriteX 11001 0 4096 4096 NT_STATUS_OK
Flush 11001 NT_STATUS_OK
SET_FILE_INFORMATION 11001 1004 NT_STATUS_OK
WriteX 11001 0 4096 4096 NT_STATUS_OK
Flush 11001 NT_STATUS_OK
Close 11001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11002 NT_STATUS_OK
ReadX 11002 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11003 NT_STATUS_OK
ReadX 11003 0 4096 4096 NT_STATUS_OK
Close 11003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11004 NT_STATUS_OK
ReadX 11004 0 4096 4096 NT_STATUS_OK
Close 11004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11005 NT_STATUS_OK
ReadX 11005 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11005 1004 NT_STATUS_OK
WriteX 11005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11006 NT_STATUS_OK
Close 11006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11005 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11008 NT_STATUS_OK
Close 11008 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11011 NT_STATUS_OK
WriteX 11011 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11011 258 NT_STATUS_OK
WriteX 11011 0 65536 65536 NT_STATUS_OK
WriteX 11011 65536 9298 9298 NT_STATUS_OK
Close 11011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11012 NT_STATUS_OK
ReadX 11012 0 4096 4096 NT_STATUS_OK
WriteX 11012 0 4096 4096 NT_STATUS_OK
Flush 11012 NT_STATUS_OK
SET_FILE_INFORMATION 11012 1004 NT_STATUS_OK
WriteX 11012 0 4096 4096 NT_STATUS_OK
Flush 11012 NT_STATUS_OK
Close 11012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11013 NT_STATUS_OK
SET_FILE_INFORMATION 11013 1004 NT_STATUS_OK
Close 11013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11014 NT_STATUS_OK
ReadX 11014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11015 NT_STATUS_OK
Close 11015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11018 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11018 0 4096 4096 NT_STATUS_OK
Close 11018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11019 NT_STATUS_OK
ReadX 11019 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11019 4096 4096 4096 NT_STATUS_OK
ReadX 11019 8192 4096 4096 NT_STATUS_OK
ReadX 11019 12288 4096 4096 NT_STATUS_OK
ReadX 11019 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11020 NT_STATUS_OK
ReadX 11020 0 4096 4096 NT_STATUS_OK
Close 11020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11021 NT_STATUS_OK
ReadX 11021 0 4096 4096 NT_STATUS_OK
Close 11021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11022 NT_STATUS_OK
ReadX 11022 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11022 1004 NT_STATUS_OK
WriteX 11022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11023 NT_STATUS_OK
Close 11023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11022 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11025 NT_STATUS_OK
Close 11025 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11028 NT_STATUS_OK
WriteX 11028 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11028 258 NT_STATUS_OK
WriteX 11028 0 65536 65536 NT_STATUS_OK
WriteX 11028 65536 11540 11540 NT_STATUS_OK
Close 11028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11029 NT_STATUS_OK
ReadX 11029 0 4096 4096 NT_STATUS_OK
WriteX 11029 0 4096 4096 NT_STATUS_OK
Flush 11029 NT_STATUS_OK
SET_FILE_INFORMATION 11029 1004 NT_STATUS_OK
WriteX 11029 0 4096 4096 NT_STATUS_OK
Flush 11029 NT_STATUS_OK
Close 11029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11030 NT_STATUS_OK
SET_FILE_INFORMATION 11030 1004 NT_STATUS_OK
Close 11030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11031 NT_STATUS_OK
ReadX 11031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11032 NT_STATUS_OK
Close 11032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11034 NT_STATUS_OK
ReadX 11034 61440 4096 4096 NT_STATUS_OK
ReadX 11034 126976 4096 4096 NT_STATUS_OK
WriteX 11034 0 65536 65536 NT_STATUS_OK
WriteX 11034 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11035 NT_STATUS_OK
ReadX 11035 61440 4096 4096 NT_STATUS_OK
ReadX 11035 126976 4096 4096 NT_STATUS_OK
ReadX 11035 192512 4096 4096 NT_STATUS_OK
ReadX 11035 258048 4096 4096 NT_STATUS_OK
WriteX 11035 0 65536 65536 NT_STATUS_OK
WriteX 11035 65536 65536 65536 NT_STATUS_OK
WriteX 11035 131072 65536 65536 NT_STATUS_OK
WriteX 11035 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11036 NT_STATUS_OK
ReadX 11036 61440 4096 4096 NT_STATUS_OK
ReadX 11036 126976 4096 4096 NT_STATUS_OK
ReadX 11036 192512 4096 4096 NT_STATUS_OK
ReadX 11036 258048 4096 4096 NT_STATUS_OK
ReadX 11036 323584 4096 4096 NT_STATUS_OK
ReadX 11036 389120 4096 4096 NT_STATUS_OK
ReadX 11036 454656 4096 4096 NT_STATUS_OK
ReadX 11036 520192 4096 4096 NT_STATUS_OK
WriteX 11036 0 65536 65536 NT_STATUS_OK
WriteX 11036 65536 65536 65536 NT_STATUS_OK
WriteX 11036 131072 65536 65536 NT_STATUS_OK
WriteX 11036 196608 65536 65536 NT_STATUS_OK
WriteX 11036 262144 65536 65536 NT_STATUS_OK
WriteX 11036 327680 65536 65536 NT_STATUS_OK
WriteX 11036 393216 65536 65536 NT_STATUS_OK
WriteX 11036 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11037 NT_STATUS_OK
ReadX 11037 0 4096 4096 NT_STATUS_OK
ReadX 11037 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11038 NT_STATUS_OK
WriteX 11038 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11038 258 NT_STATUS_OK
WriteX 11038 0 53 53 NT_STATUS_OK
Close 11038 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11039 NT_STATUS_OK
Close 11039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11031 NT_STATUS_OK
Close 10977 NT_STATUS_OK
Close 11034 NT_STATUS_OK
Close 11035 NT_STATUS_OK
Close 11036 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11037 8192 4096 4096 NT_STATUS_OK
ReadX 11037 12288 4096 4096 NT_STATUS_OK
WriteX 11041 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11041 258 NT_STATUS_OK
ReadX 11037 16384 4096 4096 NT_STATUS_OK
ReadX 11037 20480 4096 4096 NT_STATUS_OK
WriteX 11041 0 15360 15360 NT_STATUS_OK
Close 11041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11042 NT_STATUS_OK
ReadX 11042 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11042 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11042 1004 NT_STATUS_OK
WriteX 11042 0 4096 4096 NT_STATUS_OK
Close 11042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11043 NT_STATUS_OK
Close 11043 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11045 NT_STATUS_OK
ReadX 11045 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11046 NT_STATUS_OK
Close 11046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11045 4096 4096 4096 NT_STATUS_OK
ReadX 11045 8192 4096 4096 NT_STATUS_OK
ReadX 11045 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11048 NT_STATUS_OK
ReadX 11048 0 4096 4096 NT_STATUS_OK
ReadX 11048 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11049 NT_STATUS_OK
ReadX 11049 0 4096 4096 NT_STATUS_OK
ReadX 11049 4096 4096 4096 NT_STATUS_OK
ReadX 11049 8192 4096 4096 NT_STATUS_OK
Close 11048 NT_STATUS_OK
Close 11049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11050 NT_STATUS_OK
WriteX 11050 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11050 258 NT_STATUS_OK
WriteX 11050 0 15360 15360 NT_STATUS_OK
Close 11050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11051 NT_STATUS_OK
ReadX 11051 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11051 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11051 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11052 NT_STATUS_OK
Close 11052 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11054 NT_STATUS_OK
ReadX 11054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11055 NT_STATUS_OK
SET_FILE_INFORMATION 11055 1004 NT_STATUS_OK
Close 11055 NT_STATUS_OK
WriteX 11051 0 4096 4096 NT_STATUS_OK
Close 11051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11056 NT_STATUS_OK
Close 11056 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11058 NT_STATUS_OK
ReadX 11058 0 4096 4096 NT_STATUS_OK
ReadX 11058 4096 4096 4096 NT_STATUS_OK
ReadX 11058 8192 4096 4096 NT_STATUS_OK
ReadX 11058 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11058 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11058 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11059 NT_STATUS_OK
ReadX 11059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11060 NT_STATUS_OK
WriteX 11060 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11060 258 NT_STATUS_OK
WriteX 11060 0 53 53 NT_STATUS_OK
Close 11060 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11061 NT_STATUS_OK
Close 11061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11059 4096 4096 4096 NT_STATUS_OK
ReadX 11059 8192 4096 4096 NT_STATUS_OK
ReadX 11059 12288 4096 4096 NT_STATUS_OK
WriteX 11063 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11063 258 NT_STATUS_OK
WriteX 11063 0 12006 12006 NT_STATUS_OK
Close 11063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11064 NT_STATUS_OK
ReadX 11064 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11064 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11064 1004 NT_STATUS_OK
WriteX 11064 0 4096 4096 NT_STATUS_OK
Close 11064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11065 NT_STATUS_OK
Close 11065 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11067 NT_STATUS_OK
ReadX 11067 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11068 NT_STATUS_OK
Close 11068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11067 4096 4096 4096 NT_STATUS_OK
ReadX 11067 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11070 NT_STATUS_OK
WriteX 11070 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11070 258 NT_STATUS_OK
WriteX 11070 0 11991 11991 NT_STATUS_OK
Close 11070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11071 NT_STATUS_OK
ReadX 11071 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11071 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11071 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11072 NT_STATUS_OK
Close 11072 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11074 NT_STATUS_OK
ReadX 11074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11075 NT_STATUS_OK
SET_FILE_INFORMATION 11075 1004 NT_STATUS_OK
Close 11075 NT_STATUS_OK
WriteX 11071 0 4096 4096 NT_STATUS_OK
Close 11071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11076 NT_STATUS_OK
Close 11076 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11078 NT_STATUS_OK
ReadX 11078 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11079 NT_STATUS_OK
Close 11079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11078 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11078 1004 NT_STATUS_OK
ReadX 11078 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11078 1004 NT_STATUS_OK
WriteX 11078 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11078 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11078 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11078 1004 NT_STATUS_OK
Close 11054 NT_STATUS_OK
WriteX 11058 0 19054 19054 NT_STATUS_OK
WriteX 11078 0 12288 12288 NT_STATUS_OK
Close 11074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11081 NT_STATUS_OK
Close 11081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11058 NT_STATUS_OK
Close 11078 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11083 NT_STATUS_OK
Close 11083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11085 NT_STATUS_OK
ReadX 11085 0 61440 61440 NT_STATUS_OK
ReadX 11085 61440 4096 4096 NT_STATUS_OK
ReadX 11085 65536 61440 61440 NT_STATUS_OK
ReadX 11085 126976 4096 4096 NT_STATUS_OK
ReadX 11085 131072 61440 61440 NT_STATUS_OK
ReadX 11085 192512 4096 4096 NT_STATUS_OK
ReadX 11085 196608 61440 61440 NT_STATUS_OK
ReadX 11085 258048 4096 4096 NT_STATUS_OK
ReadX 11085 262144 61440 61440 NT_STATUS_OK
ReadX 11085 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11086 NT_STATUS_OK
ReadX 11086 0 61440 61440 NT_STATUS_OK
ReadX 11086 61440 4096 4096 NT_STATUS_OK
ReadX 11086 65536 61440 61440 NT_STATUS_OK
ReadX 11086 126976 4096 4096 NT_STATUS_OK
ReadX 11086 131072 61440 61440 NT_STATUS_OK
ReadX 11086 192512 4096 4096 NT_STATUS_OK
ReadX 11086 196608 61440 61440 NT_STATUS_OK
ReadX 11086 258048 4096 4096 NT_STATUS_OK
ReadX 11086 262144 61440 61440 NT_STATUS_OK
ReadX 11086 323584 4096 4096 NT_STATUS_OK
ReadX 11086 327680 61440 61440 NT_STATUS_OK
ReadX 11086 389120 4096 4096 NT_STATUS_OK
ReadX 11086 393216 61440 61440 NT_STATUS_OK
ReadX 11086 454656 4096 4096 NT_STATUS_OK
ReadX 11086 458752 61440 61440 NT_STATUS_OK
ReadX 11086 520192 4096 4096 NT_STATUS_OK
ReadX 11086 524288 61440 61440 NT_STATUS_OK
ReadX 11086 585728 4096 4096 NT_STATUS_OK
ReadX 11086 589824 61440 61440 NT_STATUS_OK
ReadX 11086 651264 4096 4096 NT_STATUS_OK
ReadX 11086 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11087 NT_STATUS_OK
ReadX 11087 0 61440 61440 NT_STATUS_OK
ReadX 11087 61440 4096 4096 NT_STATUS_OK
ReadX 11087 65536 61440 61440 NT_STATUS_OK
ReadX 11087 126976 4096 4096 NT_STATUS_OK
ReadX 11087 131072 61440 61440 NT_STATUS_OK
ReadX 11087 192512 4096 4096 NT_STATUS_OK
ReadX 11087 196608 61440 61440 NT_STATUS_OK
ReadX 11087 258048 4096 4096 NT_STATUS_OK
ReadX 11087 262144 61440 61440 NT_STATUS_OK
ReadX 11087 323584 4096 4096 NT_STATUS_OK
ReadX 11087 327680 61440 61440 NT_STATUS_OK
ReadX 11087 389120 4096 4096 NT_STATUS_OK
ReadX 11087 393216 61440 61440 NT_STATUS_OK
ReadX 11087 454656 4096 4096 NT_STATUS_OK
ReadX 11087 458752 61440 61440 NT_STATUS_OK
ReadX 11087 520192 4096 4096 NT_STATUS_OK
ReadX 11087 524288 61440 61440 NT_STATUS_OK
ReadX 11087 585728 4096 4096 NT_STATUS_OK
ReadX 11087 589824 61440 61440 NT_STATUS_OK
ReadX 11087 651264 4096 4096 NT_STATUS_OK
ReadX 11087 655360 61440 61440 NT_STATUS_OK
ReadX 11087 716800 4096 4096 NT_STATUS_OK
ReadX 11087 720896 61440 61440 NT_STATUS_OK
ReadX 11087 782336 4096 4096 NT_STATUS_OK
ReadX 11087 786432 61440 61440 NT_STATUS_OK
ReadX 11087 847872 4096 4096 NT_STATUS_OK
ReadX 11087 851968 61440 61440 NT_STATUS_OK
ReadX 11087 913408 4096 4096 NT_STATUS_OK
ReadX 11087 917504 61440 61440 NT_STATUS_OK
ReadX 11087 978944 4096 4096 NT_STATUS_OK
ReadX 11087 983040 61440 61440 NT_STATUS_OK
ReadX 11087 1044480 4096 4096 NT_STATUS_OK
ReadX 11087 1048576 61440 61440 NT_STATUS_OK
ReadX 11087 1110016 4096 4096 NT_STATUS_OK
ReadX 11087 1114112 61440 61440 NT_STATUS_OK
ReadX 11087 1175552 4096 4096 NT_STATUS_OK
ReadX 11087 1179648 61440 61440 NT_STATUS_OK
ReadX 11087 1241088 4096 4096 NT_STATUS_OK
ReadX 11087 1245184 61440 61440 NT_STATUS_OK
ReadX 11087 1306624 4096 4096 NT_STATUS_OK
ReadX 11087 1310720 61440 61440 NT_STATUS_OK
ReadX 11087 1372160 4096 4096 NT_STATUS_OK
ReadX 11087 1376256 61440 61440 NT_STATUS_OK
ReadX 11087 1437696 4096 4096 NT_STATUS_OK
ReadX 11087 1441792 61440 61440 NT_STATUS_OK
ReadX 11087 1503232 4096 4096 NT_STATUS_OK
ReadX 11087 1507328 61440 61440 NT_STATUS_OK
ReadX 11087 1568768 4096 4096 NT_STATUS_OK
ReadX 11087 1572864 61440 61440 NT_STATUS_OK
ReadX 11087 1634304 4096 4096 NT_STATUS_OK
ReadX 11087 1638400 61440 61440 NT_STATUS_OK
ReadX 11087 1699840 4096 4096 NT_STATUS_OK
ReadX 11087 1703936 61440 61440 NT_STATUS_OK
ReadX 11087 1765376 4096 4096 NT_STATUS_OK
ReadX 11087 1769472 61440 61440 NT_STATUS_OK
ReadX 11087 1830912 4096 4096 NT_STATUS_OK
ReadX 11087 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11088 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11089 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11090 NT_STATUS_OK
ReadX 11090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11091 NT_STATUS_OK
ReadX 11091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11092 NT_STATUS_OK
ReadX 11092 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11093 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11094 NT_STATUS_OK
QUERY_FILE_INFORMATION 11094 1004 NT_STATUS_OK
WriteX 11094 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11094 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11095 NT_STATUS_OK
Close 11095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11096 NT_STATUS_OK
WriteX 11096 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11096 258 NT_STATUS_OK
WriteX 11096 0 491 491 NT_STATUS_OK
Close 11096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11097 NT_STATUS_OK
ReadX 11097 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11094 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11099 NT_STATUS_OK
Close 11099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11100 NT_STATUS_OK
WriteX 11100 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11100 258 NT_STATUS_OK
WriteX 11100 0 543 543 NT_STATUS_OK
Close 11100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11101 NT_STATUS_OK
ReadX 11101 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11085 NT_STATUS_OK
Close 11086 NT_STATUS_OK
Close 11087 NT_STATUS_OK
Close 11101 NT_STATUS_OK
Close 11089 NT_STATUS_OK
Close 11090 NT_STATUS_OK
Close 11091 NT_STATUS_OK
Close 11092 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11104 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11104 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11105 NT_STATUS_OK
ReadX 11105 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11106 NT_STATUS_OK
ReadX 11106 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11107 NT_STATUS_OK
ReadX 11107 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11108 NT_STATUS_OK
ReadX 11108 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11109 NT_STATUS_OK
ReadX 11109 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11113 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11113 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11114 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 1004 NT_STATUS_OK
WriteX 11114 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 258 NT_STATUS_OK
WriteX 11114 0 2048 2048 NT_STATUS_OK
Close 11114 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11115 NT_STATUS_OK
ReadX 11115 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11115 0 4096 4096 NT_STATUS_OK
Flush 11115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11115 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11119 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11120 NT_STATUS_OK
WriteX 11120 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11120 258 NT_STATUS_OK
WriteX 11120 0 2048 2048 NT_STATUS_OK
Close 11120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11121 NT_STATUS_OK
ReadX 11121 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11125 NT_STATUS_OK
Close 11125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11126 NT_STATUS_OK
WriteX 11126 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11126 258 NT_STATUS_OK
WriteX 11126 0 2048 2048 NT_STATUS_OK
Close 11126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11127 NT_STATUS_OK
ReadX 11127 0 2048 2048 NT_STATUS_OK
ReadX 11105 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11109 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11121 0 4096 4096 NT_STATUS_OK
WriteX 11105 0 8192 8192 NT_STATUS_OK
WriteX 11106 0 4096 4096 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
ReadX 11121 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11105 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11130 NT_STATUS_OK
ReadX 11130 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11131 NT_STATUS_OK
QUERY_FILE_INFORMATION 11131 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11130 NT_STATUS_OK
Close 11106 NT_STATUS_OK
Close 11107 NT_STATUS_OK
Close 11108 NT_STATUS_OK
Close 11121 NT_STATUS_OK
Close 11105 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11133 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11134 NT_STATUS_OK
ReadX 11134 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11135 NT_STATUS_OK
ReadX 11135 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11136 NT_STATUS_OK
ReadX 11136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11137 NT_STATUS_OK
ReadX 11137 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11138 NT_STATUS_OK
ReadX 11138 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11139 NT_STATUS_OK
ReadX 11139 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11140 NT_STATUS_OK
ReadX 11140 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11141 NT_STATUS_OK
ReadX 11141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11142 NT_STATUS_OK
ReadX 11142 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11143 NT_STATUS_OK
ReadX 11143 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11144 NT_STATUS_OK
ReadX 11144 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11145 NT_STATUS_OK
ReadX 11145 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11146 NT_STATUS_OK
ReadX 11146 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11150 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11151 NT_STATUS_OK
QUERY_FILE_INFORMATION 11151 1004 NT_STATUS_OK
WriteX 11151 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11151 258 NT_STATUS_OK
WriteX 11151 0 2048 2048 NT_STATUS_OK
Close 11151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11152 NT_STATUS_OK
ReadX 11152 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11153 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11153 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11154 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11154 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11158 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11159 NT_STATUS_OK
QUERY_FILE_INFORMATION 11159 1004 NT_STATUS_OK
WriteX 11159 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11159 258 NT_STATUS_OK
WriteX 11159 0 2048 2048 NT_STATUS_OK
Close 11159 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11160 NT_STATUS_OK
ReadX 11160 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11152 0 4096 4096 NT_STATUS_OK
Flush 11152 NT_STATUS_OK
WriteX 11160 0 4096 4096 NT_STATUS_OK
Flush 11160 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11152 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11160 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11154 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11161 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11162 NT_STATUS_OK
WriteX 11162 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11162 258 NT_STATUS_OK
WriteX 11162 0 4096 4096 NT_STATUS_OK
Close 11162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11163 NT_STATUS_OK
ReadX 11163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11164 NT_STATUS_OK
Close 11164 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11165 NT_STATUS_OK
WriteX 11165 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11165 258 NT_STATUS_OK
WriteX 11165 0 4096 4096 NT_STATUS_OK
Close 11165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11166 NT_STATUS_OK
ReadX 11166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11166 0 4096 4096 NT_STATUS_OK
Close 11163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11146 NT_STATUS_OK
Close 11140 NT_STATUS_OK
Close 11154 NT_STATUS_OK
Close 11143 NT_STATUS_OK
Close 11144 NT_STATUS_OK
Close 11145 NT_STATUS_OK
Close 11141 NT_STATUS_OK
Close 11134 NT_STATUS_OK
Close 11135 NT_STATUS_OK
Close 11138 NT_STATUS_OK
Close 11139 NT_STATUS_OK
Close 11136 NT_STATUS_OK
Close 11137 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11169 NT_STATUS_OK
Close 11169 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11171 NT_STATUS_OK
ReadX 11171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11172 NT_STATUS_OK
Close 11172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11173 NT_STATUS_OK
WriteX 11173 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11173 258 NT_STATUS_OK
WriteX 11173 0 2048 2048 NT_STATUS_OK
Close 11173 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11174 NT_STATUS_OK
ReadX 11174 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11174 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11175 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11176 NT_STATUS_OK
ReadX 11176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11177 NT_STATUS_OK
ReadX 11177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11178 NT_STATUS_OK
ReadX 11178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11179 NT_STATUS_OK
ReadX 11179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11180 NT_STATUS_OK
ReadX 11180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11181 NT_STATUS_OK
ReadX 11181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11182 NT_STATUS_OK
ReadX 11182 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11183 NT_STATUS_OK
ReadX 11183 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11184 NT_STATUS_OK
ReadX 11184 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11185 NT_STATUS_OK
ReadX 11185 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11186 NT_STATUS_OK
ReadX 11186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11187 NT_STATUS_OK
ReadX 11187 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11152 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11188 NT_STATUS_OK
QUERY_FILE_INFORMATION 11188 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11186 NT_STATUS_OK
Close 11181 NT_STATUS_OK
Close 11182 NT_STATUS_OK
Close 11183 NT_STATUS_OK
Close 11184 NT_STATUS_OK
Close 11185 NT_STATUS_OK
Close 11187 NT_STATUS_OK
Close 11175 NT_STATUS_OK
Close 11176 NT_STATUS_OK
Close 11179 NT_STATUS_OK
Close 11180 NT_STATUS_OK
Close 11177 NT_STATUS_OK
Close 11178 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11190 NT_STATUS_OK
QUERY_FILE_INFORMATION 11190 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11193 NT_STATUS_OK
ReadX 11193 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11194 NT_STATUS_OK
ReadX 11194 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11195 NT_STATUS_OK
ReadX 11195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11196 NT_STATUS_OK
ReadX 11196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11197 NT_STATUS_OK
ReadX 11197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11198 NT_STATUS_OK
ReadX 11198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11199 NT_STATUS_OK
ReadX 11199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11200 NT_STATUS_OK
ReadX 11200 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11201 NT_STATUS_OK
ReadX 11201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11202 NT_STATUS_OK
ReadX 11202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11203 NT_STATUS_OK
ReadX 11203 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11204 NT_STATUS_OK
ReadX 11204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11205 NT_STATUS_OK
ReadX 11205 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11209 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11210 NT_STATUS_OK
QUERY_FILE_INFORMATION 11210 1004 NT_STATUS_OK
WriteX 11210 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11210 258 NT_STATUS_OK
WriteX 11210 0 2048 2048 NT_STATUS_OK
Close 11210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11211 NT_STATUS_OK
ReadX 11211 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11212 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11214 NT_STATUS_OK
ReadX 11214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11215 NT_STATUS_OK
ReadX 11215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11216 NT_STATUS_OK
ReadX 11216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11217 NT_STATUS_OK
ReadX 11217 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11221 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11222 NT_STATUS_OK
QUERY_FILE_INFORMATION 11222 1004 NT_STATUS_OK
WriteX 11222 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11222 258 NT_STATUS_OK
WriteX 11222 0 2048 2048 NT_STATUS_OK
Close 11222 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11223 NT_STATUS_OK
ReadX 11223 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11225 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11225 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11229 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11230 NT_STATUS_OK
QUERY_FILE_INFORMATION 11230 1004 NT_STATUS_OK
WriteX 11230 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11230 258 NT_STATUS_OK
WriteX 11230 0 2048 2048 NT_STATUS_OK
Close 11230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11231 NT_STATUS_OK
ReadX 11231 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11211 0 4096 4096 NT_STATUS_OK
Flush 11211 NT_STATUS_OK
WriteX 11223 0 4096 4096 NT_STATUS_OK
Flush 11223 NT_STATUS_OK
WriteX 11231 0 4096 4096 NT_STATUS_OK
Flush 11231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11211 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11223 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11231 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11213 4096 16384 16384 NT_STATUS_OK
ReadX 11193 4096 16384 16384 NT_STATUS_OK
ReadX 11225 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11232 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11233 NT_STATUS_OK
ReadX 11233 0 2048 2048 NT_STATUS_OK
WriteX 11233 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11234 NT_STATUS_OK
QUERY_FILE_INFORMATION 11234 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11233 NT_STATUS_OK
Close 11217 NT_STATUS_OK
Close 11205 NT_STATUS_OK
Close 11197 NT_STATUS_OK
Close 11213 NT_STATUS_OK
Close 11214 NT_STATUS_OK
Close 11215 NT_STATUS_OK
Close 11216 NT_STATUS_OK
Close 11204 NT_STATUS_OK
Close 11225 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Close 11202 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Close 11200 NT_STATUS_OK
Close 11201 NT_STATUS_OK
Close 11193 NT_STATUS_OK
Close 11194 NT_STATUS_OK
Close 11195 NT_STATUS_OK
Close 11196 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11236 NT_STATUS_OK
QUERY_FILE_INFORMATION 11236 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11238 NT_STATUS_OK
QUERY_FILE_INFORMATION 11238 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11240 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11241 NT_STATUS_OK
ReadX 11241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11242 NT_STATUS_OK
ReadX 11242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11243 NT_STATUS_OK
ReadX 11243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11245 NT_STATUS_OK
ReadX 11245 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11241 4096 16384 16384 NT_STATUS_OK
WriteX 11241 0 4096 4096 NT_STATUS_OK
WriteX 11242 0 4096 4096 NT_STATUS_OK
WriteX 11243 0 4096 4096 NT_STATUS_OK
WriteX 11244 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11247 NT_STATUS_OK
ReadX 11247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11248 NT_STATUS_OK
ReadX 11248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11249 NT_STATUS_OK
ReadX 11249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11250 NT_STATUS_OK
ReadX 11250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11251 NT_STATUS_OK
ReadX 11251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11252 NT_STATUS_OK
ReadX 11252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11253 NT_STATUS_OK
ReadX 11253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11254 NT_STATUS_OK
ReadX 11254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11255 NT_STATUS_OK
ReadX 11255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11256 NT_STATUS_OK
ReadX 11256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11257 NT_STATUS_OK
ReadX 11257 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11258 NT_STATUS_OK
ReadX 11258 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11259 NT_STATUS_OK
ReadX 11259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11260 NT_STATUS_OK
ReadX 11260 0 8192 8192 NT_STATUS_OK
ReadX 11247 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11261 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11261 0 4096 4096 NT_STATUS_OK
ReadX 11261 4096 4096 4096 NT_STATUS_OK
ReadX 11261 8192 4096 4096 NT_STATUS_OK
WriteX 11247 0 4096 4096 NT_STATUS_OK
WriteX 11248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11262 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11262 0 4096 4096 NT_STATUS_OK
ReadX 11262 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11241 0 4096 4096 NT_STATUS_OK
WriteX 11242 0 4096 4096 NT_STATUS_OK
WriteX 11243 0 4096 4096 NT_STATUS_OK
WriteX 11244 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11266 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11267 NT_STATUS_OK
QUERY_FILE_INFORMATION 11267 1004 NT_STATUS_OK
WriteX 11267 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11267 258 NT_STATUS_OK
WriteX 11267 0 2048 2048 NT_STATUS_OK
Close 11267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11268 NT_STATUS_OK
ReadX 11268 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11268 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11268 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11269 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11270 NT_STATUS_OK
ReadX 11270 0 4096 4096 NT_STATUS_OK
ReadX 11270 4096 4096 4096 NT_STATUS_OK
WriteX 11270 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11268 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11271 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11271 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11272 NT_STATUS_OK
ReadX 11272 0 4096 4096 NT_STATUS_OK
ReadX 11272 4096 4096 4096 NT_STATUS_OK
WriteX 11272 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11273 NT_STATUS_OK
QUERY_FILE_INFORMATION 11273 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11260 NT_STATUS_OK
Close 11245 NT_STATUS_OK
Close 11241 NT_STATUS_OK
Close 11242 NT_STATUS_OK
Close 11243 NT_STATUS_OK
Close 11244 NT_STATUS_OK
Close 11253 NT_STATUS_OK
Close 11258 NT_STATUS_OK
Close 11254 NT_STATUS_OK
Close 11255 NT_STATUS_OK
Close 11256 NT_STATUS_OK
Close 11257 NT_STATUS_OK
Close 11259 NT_STATUS_OK
Close 11247 NT_STATUS_OK
Close 11248 NT_STATUS_OK
Close 11251 NT_STATUS_OK
Close 11252 NT_STATUS_OK
Close 11249 NT_STATUS_OK
Close 11250 NT_STATUS_OK
Close 11272 NT_STATUS_OK
Close 11261 NT_STATUS_OK
Close 11262 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11275 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11275 0 4096 4096 NT_STATUS_OK
ReadX 11275 4096 4096 4096 NT_STATUS_OK
ReadX 11275 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11276 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11277 NT_STATUS_OK
ReadX 11277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11278 NT_STATUS_OK
ReadX 11278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11279 NT_STATUS_OK
ReadX 11279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11280 NT_STATUS_OK
ReadX 11280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11281 NT_STATUS_OK
ReadX 11281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11282 NT_STATUS_OK
ReadX 11282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11283 NT_STATUS_OK
ReadX 11283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11284 NT_STATUS_OK
ReadX 11284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11285 NT_STATUS_OK
ReadX 11285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11286 NT_STATUS_OK
ReadX 11286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11287 NT_STATUS_OK
ReadX 11287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11288 NT_STATUS_OK
ReadX 11288 0 4096 4096 NT_STATUS_OK
ReadX 11276 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11292 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11293 NT_STATUS_OK
QUERY_FILE_INFORMATION 11293 1004 NT_STATUS_OK
WriteX 11293 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11293 258 NT_STATUS_OK
WriteX 11293 0 2048 2048 NT_STATUS_OK
Close 11293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11294 NT_STATUS_OK
ReadX 11294 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11298 NT_STATUS_OK
Close 11298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11299 NT_STATUS_OK
QUERY_FILE_INFORMATION 11299 1004 NT_STATUS_OK
WriteX 11299 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11299 258 NT_STATUS_OK
WriteX 11299 0 2048 2048 NT_STATUS_OK
Close 11299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11300 NT_STATUS_OK
ReadX 11300 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11300 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11283 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11301 NT_STATUS_OK
QUERY_FILE_INFORMATION 11301 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11287 NT_STATUS_OK
Close 11282 NT_STATUS_OK
Close 11288 NT_STATUS_OK
Close 11276 NT_STATUS_OK
Close 11277 NT_STATUS_OK
Close 11280 NT_STATUS_OK
Close 11281 NT_STATUS_OK
Close 11278 NT_STATUS_OK
Close 11279 NT_STATUS_OK
Close 11283 NT_STATUS_OK
Close 11284 NT_STATUS_OK
Close 11285 NT_STATUS_OK
Close 11286 NT_STATUS_OK
Close 11275 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11303 NT_STATUS_OK
QUERY_FILE_INFORMATION 11303 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11305 NT_STATUS_OK
ReadX 11305 61440 4096 4096 NT_STATUS_OK
ReadX 11305 126976 4096 4096 NT_STATUS_OK
WriteX 11305 0 65536 65536 NT_STATUS_OK
WriteX 11305 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11306 NT_STATUS_OK
ReadX 11306 61440 4096 4096 NT_STATUS_OK
ReadX 11306 126976 4096 4096 NT_STATUS_OK
ReadX 11306 192512 4096 4096 NT_STATUS_OK
ReadX 11306 258048 4096 4096 NT_STATUS_OK
WriteX 11306 0 65536 65536 NT_STATUS_OK
WriteX 11306 65536 65536 65536 NT_STATUS_OK
WriteX 11306 131072 65536 65536 NT_STATUS_OK
WriteX 11306 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11307 NT_STATUS_OK
ReadX 11307 61440 4096 4096 NT_STATUS_OK
ReadX 11307 126976 4096 4096 NT_STATUS_OK
ReadX 11307 192512 4096 4096 NT_STATUS_OK
ReadX 11307 258048 4096 4096 NT_STATUS_OK
ReadX 11307 323584 4096 4096 NT_STATUS_OK
ReadX 11307 389120 4096 4096 NT_STATUS_OK
ReadX 11307 454656 4096 4096 NT_STATUS_OK
ReadX 11307 520192 4096 4096 NT_STATUS_OK
WriteX 11307 0 65536 65536 NT_STATUS_OK
WriteX 11307 65536 65536 65536 NT_STATUS_OK
WriteX 11307 131072 65536 65536 NT_STATUS_OK
WriteX 11307 196608 65536 65536 NT_STATUS_OK
WriteX 11307 262144 65536 65536 NT_STATUS_OK
WriteX 11307 327680 65536 65536 NT_STATUS_OK
WriteX 11307 393216 65536 65536 NT_STATUS_OK
WriteX 11307 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11308 NT_STATUS_OK
ReadX 11308 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11308 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11308 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11308 8192 4096 4096 NT_STATUS_OK
ReadX 11308 12288 4096 4096 NT_STATUS_OK
ReadX 11308 16384 4096 4096 NT_STATUS_OK
ReadX 11308 20480 4096 4096 NT_STATUS_OK
ReadX 11308 24576 4096 4096 NT_STATUS_OK
ReadX 11308 28672 4096 4096 NT_STATUS_OK
ReadX 11308 32768 4096 4096 NT_STATUS_OK
ReadX 11308 36864 4096 4096 NT_STATUS_OK
ReadX 11308 40960 4096 4096 NT_STATUS_OK
ReadX 11308 45056 4096 4096 NT_STATUS_OK
ReadX 11308 49152 4096 4096 NT_STATUS_OK
ReadX 11308 53248 4096 4096 NT_STATUS_OK
ReadX 11308 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11308 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11309 NT_STATUS_OK
Close 11309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11305 NT_STATUS_OK
Close 11306 NT_STATUS_OK
Close 11307 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11311 NT_STATUS_OK
WriteX 11311 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11311 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11311 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11311 1004 NT_STATUS_OK
WriteX 11311 0 57088 57088 NT_STATUS_OK
WriteX 11311 0 4096 4096 NT_STATUS_OK
Flush 11311 NT_STATUS_OK
Close 11308 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11312 NT_STATUS_OK
SET_FILE_INFORMATION 11312 1004 NT_STATUS_OK
Close 11312 NT_STATUS_OK
SET_FILE_INFORMATION 11311 1004 NT_STATUS_OK
WriteX 11311 0 4096 4096 NT_STATUS_OK
Close 11311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11313 NT_STATUS_OK
Close 11313 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11315 NT_STATUS_OK
ReadX 11315 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11315 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11316 NT_STATUS_OK
WriteX 11316 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11316 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11316 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11316 1004 NT_STATUS_OK
WriteX 11316 0 51456 51456 NT_STATUS_OK
WriteX 11316 0 4096 4096 NT_STATUS_OK
Flush 11316 NT_STATUS_OK
SET_FILE_INFORMATION 11316 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11316 1004 NT_STATUS_OK
WriteX 11316 0 4096 4096 NT_STATUS_OK
Close 11316 NT_STATUS_OK
Close 11315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11318 NT_STATUS_OK
Close 11318 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11320 NT_STATUS_OK
ReadX 11320 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11320 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11322 NT_STATUS_OK
Close 11322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11325 NT_STATUS_OK
WriteX 11325 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11325 258 NT_STATUS_OK
WriteX 11325 0 53077 53077 NT_STATUS_OK
Close 11325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11326 NT_STATUS_OK
WriteX 11326 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11326 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11326 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11326 1004 NT_STATUS_OK
WriteX 11326 0 65536 65536 NT_STATUS_OK
WriteX 11326 65536 1856 1856 NT_STATUS_OK
WriteX 11326 0 4096 4096 NT_STATUS_OK
Flush 11326 NT_STATUS_OK
SET_FILE_INFORMATION 11326 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11326 1004 NT_STATUS_OK
WriteX 11326 0 4096 4096 NT_STATUS_OK
Close 11326 NT_STATUS_OK
Close 11320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11328 NT_STATUS_OK
Close 11328 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11330 NT_STATUS_OK
ReadX 11330 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11332 NT_STATUS_OK
Close 11332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11335 NT_STATUS_OK
WriteX 11335 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11335 258 NT_STATUS_OK
WriteX 11335 0 7983 7983 NT_STATUS_OK
Close 11335 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11337 NT_STATUS_OK
Close 11337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11340 NT_STATUS_OK
WriteX 11340 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11340 258 NT_STATUS_OK
WriteX 11340 0 65536 65536 NT_STATUS_OK
WriteX 11340 65536 65536 65536 NT_STATUS_OK
WriteX 11340 131072 65536 65536 NT_STATUS_OK
WriteX 11340 196608 65536 65536 NT_STATUS_OK
WriteX 11340 262144 65536 65536 NT_STATUS_OK
WriteX 11340 327680 65536 65536 NT_STATUS_OK
WriteX 11340 393216 65536 65536 NT_STATUS_OK
WriteX 11340 458752 46731 46731 NT_STATUS_OK
Close 11340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11341 NT_STATUS_OK
WriteX 11341 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11341 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11330 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11341 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11341 1004 NT_STATUS_OK
WriteX 11341 0 65536 65536 NT_STATUS_OK
WriteX 11341 65536 22848 22848 NT_STATUS_OK
WriteX 11341 0 4096 4096 NT_STATUS_OK
Flush 11341 NT_STATUS_OK
SET_FILE_INFORMATION 11341 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11341 1004 NT_STATUS_OK
WriteX 11341 0 4096 4096 NT_STATUS_OK
Close 11341 NT_STATUS_OK
Close 11330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11343 NT_STATUS_OK
Close 11343 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11345 NT_STATUS_OK
ReadX 11345 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11345 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11346 NT_STATUS_OK
ReadX 11346 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11346 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11346 1004 NT_STATUS_OK
ReadX 11346 8192 4096 4096 NT_STATUS_OK
ReadX 11346 12288 4096 4096 NT_STATUS_OK
ReadX 11346 16384 4096 4096 NT_STATUS_OK
ReadX 11346 20480 4096 4096 NT_STATUS_OK
ReadX 11346 24576 4096 4096 NT_STATUS_OK
ReadX 11346 28672 4096 4096 NT_STATUS_OK
ReadX 11346 32768 4096 4096 NT_STATUS_OK
ReadX 11346 36864 4096 4096 NT_STATUS_OK
ReadX 11346 40960 4096 4096 NT_STATUS_OK
ReadX 11346 45056 4096 4096 NT_STATUS_OK
ReadX 11346 49152 4096 4096 NT_STATUS_OK
ReadX 11346 53248 4096 4096 NT_STATUS_OK
ReadX 11346 57344 4096 4096 NT_STATUS_OK
ReadX 11346 61440 4096 4096 NT_STATUS_OK
ReadX 11346 65536 4096 4096 NT_STATUS_OK
ReadX 11346 69632 4096 4096 NT_STATUS_OK
ReadX 11346 73728 4096 4096 NT_STATUS_OK
ReadX 11346 77824 4096 4096 NT_STATUS_OK
ReadX 11346 81920 4096 4096 NT_STATUS_OK
ReadX 11346 86016 4096 4096 NT_STATUS_OK
ReadX 11346 90112 4096 4096 NT_STATUS_OK
ReadX 11346 94208 4096 4096 NT_STATUS_OK
ReadX 11346 98304 4096 4096 NT_STATUS_OK
ReadX 11346 102400 4096 4096 NT_STATUS_OK
ReadX 11346 106496 4096 4096 NT_STATUS_OK
ReadX 11346 110592 4096 4096 NT_STATUS_OK
ReadX 11346 114688 4096 4096 NT_STATUS_OK
ReadX 11346 118784 4096 4096 NT_STATUS_OK
ReadX 11346 122880 4096 4096 NT_STATUS_OK
ReadX 11346 126976 4096 4096 NT_STATUS_OK
ReadX 11346 131072 4096 4096 NT_STATUS_OK
ReadX 11346 135168 4096 4096 NT_STATUS_OK
ReadX 11346 139264 4096 4096 NT_STATUS_OK
ReadX 11346 143360 4096 4096 NT_STATUS_OK
ReadX 11346 147456 4096 4096 NT_STATUS_OK
ReadX 11346 151552 4096 4096 NT_STATUS_OK
ReadX 11346 155648 4096 4096 NT_STATUS_OK
ReadX 11346 159744 4096 4096 NT_STATUS_OK
ReadX 11346 163840 4096 4096 NT_STATUS_OK
ReadX 11346 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11346 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11347 NT_STATUS_OK
Close 11347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11345 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11349 NT_STATUS_OK
WriteX 11349 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11349 258 NT_STATUS_OK
Close 11346 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11350 NT_STATUS_OK
SET_FILE_INFORMATION 11350 1004 NT_STATUS_OK
Close 11350 NT_STATUS_OK
WriteX 11349 0 42388 42388 NT_STATUS_OK
Close 11349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11351 NT_STATUS_OK
Close 11351 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11353 NT_STATUS_OK
ReadX 11353 0 4096 4096 NT_STATUS_OK
ReadX 11353 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11354 NT_STATUS_OK
WriteX 11354 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11354 258 NT_STATUS_OK
SET_FILE_INFORMATION 11354 1004 NT_STATUS_OK
WriteX 11354 0 42652 42652 NT_STATUS_OK
Close 11354 NT_STATUS_OK
Close 11353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11356 NT_STATUS_OK
Close 11356 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11358 NT_STATUS_OK
ReadX 11358 0 4096 4096 NT_STATUS_OK
ReadX 11358 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11360 NT_STATUS_OK
Close 11360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11363 NT_STATUS_OK
WriteX 11363 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11363 258 NT_STATUS_OK
WriteX 11363 0 65536 65536 NT_STATUS_OK
WriteX 11363 65536 49 49 NT_STATUS_OK
Close 11363 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11364 NT_STATUS_OK
ReadX 11364 0 61440 61440 NT_STATUS_OK
ReadX 11364 61440 4096 4096 NT_STATUS_OK
ReadX 11364 65536 61440 61440 NT_STATUS_OK
ReadX 11364 126976 4096 4096 NT_STATUS_OK
ReadX 11364 131072 61440 61440 NT_STATUS_OK
ReadX 11364 192512 4096 4096 NT_STATUS_OK
ReadX 11364 196608 61440 61440 NT_STATUS_OK
ReadX 11364 258048 4096 4096 NT_STATUS_OK
ReadX 11364 262144 61440 61440 NT_STATUS_OK
ReadX 11364 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11365 NT_STATUS_OK
ReadX 11365 0 61440 61440 NT_STATUS_OK
ReadX 11365 61440 4096 4096 NT_STATUS_OK
ReadX 11365 65536 61440 61440 NT_STATUS_OK
ReadX 11365 126976 4096 4096 NT_STATUS_OK
ReadX 11365 131072 61440 61440 NT_STATUS_OK
ReadX 11365 192512 4096 4096 NT_STATUS_OK
ReadX 11365 196608 61440 61440 NT_STATUS_OK
ReadX 11365 258048 4096 4096 NT_STATUS_OK
ReadX 11365 262144 61440 61440 NT_STATUS_OK
ReadX 11365 323584 4096 4096 NT_STATUS_OK
ReadX 11365 327680 61440 61440 NT_STATUS_OK
ReadX 11365 389120 4096 4096 NT_STATUS_OK
ReadX 11365 393216 61440 61440 NT_STATUS_OK
ReadX 11365 454656 4096 4096 NT_STATUS_OK
ReadX 11365 458752 61440 61440 NT_STATUS_OK
ReadX 11365 520192 4096 4096 NT_STATUS_OK
ReadX 11365 524288 61440 61440 NT_STATUS_OK
ReadX 11365 585728 4096 4096 NT_STATUS_OK
ReadX 11365 589824 61440 61440 NT_STATUS_OK
ReadX 11365 651264 4096 4096 NT_STATUS_OK
ReadX 11365 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11366 NT_STATUS_OK
ReadX 11366 0 61440 61440 NT_STATUS_OK
ReadX 11366 61440 4096 4096 NT_STATUS_OK
ReadX 11366 65536 61440 61440 NT_STATUS_OK
ReadX 11366 126976 4096 4096 NT_STATUS_OK
ReadX 11366 131072 61440 61440 NT_STATUS_OK
ReadX 11366 192512 4096 4096 NT_STATUS_OK
ReadX 11366 196608 61440 61440 NT_STATUS_OK
ReadX 11366 258048 4096 4096 NT_STATUS_OK
ReadX 11366 262144 61440 61440 NT_STATUS_OK
ReadX 11366 323584 4096 4096 NT_STATUS_OK
ReadX 11366 327680 61440 61440 NT_STATUS_OK
ReadX 11366 389120 4096 4096 NT_STATUS_OK
ReadX 11366 393216 61440 61440 NT_STATUS_OK
ReadX 11366 454656 4096 4096 NT_STATUS_OK
ReadX 11366 458752 61440 61440 NT_STATUS_OK
ReadX 11366 520192 4096 4096 NT_STATUS_OK
ReadX 11366 524288 61440 61440 NT_STATUS_OK
ReadX 11366 585728 4096 4096 NT_STATUS_OK
ReadX 11366 589824 61440 61440 NT_STATUS_OK
ReadX 11366 651264 4096 4096 NT_STATUS_OK
ReadX 11366 655360 61440 61440 NT_STATUS_OK
ReadX 11366 716800 4096 4096 NT_STATUS_OK
ReadX 11366 720896 61440 61440 NT_STATUS_OK
ReadX 11366 782336 4096 4096 NT_STATUS_OK
ReadX 11366 786432 61440 61440 NT_STATUS_OK
ReadX 11366 847872 4096 4096 NT_STATUS_OK
ReadX 11366 851968 61440 61440 NT_STATUS_OK
ReadX 11366 913408 4096 4096 NT_STATUS_OK
ReadX 11366 917504 61440 61440 NT_STATUS_OK
ReadX 11366 978944 4096 4096 NT_STATUS_OK
ReadX 11366 983040 61440 61440 NT_STATUS_OK
ReadX 11366 1044480 4096 4096 NT_STATUS_OK
ReadX 11366 1048576 61440 61440 NT_STATUS_OK
ReadX 11366 1110016 4096 4096 NT_STATUS_OK
ReadX 11366 1114112 61440 61440 NT_STATUS_OK
ReadX 11366 1175552 4096 4096 NT_STATUS_OK
ReadX 11366 1179648 61440 61440 NT_STATUS_OK
ReadX 11366 1241088 4096 4096 NT_STATUS_OK
ReadX 11366 1245184 61440 61440 NT_STATUS_OK
ReadX 11366 1306624 4096 4096 NT_STATUS_OK
ReadX 11366 1310720 61440 61440 NT_STATUS_OK
ReadX 11366 1372160 4096 4096 NT_STATUS_OK
ReadX 11366 1376256 61440 61440 NT_STATUS_OK
ReadX 11366 1437696 4096 4096 NT_STATUS_OK
ReadX 11366 1441792 61440 61440 NT_STATUS_OK
ReadX 11366 1503232 4096 4096 NT_STATUS_OK
ReadX 11366 1507328 61440 61440 NT_STATUS_OK
ReadX 11366 1568768 4096 4096 NT_STATUS_OK
ReadX 11366 1572864 61440 61440 NT_STATUS_OK
ReadX 11366 1634304 4096 4096 NT_STATUS_OK
ReadX 11366 1638400 61440 61440 NT_STATUS_OK
ReadX 11366 1699840 4096 4096 NT_STATUS_OK
ReadX 11366 1703936 61440 61440 NT_STATUS_OK
ReadX 11366 1765376 4096 4096 NT_STATUS_OK
ReadX 11366 1769472 61440 61440 NT_STATUS_OK
ReadX 11366 1830912 4096 4096 NT_STATUS_OK
ReadX 11366 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11368 NT_STATUS_OK
QUERY_FILE_INFORMATION 11368 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11368 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11368 1005 NT_STATUS_OK
ReadX 11368 2156 24 24 NT_STATUS_OK
ReadX 11368 2139 276 276 NT_STATUS_OK
ReadX 11368 2136 14 14 NT_STATUS_OK
ReadX 11368 2136 7 7 NT_STATUS_OK
ReadX 11368 2138 12 12 NT_STATUS_OK
ReadX 11368 2137 8 8 NT_STATUS_OK
ReadX 11368 2135 15 15 NT_STATUS_OK
ReadX 11368 0 16 16 NT_STATUS_OK
ReadX 11368 16 2048 2048 NT_STATUS_OK
ReadX 11368 2064 2048 2048 NT_STATUS_OK
ReadX 11368 257 2048 2048 NT_STATUS_OK
ReadX 11368 385 2048 2048 NT_STATUS_OK
ReadX 11368 513 2048 2048 NT_STATUS_OK
ReadX 11368 641 2048 2048 NT_STATUS_OK
ReadX 11368 769 2048 2048 NT_STATUS_OK
ReadX 11368 897 2048 2048 NT_STATUS_OK
ReadX 11368 1025 2048 2048 NT_STATUS_OK
ReadX 11368 1153 2048 2048 NT_STATUS_OK
ReadX 11368 1281 2048 2048 NT_STATUS_OK
ReadX 11368 1409 2048 2048 NT_STATUS_OK
ReadX 11368 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11370 NT_STATUS_OK
Close 11370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11364 NT_STATUS_OK
Close 11365 NT_STATUS_OK
Close 11366 NT_STATUS_OK
Close 11358 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11373 NT_STATUS_OK
WriteX 11373 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11373 258 NT_STATUS_OK
WriteX 11373 0 10575 10575 NT_STATUS_OK
Flush 11373 NT_STATUS_OK
Close 11373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11374 NT_STATUS_OK
Close 11374 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11376 NT_STATUS_OK
ReadX 11376 0 4096 4096 NT_STATUS_OK
Close 11368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11378 NT_STATUS_OK
LockX 11378 2147483538 1 NT_STATUS_OK
UnlockX 11378 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11378 1005 NT_STATUS_OK
ReadX 11378 0 512 512 NT_STATUS_OK
ReadX 11378 512 512 512 NT_STATUS_OK
ReadX 11378 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11378 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11378 1004 NT_STATUS_OK
Close 11378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11379 NT_STATUS_OK
QUERY_FILE_INFORMATION 11379 1005 NT_STATUS_OK
ReadX 11379 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11380 NT_STATUS_OK
LockX 11380 2147483538 1 NT_STATUS_OK
UnlockX 11380 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11380 1005 NT_STATUS_OK
ReadX 11380 0 512 512 NT_STATUS_OK
ReadX 11380 512 512 512 NT_STATUS_OK
ReadX 11380 1024 512 512 NT_STATUS_OK
ReadX 11380 288 20 20 NT_STATUS_OK
ReadX 11380 308 2084 2084 NT_STATUS_OK
ReadX 11380 388 2084 2084 NT_STATUS_OK
ReadX 11380 388 2084 2084 NT_STATUS_OK
ReadX 11367 2157 1386 1386 NT_STATUS_OK
ReadX 11380 2472 399 399 NT_STATUS_OK
ReadX 11380 3072 1536 1536 NT_STATUS_OK
ReadX 11380 544 149 149 NT_STATUS_OK
ReadX 11380 693 485 485 NT_STATUS_OK
Close 11380 NT_STATUS_OK
ReadX 11367 2157 4096 4096 NT_STATUS_OK
ReadX 11367 6253 4096 4096 NT_STATUS_OK
ReadX 11367 10349 4096 4096 NT_STATUS_OK
ReadX 11367 14445 4096 4096 NT_STATUS_OK
ReadX 11367 18541 4096 4096 NT_STATUS_OK
ReadX 11367 22637 256 256 NT_STATUS_OK
ReadX 11367 22893 4096 4096 NT_STATUS_OK
ReadX 11367 26989 4096 4096 NT_STATUS_OK
ReadX 11367 31085 4096 4096 NT_STATUS_OK
ReadX 11367 35181 4096 4096 NT_STATUS_OK
ReadX 11367 39277 4096 4096 NT_STATUS_OK
ReadX 11367 43373 4096 4096 NT_STATUS_OK
ReadX 11367 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11367 2157 1024 1024 NT_STATUS_OK
ReadX 11367 1667 4688 4688 NT_STATUS_OK
ReadX 11367 6355 3516 3516 NT_STATUS_OK
ReadX 11367 9871 16384 16384 NT_STATUS_OK
ReadX 11367 26255 3771 3771 NT_STATUS_OK
ReadX 11367 30026 2048 2048 NT_STATUS_OK
ReadX 11367 32074 1024 1024 NT_STATUS_OK
ReadX 11367 33098 6652 6652 NT_STATUS_OK
ReadX 11367 39750 16384 16384 NT_STATUS_OK
ReadX 11367 56134 10496 10496 NT_STATUS_OK
ReadX 11367 66630 1784 1784 NT_STATUS_OK
ReadX 11367 68414 90 90 NT_STATUS_OK
ReadX 11367 68504 273 273 NT_STATUS_OK
ReadX 11367 68777 1600 1600 NT_STATUS_OK
ReadX 11367 70377 640 640 NT_STATUS_OK
ReadX 11367 71017 1280 1280 NT_STATUS_OK
ReadX 11367 72297 8464 8464 NT_STATUS_OK
ReadX 11367 80761 158 158 NT_STATUS_OK
ReadX 11367 80919 912 912 NT_STATUS_OK
ReadX 11367 81831 1980 1980 NT_STATUS_OK
ReadX 11367 83811 2256 2256 NT_STATUS_OK
ReadX 11367 86067 400 400 NT_STATUS_OK
ReadX 11367 86467 252 252 NT_STATUS_OK
ReadX 11367 86719 42 42 NT_STATUS_OK
ReadX 11367 86761 725 725 NT_STATUS_OK
ReadX 11367 2009 512 512 NT_STATUS_OK
ReadX 11367 3895 9 9 NT_STATUS_OK
ReadX 11367 3781 46 46 NT_STATUS_OK
ReadX 11367 4059 92 92 NT_STATUS_OK
ReadX 11367 3781 92 92 NT_STATUS_OK
ReadX 11367 3986 184 184 NT_STATUS_OK
ReadX 11367 3987 16384 16384 NT_STATUS_OK
ReadX 11367 3902 16384 16384 NT_STATUS_OK
ReadX 11367 3781 10240 10240 NT_STATUS_OK
ReadX 11367 3821 16384 16384 NT_STATUS_OK
ReadX 11367 3891 935 935 NT_STATUS_OK
ReadX 11367 4060 10240 10240 NT_STATUS_OK
ReadX 11367 4059 184 184 NT_STATUS_OK
ReadX 11367 256 184 184 NT_STATUS_OK
ReadX 11367 256 1026 1026 NT_STATUS_OK
ReadX 11367 3901 326 326 NT_STATUS_OK
ReadX 11367 3899 652 652 NT_STATUS_OK
ReadX 11367 256 2 2 NT_STATUS_OK
ReadX 11367 258 4948 4948 NT_STATUS_OK
Close 11367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11382 NT_STATUS_OK
Close 11382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11385 NT_STATUS_OK
WriteX 11385 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11385 258 NT_STATUS_OK
WriteX 11385 0 65536 65536 NT_STATUS_OK
WriteX 11385 65536 65536 65536 NT_STATUS_OK
WriteX 11385 131072 65536 65536 NT_STATUS_OK
WriteX 11385 196608 65536 65536 NT_STATUS_OK
WriteX 11385 262144 65536 65536 NT_STATUS_OK
WriteX 11385 327680 65536 65536 NT_STATUS_OK
WriteX 11385 393216 65536 65536 NT_STATUS_OK
WriteX 11385 458752 65536 65536 NT_STATUS_OK
WriteX 11385 524288 65536 65536 NT_STATUS_OK
WriteX 11385 589824 35257 35257 NT_STATUS_OK
Close 11385 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11387 NT_STATUS_OK
Close 11387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11390 NT_STATUS_OK
WriteX 11390 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11390 258 NT_STATUS_OK
WriteX 11390 0 65536 65536 NT_STATUS_OK
WriteX 11390 65536 65536 65536 NT_STATUS_OK
WriteX 11390 131072 65536 65536 NT_STATUS_OK
WriteX 11390 196608 65536 65536 NT_STATUS_OK
WriteX 11390 262144 65536 65536 NT_STATUS_OK
WriteX 11390 327680 65536 65536 NT_STATUS_OK
WriteX 11390 393216 65536 65536 NT_STATUS_OK
WriteX 11390 458752 65536 65536 NT_STATUS_OK
WriteX 11390 524288 65536 65536 NT_STATUS_OK
WriteX 11390 589824 57598 57598 NT_STATUS_OK
Close 11390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11392 NT_STATUS_OK
WriteX 11392 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11392 258 NT_STATUS_OK
WriteX 11392 0 12543 12543 NT_STATUS_OK
Flush 11392 NT_STATUS_OK
Close 11392 NT_STATUS_OK
Close 11376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11394 NT_STATUS_OK
Close 11394 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11396 NT_STATUS_OK
ReadX 11396 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11397 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11398 NT_STATUS_OK
QUERY_FILE_INFORMATION 11398 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11398 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11398 1005 NT_STATUS_OK
ReadX 11398 1938 24 24 NT_STATUS_OK
ReadX 11398 1920 276 276 NT_STATUS_OK
ReadX 11398 1918 14 14 NT_STATUS_OK
ReadX 11398 1918 7 7 NT_STATUS_OK
ReadX 11398 1919 12 12 NT_STATUS_OK
ReadX 11398 1919 8 8 NT_STATUS_OK
ReadX 11398 1917 15 15 NT_STATUS_OK
ReadX 11398 0 16 16 NT_STATUS_OK
ReadX 11398 16 2048 2048 NT_STATUS_OK
ReadX 11398 2064 2048 2048 NT_STATUS_OK
ReadX 11398 257 2048 2048 NT_STATUS_OK
ReadX 11398 385 2048 2048 NT_STATUS_OK
ReadX 11398 513 2048 2048 NT_STATUS_OK
ReadX 11398 641 2048 2048 NT_STATUS_OK
ReadX 11398 769 2048 2048 NT_STATUS_OK
ReadX 11398 897 2048 2048 NT_STATUS_OK
ReadX 11398 1025 2048 2048 NT_STATUS_OK
ReadX 11398 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11400 NT_STATUS_OK
Close 11400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11403 NT_STATUS_OK
WriteX 11403 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11403 258 NT_STATUS_OK
WriteX 11403 0 11588 11588 NT_STATUS_OK
Flush 11403 NT_STATUS_OK
Close 11403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11404 NT_STATUS_OK
Close 11404 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11406 NT_STATUS_OK
ReadX 11406 0 4096 4096 NT_STATUS_OK
Close 11398 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11408 NT_STATUS_OK
WriteX 11408 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11408 258 NT_STATUS_OK
WriteX 11408 0 11615 11615 NT_STATUS_OK
Flush 11408 NT_STATUS_OK
Close 11408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11410 NT_STATUS_OK
Close 11410 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11412 NT_STATUS_OK
ReadX 11412 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11414 NT_STATUS_OK
Close 11414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11417 NT_STATUS_OK
WriteX 11417 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11417 258 NT_STATUS_OK
WriteX 11417 0 65536 65536 NT_STATUS_OK
WriteX 11417 65536 16050 16050 NT_STATUS_OK
Close 11417 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11397 1939 64 64 NT_STATUS_OK
ReadX 11397 128 248 248 NT_STATUS_OK
ReadX 11397 128 568 568 NT_STATUS_OK
ReadX 11397 3872 1536 1536 NT_STATUS_OK
ReadX 11397 3456 2560 2560 NT_STATUS_OK
ReadX 11397 3136 512 512 NT_STATUS_OK
ReadX 11397 2880 4096 4096 NT_STATUS_OK
ReadX 11397 3264 3072 3072 NT_STATUS_OK
ReadX 11397 320 4096 4096 NT_STATUS_OK
ReadX 11397 1024 4096 4096 NT_STATUS_OK
ReadX 11397 3616 4096 4096 NT_STATUS_OK
ReadX 11397 1939 64 64 NT_STATUS_OK
ReadX 11397 128 248 248 NT_STATUS_OK
ReadX 11397 128 608 608 NT_STATUS_OK
ReadX 11397 2858 1024 1024 NT_STATUS_OK
ReadX 11397 2810 4096 4096 NT_STATUS_OK
ReadX 11397 2826 4096 4096 NT_STATUS_OK
ReadX 11397 2580 2048 2048 NT_STATUS_OK
ReadX 11397 2800 2560 2560 NT_STATUS_OK
ReadX 11397 2100 4096 4096 NT_STATUS_OK
ReadX 11397 2084 4096 4096 NT_STATUS_OK
ReadX 11397 868 4096 4096 NT_STATUS_OK
ReadX 11397 2324 4096 4096 NT_STATUS_OK
ReadX 11397 884 4096 4096 NT_STATUS_OK
ReadX 11397 2604 1024 1024 NT_STATUS_OK
ReadX 11397 580 4096 4096 NT_STATUS_OK
ReadX 11397 596 4096 4096 NT_STATUS_OK
ReadX 11397 2752 4096 4096 NT_STATUS_OK
ReadX 11397 2842 1024 1024 NT_STATUS_OK
ReadX 11397 660 4096 4096 NT_STATUS_OK
ReadX 11397 2720 4096 4096 NT_STATUS_OK
ReadX 11397 2736 4096 4096 NT_STATUS_OK
ReadX 11397 628 4096 4096 NT_STATUS_OK
ReadX 11397 2704 4096 4096 NT_STATUS_OK
ReadX 11397 1556 4096 4096 NT_STATUS_OK
ReadX 11397 576 4096 4096 NT_STATUS_OK
ReadX 11397 3168 1536 1536 NT_STATUS_OK
ReadX 11397 832 4096 4096 NT_STATUS_OK
ReadX 11397 1088 4096 4096 NT_STATUS_OK
ReadX 11397 1344 4096 4096 NT_STATUS_OK
ReadX 11397 1600 4096 4096 NT_STATUS_OK
ReadX 11397 1856 4096 4096 NT_STATUS_OK
ReadX 11397 2112 4096 4096 NT_STATUS_OK
ReadX 11397 1892 4096 4096 NT_STATUS_OK
ReadX 11397 820 4096 4096 NT_STATUS_OK
ReadX 11397 788 4096 4096 NT_STATUS_OK
ReadX 11397 1604 4096 4096 NT_STATUS_OK
ReadX 11397 3648 4096 4096 NT_STATUS_OK
ReadX 11397 2608 4096 4096 NT_STATUS_OK
ReadX 11397 548 4096 4096 NT_STATUS_OK
ReadX 11397 740 4096 4096 NT_STATUS_OK
ReadX 11397 1344 4096 4096 NT_STATUS_OK
ReadX 11397 3392 4096 4096 NT_STATUS_OK
ReadX 11397 3904 4096 4096 NT_STATUS_OK
ReadX 11397 644 4096 4096 NT_STATUS_OK
ReadX 11397 676 4096 4096 NT_STATUS_OK
ReadX 11397 2688 4096 4096 NT_STATUS_OK
ReadX 11397 320 4096 4096 NT_STATUS_OK
ReadX 11397 900 4096 4096 NT_STATUS_OK
ReadX 11397 1908 4096 4096 NT_STATUS_OK
ReadX 11397 852 4096 4096 NT_STATUS_OK
ReadX 11397 724 4096 4096 NT_STATUS_OK
ReadX 11397 2292 4096 4096 NT_STATUS_OK
ReadX 11397 612 4096 4096 NT_STATUS_OK
ReadX 11397 388 4096 4096 NT_STATUS_OK
ReadX 11397 2368 4096 4096 NT_STATUS_OK
ReadX 11397 2624 4096 4096 NT_STATUS_OK
ReadX 11397 500 4096 4096 NT_STATUS_OK
ReadX 11397 356 4096 4096 NT_STATUS_OK
ReadX 11397 1024 4096 4096 NT_STATUS_OK
ReadX 11397 576 4096 4096 NT_STATUS_OK
ReadX 11397 340 4096 4096 NT_STATUS_OK
ReadX 11397 420 4096 4096 NT_STATUS_OK
ReadX 11397 1600 4096 4096 NT_STATUS_OK
ReadX 11397 404 4096 4096 NT_STATUS_OK
ReadX 11397 1428 4096 4096 NT_STATUS_OK
ReadX 11397 2656 4096 4096 NT_STATUS_OK
ReadX 11397 2624 4096 4096 NT_STATUS_OK
ReadX 11397 452 4096 4096 NT_STATUS_OK
ReadX 11397 692 4096 4096 NT_STATUS_OK
ReadX 11397 564 4096 4096 NT_STATUS_OK
ReadX 11397 372 4096 4096 NT_STATUS_OK
ReadX 11397 468 4096 4096 NT_STATUS_OK
ReadX 11397 484 4096 4096 NT_STATUS_OK
ReadX 11397 1088 4096 4096 NT_STATUS_OK
ReadX 11397 1924 4096 4096 NT_STATUS_OK
ReadX 11397 2768 4096 4096 NT_STATUS_OK
ReadX 11397 832 4096 4096 NT_STATUS_OK
ReadX 11397 836 4096 4096 NT_STATUS_OK
ReadX 11397 1856 4096 4096 NT_STATUS_OK
ReadX 11397 2640 4096 4096 NT_STATUS_OK
ReadX 11397 436 4096 4096 NT_STATUS_OK
ReadX 11397 1828 4096 4096 NT_STATUS_OK
ReadX 11397 804 4096 4096 NT_STATUS_OK
ReadX 11397 1860 4096 4096 NT_STATUS_OK
ReadX 11397 1812 4096 4096 NT_STATUS_OK
ReadX 11397 756 4096 4096 NT_STATUS_OK
ReadX 11397 1636 4096 4096 NT_STATUS_OK
ReadX 11397 772 4096 4096 NT_STATUS_OK
ReadX 11397 2036 4096 4096 NT_STATUS_OK
ReadX 11397 1220 4096 4096 NT_STATUS_OK
ReadX 11397 1652 4096 4096 NT_STATUS_OK
ReadX 11397 2588 4096 4096 NT_STATUS_OK
ReadX 11397 916 4096 4096 NT_STATUS_OK
ReadX 11397 260 4096 4096 NT_STATUS_OK
ReadX 11397 932 4096 4096 NT_STATUS_OK
ReadX 11397 2624 4096 4096 NT_STATUS_OK
ReadX 11397 308 4096 4096 NT_STATUS_OK
ReadX 11397 292 4096 4096 NT_STATUS_OK
ReadX 11397 1140 4096 4096 NT_STATUS_OK
ReadX 11397 276 4096 4096 NT_STATUS_OK
ReadX 11397 2020 4096 4096 NT_STATUS_OK
ReadX 11397 2880 4096 4096 NT_STATUS_OK
ReadX 11397 516 4096 4096 NT_STATUS_OK
ReadX 11397 1844 4096 4096 NT_STATUS_OK
ReadX 11397 1124 4096 4096 NT_STATUS_OK
ReadX 11397 3136 4096 4096 NT_STATUS_OK
ReadX 11397 324 4096 4096 NT_STATUS_OK
ReadX 11397 1156 4096 4096 NT_STATUS_OK
ReadX 11397 1172 4096 4096 NT_STATUS_OK
ReadX 11397 2112 4096 4096 NT_STATUS_OK
ReadX 11397 2368 4096 4096 NT_STATUS_OK
ReadX 11397 964 4096 4096 NT_STATUS_OK
ReadX 11397 980 4096 4096 NT_STATUS_OK
ReadX 11397 1012 4096 4096 NT_STATUS_OK
ReadX 11397 532 4096 4096 NT_STATUS_OK
ReadX 11397 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11397 1620 4096 4096 NT_STATUS_OK
ReadX 11397 1604 4096 4096 NT_STATUS_OK
ReadX 11397 2116 4096 4096 NT_STATUS_OK
ReadX 11397 2132 4096 4096 NT_STATUS_OK
ReadX 11397 2148 4096 4096 NT_STATUS_OK
ReadX 11397 2276 4096 4096 NT_STATUS_OK
ReadX 11397 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11419 NT_STATUS_OK
Close 11419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11422 NT_STATUS_OK
QUERY_FILE_INFORMATION 11377 1004 NT_STATUS_OK
Close 11377 NT_STATUS_OK
WriteX 11422 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11422 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11379 1004 NT_STATUS_OK
Close 11379 NT_STATUS_OK
WriteX 11422 0 65536 65536 NT_STATUS_OK
WriteX 11422 65536 64850 64850 NT_STATUS_OK
Close 11422 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11424 NT_STATUS_OK
WriteX 11424 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11424 258 NT_STATUS_OK
ReadX 11397 2068 4096 4096 NT_STATUS_OK
ReadX 11397 1588 4096 4096 NT_STATUS_OK
ReadX 11397 1572 4096 4096 NT_STATUS_OK
WriteX 11424 0 18630 18630 NT_STATUS_OK
Flush 11424 NT_STATUS_OK
Close 11424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11426 NT_STATUS_OK
Close 11426 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11428 NT_STATUS_OK
ReadX 11428 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11397 612 4096 4096 NT_STATUS_OK
ReadX 11397 564 4096 4096 NT_STATUS_OK
ReadX 11397 1876 4096 4096 NT_STATUS_OK
ReadX 11397 628 4096 4096 NT_STATUS_OK
ReadX 11397 740 4096 4096 NT_STATUS_OK
ReadX 11397 724 4096 4096 NT_STATUS_OK
ReadX 11397 644 4096 4096 NT_STATUS_OK
ReadX 11397 2324 4096 4096 NT_STATUS_OK
ReadX 11397 660 4096 4096 NT_STATUS_OK
ReadX 11397 852 4096 4096 NT_STATUS_OK
ReadX 11397 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11397 2368 4096 4096 NT_STATUS_OK
ReadX 11397 1024 4096 4096 NT_STATUS_OK
ReadX 11397 320 4096 4096 NT_STATUS_OK
ReadX 11397 580 4096 4096 NT_STATUS_OK
ReadX 11397 3136 512 512 NT_STATUS_OK
ReadX 11397 2880 4096 4096 NT_STATUS_OK
Close 11397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11429 NT_STATUS_OK
ReadX 11429 61440 4096 4096 NT_STATUS_OK
ReadX 11429 126976 4096 4096 NT_STATUS_OK
WriteX 11429 0 65536 65536 NT_STATUS_OK
WriteX 11429 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11430 NT_STATUS_OK
ReadX 11430 61440 4096 4096 NT_STATUS_OK
ReadX 11430 126976 4096 4096 NT_STATUS_OK
ReadX 11430 192512 4096 4096 NT_STATUS_OK
ReadX 11430 258048 4096 4096 NT_STATUS_OK
WriteX 11430 0 65536 65536 NT_STATUS_OK
WriteX 11430 65536 65536 65536 NT_STATUS_OK
WriteX 11430 131072 65536 65536 NT_STATUS_OK
WriteX 11430 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11431 NT_STATUS_OK
ReadX 11431 61440 4096 4096 NT_STATUS_OK
ReadX 11431 126976 4096 4096 NT_STATUS_OK
ReadX 11431 192512 4096 4096 NT_STATUS_OK
ReadX 11431 258048 4096 4096 NT_STATUS_OK
ReadX 11431 323584 4096 4096 NT_STATUS_OK
ReadX 11431 389120 4096 4096 NT_STATUS_OK
ReadX 11431 454656 4096 4096 NT_STATUS_OK
ReadX 11431 520192 4096 4096 NT_STATUS_OK
WriteX 11431 0 65536 65536 NT_STATUS_OK
WriteX 11431 65536 65536 65536 NT_STATUS_OK
WriteX 11431 131072 65536 65536 NT_STATUS_OK
WriteX 11431 196608 65536 65536 NT_STATUS_OK
WriteX 11431 262144 65536 65536 NT_STATUS_OK
WriteX 11431 327680 65536 65536 NT_STATUS_OK
WriteX 11431 393216 65536 65536 NT_STATUS_OK
WriteX 11431 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11432 NT_STATUS_OK
ReadX 11432 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11433 NT_STATUS_OK
Close 11433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11434 NT_STATUS_OK
WriteX 11434 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11434 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11432 0 8192 8192 NT_STATUS_OK
Flush 11432 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11432 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11432 0 8192 8192 NT_STATUS_OK
Flush 11432 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11432 0 8192 8192 NT_STATUS_OK
Flush 11432 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11432 0 8192 8192 NT_STATUS_OK
Flush 11432 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11436 NT_STATUS_OK
Close 11436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11428 NT_STATUS_OK
Close 11396 NT_STATUS_OK
Close 11429 NT_STATUS_OK
Close 11430 NT_STATUS_OK
Close 11431 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11439 NT_STATUS_OK
WriteX 11439 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11439 258 NT_STATUS_OK
WriteX 11439 0 62591 62591 NT_STATUS_OK
Close 11439 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11441 NT_STATUS_OK
Close 11441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11444 NT_STATUS_OK
WriteX 11444 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11444 258 NT_STATUS_OK
WriteX 11444 0 10845 10845 NT_STATUS_OK
Close 11444 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11446 NT_STATUS_OK
Close 11446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11449 NT_STATUS_OK
WriteX 11449 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11449 258 NT_STATUS_OK
WriteX 11449 0 30118 30118 NT_STATUS_OK
Close 11449 NT_STATUS_OK
WriteX 11432 0 4096 4096 NT_STATUS_OK
WriteX 11434 0 64 64 NT_STATUS_OK
Close 11434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11432 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11451 NT_STATUS_OK
ReadX 11451 0 61440 61440 NT_STATUS_OK
ReadX 11451 61440 4096 4096 NT_STATUS_OK
ReadX 11451 65536 61440 61440 NT_STATUS_OK
ReadX 11451 126976 4096 4096 NT_STATUS_OK
ReadX 11451 131072 61440 61440 NT_STATUS_OK
ReadX 11451 192512 4096 4096 NT_STATUS_OK
ReadX 11451 196608 61440 61440 NT_STATUS_OK
ReadX 11451 258048 4096 4096 NT_STATUS_OK
ReadX 11451 262144 61440 61440 NT_STATUS_OK
ReadX 11451 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11452 NT_STATUS_OK
ReadX 11452 0 61440 61440 NT_STATUS_OK
ReadX 11452 61440 4096 4096 NT_STATUS_OK
ReadX 11452 65536 61440 61440 NT_STATUS_OK
ReadX 11452 126976 4096 4096 NT_STATUS_OK
ReadX 11452 131072 61440 61440 NT_STATUS_OK
ReadX 11452 192512 4096 4096 NT_STATUS_OK
ReadX 11452 196608 61440 61440 NT_STATUS_OK
ReadX 11452 258048 4096 4096 NT_STATUS_OK
ReadX 11452 262144 61440 61440 NT_STATUS_OK
ReadX 11452 323584 4096 4096 NT_STATUS_OK
ReadX 11452 327680 61440 61440 NT_STATUS_OK
ReadX 11452 389120 4096 4096 NT_STATUS_OK
ReadX 11452 393216 61440 61440 NT_STATUS_OK
ReadX 11452 454656 4096 4096 NT_STATUS_OK
ReadX 11452 458752 61440 61440 NT_STATUS_OK
ReadX 11452 520192 4096 4096 NT_STATUS_OK
ReadX 11452 524288 61440 61440 NT_STATUS_OK
ReadX 11452 585728 4096 4096 NT_STATUS_OK
ReadX 11452 589824 61440 61440 NT_STATUS_OK
ReadX 11452 651264 4096 4096 NT_STATUS_OK
ReadX 11452 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11453 NT_STATUS_OK
ReadX 11453 0 61440 61440 NT_STATUS_OK
ReadX 11453 61440 4096 4096 NT_STATUS_OK
ReadX 11453 65536 61440 61440 NT_STATUS_OK
ReadX 11453 126976 4096 4096 NT_STATUS_OK
ReadX 11453 131072 61440 61440 NT_STATUS_OK
ReadX 11453 192512 4096 4096 NT_STATUS_OK
ReadX 11453 196608 61440 61440 NT_STATUS_OK
ReadX 11453 258048 4096 4096 NT_STATUS_OK
ReadX 11453 262144 61440 61440 NT_STATUS_OK
ReadX 11453 323584 4096 4096 NT_STATUS_OK
ReadX 11453 327680 61440 61440 NT_STATUS_OK
ReadX 11453 389120 4096 4096 NT_STATUS_OK
ReadX 11453 393216 61440 61440 NT_STATUS_OK
ReadX 11453 454656 4096 4096 NT_STATUS_OK
ReadX 11453 458752 61440 61440 NT_STATUS_OK
ReadX 11453 520192 4096 4096 NT_STATUS_OK
ReadX 11453 524288 61440 61440 NT_STATUS_OK
ReadX 11453 585728 4096 4096 NT_STATUS_OK
ReadX 11453 589824 61440 61440 NT_STATUS_OK
ReadX 11453 651264 4096 4096 NT_STATUS_OK
ReadX 11453 655360 61440 61440 NT_STATUS_OK
ReadX 11453 716800 4096 4096 NT_STATUS_OK
ReadX 11453 720896 61440 61440 NT_STATUS_OK
ReadX 11453 782336 4096 4096 NT_STATUS_OK
ReadX 11453 786432 61440 61440 NT_STATUS_OK
ReadX 11453 847872 4096 4096 NT_STATUS_OK
ReadX 11453 851968 61440 61440 NT_STATUS_OK
ReadX 11453 913408 4096 4096 NT_STATUS_OK
ReadX 11453 917504 61440 61440 NT_STATUS_OK
ReadX 11453 978944 4096 4096 NT_STATUS_OK
ReadX 11453 983040 61440 61440 NT_STATUS_OK
ReadX 11453 1044480 4096 4096 NT_STATUS_OK
ReadX 11453 1048576 61440 61440 NT_STATUS_OK
ReadX 11453 1110016 4096 4096 NT_STATUS_OK
ReadX 11453 1114112 61440 61440 NT_STATUS_OK
ReadX 11453 1175552 4096 4096 NT_STATUS_OK
ReadX 11453 1179648 61440 61440 NT_STATUS_OK
ReadX 11453 1241088 4096 4096 NT_STATUS_OK
ReadX 11453 1245184 61440 61440 NT_STATUS_OK
ReadX 11453 1306624 4096 4096 NT_STATUS_OK
ReadX 11453 1310720 61440 61440 NT_STATUS_OK
ReadX 11453 1372160 4096 4096 NT_STATUS_OK
ReadX 11453 1376256 61440 61440 NT_STATUS_OK
ReadX 11453 1437696 4096 4096 NT_STATUS_OK
ReadX 11453 1441792 61440 61440 NT_STATUS_OK
ReadX 11453 1503232 4096 4096 NT_STATUS_OK
ReadX 11453 1507328 61440 61440 NT_STATUS_OK
ReadX 11453 1568768 4096 4096 NT_STATUS_OK
ReadX 11453 1572864 61440 61440 NT_STATUS_OK
ReadX 11453 1634304 4096 4096 NT_STATUS_OK
ReadX 11453 1638400 61440 61440 NT_STATUS_OK
ReadX 11453 1699840 4096 4096 NT_STATUS_OK
ReadX 11453 1703936 61440 61440 NT_STATUS_OK
ReadX 11453 1765376 4096 4096 NT_STATUS_OK
ReadX 11453 1769472 61440 61440 NT_STATUS_OK
ReadX 11453 1830912 4096 4096 NT_STATUS_OK
ReadX 11453 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11454 NT_STATUS_OK
Close 11454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11451 NT_STATUS_OK
Close 11452 NT_STATUS_OK
Close 11453 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11456 NT_STATUS_OK
ReadX 11456 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11457 NT_STATUS_OK
ReadX 11457 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11458 NT_STATUS_OK
ReadX 11458 0 4096 4096 NT_STATUS_OK
ReadX 11458 4096 4096 4096 NT_STATUS_OK
ReadX 11458 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11459 NT_STATUS_OK
Close 11459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11456 NT_STATUS_OK
Close 11457 NT_STATUS_OK
Close 11458 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11461 NT_STATUS_OK
ReadX 11461 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11462 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11462 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11463 NT_STATUS_OK
Close 11463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11461 NT_STATUS_OK
Close 11462 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11465 NT_STATUS_OK
ReadX 11465 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11466 NT_STATUS_OK
ReadX 11466 0 8192 8192 NT_STATUS_OK
ReadX 11466 8192 8192 8192 NT_STATUS_OK
ReadX 11466 16384 8192 8192 NT_STATUS_OK
ReadX 11466 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11468 NT_STATUS_OK
Close 11468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11466 NT_STATUS_OK
Close 11465 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11471 NT_STATUS_OK
WriteX 11471 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11471 258 NT_STATUS_OK
WriteX 11471 0 10438 10438 NT_STATUS_OK
Close 11471 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11472 NT_STATUS_OK
Close 11472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11473 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11474 NT_STATUS_OK
Close 11474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11475 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11476 NT_STATUS_OK
Close 11476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11477 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11478 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11478 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11479 NT_STATUS_OK
Close 11479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11480 NT_STATUS_OK
ReadX 11480 0 4096 4096 NT_STATUS_OK
ReadX 11480 4096 4096 4096 NT_STATUS_OK
ReadX 11480 8192 4096 4096 NT_STATUS_OK
ReadX 11480 12288 8192 8192 NT_STATUS_OK
ReadX 11480 20480 8192 8192 NT_STATUS_OK
ReadX 11480 28672 8192 8192 NT_STATUS_OK
ReadX 11480 36864 8192 8192 NT_STATUS_OK
ReadX 11480 45056 8192 8192 NT_STATUS_OK
ReadX 11480 53248 8192 8192 NT_STATUS_OK
ReadX 11480 61440 8192 8192 NT_STATUS_OK
ReadX 11480 69632 8192 8192 NT_STATUS_OK
ReadX 11480 77824 8192 8192 NT_STATUS_OK
ReadX 11480 86016 8192 8192 NT_STATUS_OK
ReadX 11480 94208 8192 8192 NT_STATUS_OK
ReadX 11480 102400 8192 8192 NT_STATUS_OK
ReadX 11480 110592 8192 8192 NT_STATUS_OK
ReadX 11480 118784 8192 8192 NT_STATUS_OK
ReadX 11480 126976 8192 8192 NT_STATUS_OK
ReadX 11480 135168 8192 8192 NT_STATUS_OK
ReadX 11480 143360 8192 8192 NT_STATUS_OK
ReadX 11480 151552 8192 8192 NT_STATUS_OK
ReadX 11480 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11480 NT_STATUS_OK
Close 11473 NT_STATUS_OK
Close 11475 NT_STATUS_OK
Close 11477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11482 NT_STATUS_OK
Close 11482 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11485 NT_STATUS_OK
WriteX 11485 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11485 258 NT_STATUS_OK
WriteX 11485 0 28489 28489 NT_STATUS_OK
WriteX 11485 0 12288 12288 NT_STATUS_OK
Close 11485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11486 NT_STATUS_OK
Close 11486 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11488 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11488 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11489 NT_STATUS_OK
Close 11489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11488 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11491 NT_STATUS_OK
ReadX 11491 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11492 NT_STATUS_OK
ReadX 11492 0 8192 8192 NT_STATUS_OK
ReadX 11492 8192 8192 8192 NT_STATUS_OK
ReadX 11492 16384 8192 8192 NT_STATUS_OK
ReadX 11492 24576 8192 8192 NT_STATUS_OK
ReadX 11492 32768 16384 16384 NT_STATUS_OK
ReadX 11492 49152 8192 8192 NT_STATUS_OK
ReadX 11492 57344 8192 8192 NT_STATUS_OK
ReadX 11492 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11494 NT_STATUS_OK
Close 11494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11492 NT_STATUS_OK
Close 11491 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11497 NT_STATUS_OK
WriteX 11497 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11497 258 NT_STATUS_OK
WriteX 11497 0 29253 29253 NT_STATUS_OK
Close 11497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11498 NT_STATUS_OK
Close 11498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11501 NT_STATUS_OK
Close 11501 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11504 NT_STATUS_OK
WriteX 11504 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11504 258 NT_STATUS_OK
WriteX 11504 0 30183 30183 NT_STATUS_OK
Close 11504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11505 NT_STATUS_OK
Close 11505 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11507 NT_STATUS_OK
WriteX 11507 0 510 510 NT_STATUS_OK
WriteX 11507 510 512 512 NT_STATUS_OK
WriteX 11507 1022 510 510 NT_STATUS_OK
WriteX 11507 1532 510 510 NT_STATUS_OK
WriteX 11507 2042 168 168 NT_STATUS_OK
Close 11507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11508 NT_STATUS_OK
Close 11508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11510 NT_STATUS_OK
ReadX 11510 0 4096 4096 NT_STATUS_OK
WriteX 11510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11511 NT_STATUS_OK
ReadX 11511 61440 4096 4096 NT_STATUS_OK
ReadX 11511 126976 4096 4096 NT_STATUS_OK
WriteX 11511 0 65536 65536 NT_STATUS_OK
WriteX 11511 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11512 NT_STATUS_OK
ReadX 11512 61440 4096 4096 NT_STATUS_OK
ReadX 11512 126976 4096 4096 NT_STATUS_OK
ReadX 11512 192512 4096 4096 NT_STATUS_OK
ReadX 11512 258048 4096 4096 NT_STATUS_OK
WriteX 11512 0 65536 65536 NT_STATUS_OK
WriteX 11512 65536 65536 65536 NT_STATUS_OK
WriteX 11512 131072 65536 65536 NT_STATUS_OK
WriteX 11512 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11513 NT_STATUS_OK
ReadX 11513 61440 4096 4096 NT_STATUS_OK
ReadX 11513 126976 4096 4096 NT_STATUS_OK
ReadX 11513 192512 4096 4096 NT_STATUS_OK
ReadX 11513 258048 4096 4096 NT_STATUS_OK
ReadX 11513 323584 4096 4096 NT_STATUS_OK
ReadX 11513 389120 4096 4096 NT_STATUS_OK
ReadX 11513 454656 4096 4096 NT_STATUS_OK
ReadX 11513 520192 4096 4096 NT_STATUS_OK
WriteX 11513 0 65536 65536 NT_STATUS_OK
WriteX 11513 65536 65536 65536 NT_STATUS_OK
WriteX 11513 131072 65536 65536 NT_STATUS_OK
WriteX 11513 196608 65536 65536 NT_STATUS_OK
WriteX 11513 262144 65536 65536 NT_STATUS_OK
WriteX 11513 327680 65536 65536 NT_STATUS_OK
WriteX 11513 393216 65536 65536 NT_STATUS_OK
WriteX 11513 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11514 NT_STATUS_OK
Close 11514 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11510 NT_STATUS_OK
Close 11511 NT_STATUS_OK
Close 11512 NT_STATUS_OK
Close 11513 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11516 NT_STATUS_OK
Close 11516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11520 NT_STATUS_OK
Close 11520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11523 NT_STATUS_OK
Close 11523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11525 NT_STATUS_OK
Close 11525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11529 NT_STATUS_OK
Close 11529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11532 NT_STATUS_OK
Close 11532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11534 NT_STATUS_OK
Close 11534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11538 NT_STATUS_OK
Close 11538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11543 NT_STATUS_OK
Close 11543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11548 NT_STATUS_OK
Close 11548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11553 NT_STATUS_OK
Close 11553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11558 NT_STATUS_OK
Close 11558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11563 NT_STATUS_OK
Close 11563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11568 NT_STATUS_OK
Close 11568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11573 NT_STATUS_OK
Close 11573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11576 NT_STATUS_OK
Close 11576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11579 NT_STATUS_OK
Close 11579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11582 NT_STATUS_OK
WriteX 11582 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11582 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11582 0 65536 65536 NT_STATUS_OK
WriteX 11582 65536 65536 65536 NT_STATUS_OK
WriteX 11582 131072 65536 65536 NT_STATUS_OK
WriteX 11582 196608 65536 65536 NT_STATUS_OK
WriteX 11582 262144 26634 26634 NT_STATUS_OK
Close 11582 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11587 NT_STATUS_OK
Close 11587 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11588 NT_STATUS_OK
Close 11588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11589 NT_STATUS_OK
ReadX 11589 0 4096 4096 NT_STATUS_OK
Close 11589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11590 NT_STATUS_OK
ReadX 11590 0 4096 4096 NT_STATUS_OK
ReadX 11590 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11591 NT_STATUS_OK
Close 11591 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11590 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11595 NT_STATUS_OK
Close 11595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11598 NT_STATUS_OK
Close 11598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11600 NT_STATUS_OK
Close 11600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11604 NT_STATUS_OK
Close 11604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11607 NT_STATUS_OK
Close 11607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11609 NT_STATUS_OK
Close 11609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11613 NT_STATUS_OK
Close 11613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11618 NT_STATUS_OK
Close 11618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11623 NT_STATUS_OK
Close 11623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11628 NT_STATUS_OK
Close 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11633 NT_STATUS_OK
Close 11633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11638 NT_STATUS_OK
Close 11638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11642 NT_STATUS_OK
Close 11642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11647 NT_STATUS_OK
Close 11647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11652 NT_STATUS_OK
Close 11652 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11655 NT_STATUS_OK
Close 11655 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11657 NT_STATUS_OK
Close 11657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11667 NT_STATUS_OK
Close 11667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11668 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11669 NT_STATUS_OK
ReadX 11669 0 4096 4096 NT_STATUS_OK
Close 11669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11670 NT_STATUS_OK
ReadX 11670 0 4096 4096 NT_STATUS_OK
Close 11670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11671 NT_STATUS_OK
ReadX 11671 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11681 NT_STATUS_OK
Close 11681 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11682 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
Close 11683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11684 NT_STATUS_OK
ReadX 11684 0 4096 4096 NT_STATUS_OK
Close 11684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11685 NT_STATUS_OK
ReadX 11685 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11671 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11714 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11714 0 4096 4096 NT_STATUS_OK
Close 11714 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11715 NT_STATUS_OK
ReadX 11715 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11715 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11716 NT_STATUS_OK
ReadX 11716 0 4096 4096 NT_STATUS_OK
ReadX 11716 4096 4096 4096 NT_STATUS_OK
ReadX 11716 8192 4096 4096 NT_STATUS_OK
ReadX 11716 12288 4096 4096 NT_STATUS_OK
ReadX 11716 16384 4096 4096 NT_STATUS_OK
ReadX 11716 20480 4096 4096 NT_STATUS_OK
ReadX 11716 24576 4096 4096 NT_STATUS_OK
ReadX 11716 28672 4096 4096 NT_STATUS_OK
ReadX 11716 32768 4096 4096 NT_STATUS_OK
ReadX 11716 36864 4096 4096 NT_STATUS_OK
ReadX 11716 40960 4096 4096 NT_STATUS_OK
ReadX 11716 45056 4096 4096 NT_STATUS_OK
ReadX 11716 49152 4096 4096 NT_STATUS_OK
ReadX 11716 53248 4096 4096 NT_STATUS_OK
ReadX 11716 57344 4096 4096 NT_STATUS_OK
ReadX 11716 61440 4096 4096 NT_STATUS_OK
ReadX 11716 65536 4096 4096 NT_STATUS_OK
ReadX 11716 69632 4096 4096 NT_STATUS_OK
ReadX 11716 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11716 1004 NT_STATUS_OK
WriteX 11716 0 4096 4096 NT_STATUS_OK
Close 11716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11717 NT_STATUS_OK
SET_FILE_INFORMATION 11717 1004 NT_STATUS_OK
Close 11717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11718 NT_STATUS_OK
ReadX 11718 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11719 NT_STATUS_OK
Close 11719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11722 NT_STATUS_OK
WriteX 11722 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11722 258 NT_STATUS_OK
WriteX 11722 0 65536 65536 NT_STATUS_OK
WriteX 11722 65536 19979 19979 NT_STATUS_OK
Close 11722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11723 NT_STATUS_OK
ReadX 11723 0 4096 4096 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
QUERY_FILE_INFORMATION 11723 1004 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
SET_FILE_INFORMATION 11723 1004 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
Close 11723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11724 NT_STATUS_OK
ReadX 11724 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11725 NT_STATUS_OK
ReadX 11725 0 4096 4096 NT_STATUS_OK
Close 11724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11726 NT_STATUS_OK
ReadX 11726 0 4096 4096 NT_STATUS_OK
Close 11726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11727 NT_STATUS_OK
ReadX 11727 0 4096 4096 NT_STATUS_OK
Close 11727 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11728 NT_STATUS_OK
ReadX 11728 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11728 1004 NT_STATUS_OK
WriteX 11728 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11729 NT_STATUS_OK
Close 11729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11725 NT_STATUS_OK
Close 11728 NT_STATUS_OK
Close 11718 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11731 NT_STATUS_OK
Close 11731 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11734 NT_STATUS_OK
WriteX 11734 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11734 258 NT_STATUS_OK
WriteX 11734 0 65536 65536 NT_STATUS_OK
WriteX 11734 65536 17654 17654 NT_STATUS_OK
Close 11734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11735 NT_STATUS_OK
ReadX 11735 0 4096 4096 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
Flush 11735 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
Flush 11735 NT_STATUS_OK
QUERY_FILE_INFORMATION 11735 1004 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
Flush 11735 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
Flush 11735 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
Flush 11735 NT_STATUS_OK
SET_FILE_INFORMATION 11735 1004 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
Flush 11735 NT_STATUS_OK
Close 11735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11736 NT_STATUS_OK
SET_FILE_INFORMATION 11736 1004 NT_STATUS_OK
Close 11736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11737 NT_STATUS_OK
ReadX 11737 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11738 NT_STATUS_OK
Close 11738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11740 NT_STATUS_OK
ReadX 11740 0 4096 4096 NT_STATUS_OK
ReadX 11740 4096 4096 4096 NT_STATUS_OK
ReadX 11740 8192 4096 4096 NT_STATUS_OK
ReadX 11740 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11740 16384 4096 4096 NT_STATUS_OK
ReadX 11740 20480 4096 4096 NT_STATUS_OK
ReadX 11740 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11741 NT_STATUS_OK
ReadX 11741 0 4096 4096 NT_STATUS_OK
Close 11741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11742 NT_STATUS_OK
ReadX 11742 0 4096 4096 NT_STATUS_OK
Close 11742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11743 NT_STATUS_OK
ReadX 11743 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11743 1004 NT_STATUS_OK
WriteX 11743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11744 NT_STATUS_OK
Close 11744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11743 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11746 NT_STATUS_OK
Close 11746 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11749 NT_STATUS_OK
WriteX 11749 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11749 258 NT_STATUS_OK
WriteX 11749 0 65536 65536 NT_STATUS_OK
WriteX 11749 65536 19490 19490 NT_STATUS_OK
Close 11749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11750 NT_STATUS_OK
ReadX 11750 0 4096 4096 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
QUERY_FILE_INFORMATION 11750 1004 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
SET_FILE_INFORMATION 11750 1004 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
Close 11750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11751 NT_STATUS_OK
SET_FILE_INFORMATION 11751 1004 NT_STATUS_OK
Close 11751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11753 NT_STATUS_OK
Close 11753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11755 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11755 0 4096 4096 NT_STATUS_OK
Close 11755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11756 NT_STATUS_OK
ReadX 11756 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 0 4096 4096 NT_STATUS_OK
ReadX 11757 4096 4096 4096 NT_STATUS_OK
ReadX 11757 8192 4096 4096 NT_STATUS_OK
ReadX 11757 12288 4096 4096 NT_STATUS_OK
ReadX 11757 16384 4096 4096 NT_STATUS_OK
ReadX 11757 20480 4096 4096 NT_STATUS_OK
ReadX 11757 24576 4096 4096 NT_STATUS_OK
ReadX 11757 28672 4096 4096 NT_STATUS_OK
ReadX 11757 32768 4096 4096 NT_STATUS_OK
ReadX 11757 36864 4096 4096 NT_STATUS_OK
ReadX 11757 40960 4096 4096 NT_STATUS_OK
ReadX 11757 45056 4096 4096 NT_STATUS_OK
ReadX 11757 49152 4096 4096 NT_STATUS_OK
ReadX 11757 53248 4096 4096 NT_STATUS_OK
ReadX 11757 57344 4096 4096 NT_STATUS_OK
ReadX 11757 61440 4096 4096 NT_STATUS_OK
ReadX 11757 65536 4096 4096 NT_STATUS_OK
ReadX 11757 69632 4096 4096 NT_STATUS_OK
ReadX 11757 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11757 1004 NT_STATUS_OK
WriteX 11757 0 4096 4096 NT_STATUS_OK
Close 11757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11758 NT_STATUS_OK
SET_FILE_INFORMATION 11758 1004 NT_STATUS_OK
Close 11758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11760 NT_STATUS_OK
Close 11760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11752 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11763 NT_STATUS_OK
WriteX 11763 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11763 258 NT_STATUS_OK
WriteX 11763 0 65536 65536 NT_STATUS_OK
WriteX 11763 65536 8866 8866 NT_STATUS_OK
Close 11763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11764 NT_STATUS_OK
ReadX 11764 0 4096 4096 NT_STATUS_OK
WriteX 11764 0 4096 4096 NT_STATUS_OK
Flush 11764 NT_STATUS_OK
SET_FILE_INFORMATION 11764 1004 NT_STATUS_OK
WriteX 11764 0 4096 4096 NT_STATUS_OK
Flush 11764 NT_STATUS_OK
Close 11764 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11765 NT_STATUS_OK
ReadX 11765 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11765 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11766 NT_STATUS_OK
ReadX 11766 0 4096 4096 NT_STATUS_OK
Close 11766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11767 NT_STATUS_OK
ReadX 11767 0 4096 4096 NT_STATUS_OK
Close 11767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11768 NT_STATUS_OK
ReadX 11768 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11768 1004 NT_STATUS_OK
WriteX 11768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11769 NT_STATUS_OK
Close 11769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11768 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11771 NT_STATUS_OK
Close 11771 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11774 NT_STATUS_OK
WriteX 11774 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11774 258 NT_STATUS_OK
WriteX 11774 0 65536 65536 NT_STATUS_OK
WriteX 11774 65536 9298 9298 NT_STATUS_OK
Close 11774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11775 NT_STATUS_OK
ReadX 11775 0 4096 4096 NT_STATUS_OK
WriteX 11775 0 4096 4096 NT_STATUS_OK
Flush 11775 NT_STATUS_OK
SET_FILE_INFORMATION 11775 1004 NT_STATUS_OK
WriteX 11775 0 4096 4096 NT_STATUS_OK
Flush 11775 NT_STATUS_OK
Close 11775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11776 NT_STATUS_OK
SET_FILE_INFORMATION 11776 1004 NT_STATUS_OK
Close 11776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11777 NT_STATUS_OK
ReadX 11777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11778 NT_STATUS_OK
Close 11778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11781 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11781 0 4096 4096 NT_STATUS_OK
Close 11781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11782 NT_STATUS_OK
ReadX 11782 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11782 4096 4096 4096 NT_STATUS_OK
ReadX 11782 8192 4096 4096 NT_STATUS_OK
ReadX 11782 12288 4096 4096 NT_STATUS_OK
ReadX 11782 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11783 NT_STATUS_OK
ReadX 11783 0 4096 4096 NT_STATUS_OK
Close 11783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11784 NT_STATUS_OK
ReadX 11784 0 4096 4096 NT_STATUS_OK
Close 11784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11785 NT_STATUS_OK
ReadX 11785 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11785 1004 NT_STATUS_OK
WriteX 11785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11786 NT_STATUS_OK
Close 11786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11782 NT_STATUS_OK
Close 11785 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11788 NT_STATUS_OK
Close 11788 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11791 NT_STATUS_OK
WriteX 11791 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11791 258 NT_STATUS_OK
WriteX 11791 0 65536 65536 NT_STATUS_OK
WriteX 11791 65536 11540 11540 NT_STATUS_OK
Close 11791 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11792 NT_STATUS_OK
ReadX 11792 0 4096 4096 NT_STATUS_OK
WriteX 11792 0 4096 4096 NT_STATUS_OK
Flush 11792 NT_STATUS_OK
SET_FILE_INFORMATION 11792 1004 NT_STATUS_OK
WriteX 11792 0 4096 4096 NT_STATUS_OK
Flush 11792 NT_STATUS_OK
Close 11792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11793 NT_STATUS_OK
SET_FILE_INFORMATION 11793 1004 NT_STATUS_OK
Close 11793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11794 NT_STATUS_OK
ReadX 11794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11795 NT_STATUS_OK
Close 11795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11797 NT_STATUS_OK
ReadX 11797 61440 4096 4096 NT_STATUS_OK
ReadX 11797 126976 4096 4096 NT_STATUS_OK
WriteX 11797 0 65536 65536 NT_STATUS_OK
WriteX 11797 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11798 NT_STATUS_OK
ReadX 11798 61440 4096 4096 NT_STATUS_OK
ReadX 11798 126976 4096 4096 NT_STATUS_OK
ReadX 11798 192512 4096 4096 NT_STATUS_OK
ReadX 11798 258048 4096 4096 NT_STATUS_OK
WriteX 11798 0 65536 65536 NT_STATUS_OK
WriteX 11798 65536 65536 65536 NT_STATUS_OK
WriteX 11798 131072 65536 65536 NT_STATUS_OK
WriteX 11798 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11799 NT_STATUS_OK
ReadX 11799 61440 4096 4096 NT_STATUS_OK
ReadX 11799 126976 4096 4096 NT_STATUS_OK
ReadX 11799 192512 4096 4096 NT_STATUS_OK
ReadX 11799 258048 4096 4096 NT_STATUS_OK
ReadX 11799 323584 4096 4096 NT_STATUS_OK
ReadX 11799 389120 4096 4096 NT_STATUS_OK
ReadX 11799 454656 4096 4096 NT_STATUS_OK
ReadX 11799 520192 4096 4096 NT_STATUS_OK
WriteX 11799 0 65536 65536 NT_STATUS_OK
WriteX 11799 65536 65536 65536 NT_STATUS_OK
WriteX 11799 131072 65536 65536 NT_STATUS_OK
WriteX 11799 196608 65536 65536 NT_STATUS_OK
WriteX 11799 262144 65536 65536 NT_STATUS_OK
WriteX 11799 327680 65536 65536 NT_STATUS_OK
WriteX 11799 393216 65536 65536 NT_STATUS_OK
WriteX 11799 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11800 NT_STATUS_OK
ReadX 11800 0 4096 4096 NT_STATUS_OK
ReadX 11800 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11801 NT_STATUS_OK
WriteX 11801 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11801 258 NT_STATUS_OK
WriteX 11801 0 53 53 NT_STATUS_OK
Close 11801 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11802 NT_STATUS_OK
Close 11802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11794 NT_STATUS_OK
Close 11740 NT_STATUS_OK
Close 11797 NT_STATUS_OK
Close 11798 NT_STATUS_OK
Close 11799 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11800 8192 4096 4096 NT_STATUS_OK
ReadX 11800 12288 4096 4096 NT_STATUS_OK
WriteX 11804 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11804 258 NT_STATUS_OK
ReadX 11800 16384 4096 4096 NT_STATUS_OK
ReadX 11800 20480 4096 4096 NT_STATUS_OK
WriteX 11804 0 15360 15360 NT_STATUS_OK
Close 11804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11805 NT_STATUS_OK
ReadX 11805 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11805 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11805 1004 NT_STATUS_OK
WriteX 11805 0 4096 4096 NT_STATUS_OK
Close 11805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11806 NT_STATUS_OK
Close 11806 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11808 NT_STATUS_OK
ReadX 11808 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11809 NT_STATUS_OK
Close 11809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11808 4096 4096 4096 NT_STATUS_OK
ReadX 11808 8192 4096 4096 NT_STATUS_OK
ReadX 11808 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11811 NT_STATUS_OK
ReadX 11811 0 4096 4096 NT_STATUS_OK
ReadX 11811 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11812 NT_STATUS_OK
ReadX 11812 0 4096 4096 NT_STATUS_OK
ReadX 11812 4096 4096 4096 NT_STATUS_OK
ReadX 11812 8192 4096 4096 NT_STATUS_OK
Close 11811 NT_STATUS_OK
Close 11812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11813 NT_STATUS_OK
WriteX 11813 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11813 258 NT_STATUS_OK
WriteX 11813 0 15360 15360 NT_STATUS_OK
Close 11813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11814 NT_STATUS_OK
ReadX 11814 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11814 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11814 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11815 NT_STATUS_OK
Close 11815 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11817 NT_STATUS_OK
ReadX 11817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11818 NT_STATUS_OK
SET_FILE_INFORMATION 11818 1004 NT_STATUS_OK
Close 11818 NT_STATUS_OK
WriteX 11814 0 4096 4096 NT_STATUS_OK
Close 11814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11819 NT_STATUS_OK
Close 11819 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11821 NT_STATUS_OK
ReadX 11821 0 4096 4096 NT_STATUS_OK
ReadX 11821 4096 4096 4096 NT_STATUS_OK
ReadX 11821 8192 4096 4096 NT_STATUS_OK
ReadX 11821 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11821 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11821 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11822 NT_STATUS_OK
ReadX 11822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11823 NT_STATUS_OK
WriteX 11823 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11823 258 NT_STATUS_OK
WriteX 11823 0 53 53 NT_STATUS_OK
Close 11823 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11824 NT_STATUS_OK
Close 11824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11822 4096 4096 4096 NT_STATUS_OK
ReadX 11822 8192 4096 4096 NT_STATUS_OK
ReadX 11822 12288 4096 4096 NT_STATUS_OK
WriteX 11826 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11826 258 NT_STATUS_OK
WriteX 11826 0 12006 12006 NT_STATUS_OK
Close 11826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11827 NT_STATUS_OK
ReadX 11827 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
WriteX 11827 0 4096 4096 NT_STATUS_OK
Close 11827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11828 NT_STATUS_OK
Close 11828 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11830 NT_STATUS_OK
ReadX 11830 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11831 NT_STATUS_OK
Close 11831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11830 4096 4096 4096 NT_STATUS_OK
ReadX 11830 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11833 NT_STATUS_OK
WriteX 11833 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11833 258 NT_STATUS_OK
WriteX 11833 0 11991 11991 NT_STATUS_OK
Close 11833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11834 NT_STATUS_OK
ReadX 11834 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11834 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11834 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11822 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11835 NT_STATUS_OK
Close 11835 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11837 NT_STATUS_OK
ReadX 11837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11838 NT_STATUS_OK
SET_FILE_INFORMATION 11838 1004 NT_STATUS_OK
Close 11838 NT_STATUS_OK
WriteX 11834 0 4096 4096 NT_STATUS_OK
Close 11834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11839 NT_STATUS_OK
Close 11839 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11841 NT_STATUS_OK
ReadX 11841 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11842 NT_STATUS_OK
Close 11842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11841 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11841 1004 NT_STATUS_OK
ReadX 11841 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11841 1004 NT_STATUS_OK
WriteX 11841 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11841 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11841 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11841 1004 NT_STATUS_OK
Close 11817 NT_STATUS_OK
WriteX 11821 0 19054 19054 NT_STATUS_OK
WriteX 11841 0 12288 12288 NT_STATUS_OK
Close 11837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11844 NT_STATUS_OK
Close 11844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11821 NT_STATUS_OK
Close 11841 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11846 NT_STATUS_OK
Close 11846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11848 NT_STATUS_OK
ReadX 11848 0 61440 61440 NT_STATUS_OK
ReadX 11848 61440 4096 4096 NT_STATUS_OK
ReadX 11848 65536 61440 61440 NT_STATUS_OK
ReadX 11848 126976 4096 4096 NT_STATUS_OK
ReadX 11848 131072 61440 61440 NT_STATUS_OK
ReadX 11848 192512 4096 4096 NT_STATUS_OK
ReadX 11848 196608 61440 61440 NT_STATUS_OK
ReadX 11848 258048 4096 4096 NT_STATUS_OK
ReadX 11848 262144 61440 61440 NT_STATUS_OK
ReadX 11848 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11849 NT_STATUS_OK
ReadX 11849 0 61440 61440 NT_STATUS_OK
ReadX 11849 61440 4096 4096 NT_STATUS_OK
ReadX 11849 65536 61440 61440 NT_STATUS_OK
ReadX 11849 126976 4096 4096 NT_STATUS_OK
ReadX 11849 131072 61440 61440 NT_STATUS_OK
ReadX 11849 192512 4096 4096 NT_STATUS_OK
ReadX 11849 196608 61440 61440 NT_STATUS_OK
ReadX 11849 258048 4096 4096 NT_STATUS_OK
ReadX 11849 262144 61440 61440 NT_STATUS_OK
ReadX 11849 323584 4096 4096 NT_STATUS_OK
ReadX 11849 327680 61440 61440 NT_STATUS_OK
ReadX 11849 389120 4096 4096 NT_STATUS_OK
ReadX 11849 393216 61440 61440 NT_STATUS_OK
ReadX 11849 454656 4096 4096 NT_STATUS_OK
ReadX 11849 458752 61440 61440 NT_STATUS_OK
ReadX 11849 520192 4096 4096 NT_STATUS_OK
ReadX 11849 524288 61440 61440 NT_STATUS_OK
ReadX 11849 585728 4096 4096 NT_STATUS_OK
ReadX 11849 589824 61440 61440 NT_STATUS_OK
ReadX 11849 651264 4096 4096 NT_STATUS_OK
ReadX 11849 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11850 NT_STATUS_OK
ReadX 11850 0 61440 61440 NT_STATUS_OK
ReadX 11850 61440 4096 4096 NT_STATUS_OK
ReadX 11850 65536 61440 61440 NT_STATUS_OK
ReadX 11850 126976 4096 4096 NT_STATUS_OK
ReadX 11850 131072 61440 61440 NT_STATUS_OK
ReadX 11850 192512 4096 4096 NT_STATUS_OK
ReadX 11850 196608 61440 61440 NT_STATUS_OK
ReadX 11850 258048 4096 4096 NT_STATUS_OK
ReadX 11850 262144 61440 61440 NT_STATUS_OK
ReadX 11850 323584 4096 4096 NT_STATUS_OK
ReadX 11850 327680 61440 61440 NT_STATUS_OK
ReadX 11850 389120 4096 4096 NT_STATUS_OK
ReadX 11850 393216 61440 61440 NT_STATUS_OK
ReadX 11850 454656 4096 4096 NT_STATUS_OK
ReadX 11850 458752 61440 61440 NT_STATUS_OK
ReadX 11850 520192 4096 4096 NT_STATUS_OK
ReadX 11850 524288 61440 61440 NT_STATUS_OK
ReadX 11850 585728 4096 4096 NT_STATUS_OK
ReadX 11850 589824 61440 61440 NT_STATUS_OK
ReadX 11850 651264 4096 4096 NT_STATUS_OK
ReadX 11850 655360 61440 61440 NT_STATUS_OK
ReadX 11850 716800 4096 4096 NT_STATUS_OK
ReadX 11850 720896 61440 61440 NT_STATUS_OK
ReadX 11850 782336 4096 4096 NT_STATUS_OK
ReadX 11850 786432 61440 61440 NT_STATUS_OK
ReadX 11850 847872 4096 4096 NT_STATUS_OK
ReadX 11850 851968 61440 61440 NT_STATUS_OK
ReadX 11850 913408 4096 4096 NT_STATUS_OK
ReadX 11850 917504 61440 61440 NT_STATUS_OK
ReadX 11850 978944 4096 4096 NT_STATUS_OK
ReadX 11850 983040 61440 61440 NT_STATUS_OK
ReadX 11850 1044480 4096 4096 NT_STATUS_OK
ReadX 11850 1048576 61440 61440 NT_STATUS_OK
ReadX 11850 1110016 4096 4096 NT_STATUS_OK
ReadX 11850 1114112 61440 61440 NT_STATUS_OK
ReadX 11850 1175552 4096 4096 NT_STATUS_OK
ReadX 11850 1179648 61440 61440 NT_STATUS_OK
ReadX 11850 1241088 4096 4096 NT_STATUS_OK
ReadX 11850 1245184 61440 61440 NT_STATUS_OK
ReadX 11850 1306624 4096 4096 NT_STATUS_OK
ReadX 11850 1310720 61440 61440 NT_STATUS_OK
ReadX 11850 1372160 4096 4096 NT_STATUS_OK
ReadX 11850 1376256 61440 61440 NT_STATUS_OK
ReadX 11850 1437696 4096 4096 NT_STATUS_OK
ReadX 11850 1441792 61440 61440 NT_STATUS_OK
ReadX 11850 1503232 4096 4096 NT_STATUS_OK
ReadX 11850 1507328 61440 61440 NT_STATUS_OK
ReadX 11850 1568768 4096 4096 NT_STATUS_OK
ReadX 11850 1572864 61440 61440 NT_STATUS_OK
ReadX 11850 1634304 4096 4096 NT_STATUS_OK
ReadX 11850 1638400 61440 61440 NT_STATUS_OK
ReadX 11850 1699840 4096 4096 NT_STATUS_OK
ReadX 11850 1703936 61440 61440 NT_STATUS_OK
ReadX 11850 1765376 4096 4096 NT_STATUS_OK
ReadX 11850 1769472 61440 61440 NT_STATUS_OK
ReadX 11850 1830912 4096 4096 NT_STATUS_OK
ReadX 11850 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11851 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11852 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11853 NT_STATUS_OK
ReadX 11853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11854 NT_STATUS_OK
ReadX 11854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11855 NT_STATUS_OK
ReadX 11855 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11856 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11857 NT_STATUS_OK
QUERY_FILE_INFORMATION 11857 1004 NT_STATUS_OK
WriteX 11857 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11857 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11858 NT_STATUS_OK
Close 11858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11859 NT_STATUS_OK
WriteX 11859 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11859 258 NT_STATUS_OK
WriteX 11859 0 491 491 NT_STATUS_OK
Close 11859 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11860 NT_STATUS_OK
ReadX 11860 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11857 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11862 NT_STATUS_OK
Close 11862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11863 NT_STATUS_OK
WriteX 11863 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11863 258 NT_STATUS_OK
WriteX 11863 0 543 543 NT_STATUS_OK
Close 11863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11864 NT_STATUS_OK
ReadX 11864 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11848 NT_STATUS_OK
Close 11849 NT_STATUS_OK
Close 11850 NT_STATUS_OK
Close 11864 NT_STATUS_OK
Close 11852 NT_STATUS_OK
Close 11853 NT_STATUS_OK
Close 11854 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11867 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11867 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11868 NT_STATUS_OK
ReadX 11868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11869 NT_STATUS_OK
ReadX 11869 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11870 NT_STATUS_OK
ReadX 11870 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11871 NT_STATUS_OK
ReadX 11871 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11872 NT_STATUS_OK
ReadX 11872 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11876 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11877 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 1004 NT_STATUS_OK
WriteX 11877 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 258 NT_STATUS_OK
WriteX 11877 0 2048 2048 NT_STATUS_OK
Close 11877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11878 NT_STATUS_OK
ReadX 11878 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11878 0 4096 4096 NT_STATUS_OK
Flush 11878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11878 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11882 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11883 NT_STATUS_OK
WriteX 11883 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11883 258 NT_STATUS_OK
WriteX 11883 0 2048 2048 NT_STATUS_OK
Close 11883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11884 NT_STATUS_OK
ReadX 11884 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11888 NT_STATUS_OK
Close 11888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11889 NT_STATUS_OK
WriteX 11889 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11889 258 NT_STATUS_OK
WriteX 11889 0 2048 2048 NT_STATUS_OK
Close 11889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11890 NT_STATUS_OK
ReadX 11890 0 2048 2048 NT_STATUS_OK
ReadX 11868 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11872 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11884 0 4096 4096 NT_STATUS_OK
WriteX 11868 0 8192 8192 NT_STATUS_OK
WriteX 11869 0 4096 4096 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
ReadX 11884 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11893 NT_STATUS_OK
ReadX 11893 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11894 NT_STATUS_OK
QUERY_FILE_INFORMATION 11894 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Close 11869 NT_STATUS_OK
Close 11870 NT_STATUS_OK
Close 11871 NT_STATUS_OK
Close 11884 NT_STATUS_OK
Close 11868 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11896 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11897 NT_STATUS_OK
ReadX 11897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11898 NT_STATUS_OK
ReadX 11898 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11899 NT_STATUS_OK
ReadX 11899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11900 NT_STATUS_OK
ReadX 11900 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11901 NT_STATUS_OK
ReadX 11901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11902 NT_STATUS_OK
ReadX 11902 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11903 NT_STATUS_OK
ReadX 11903 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11904 NT_STATUS_OK
ReadX 11904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11905 NT_STATUS_OK
ReadX 11905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11906 NT_STATUS_OK
ReadX 11906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11907 NT_STATUS_OK
ReadX 11907 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11908 NT_STATUS_OK
ReadX 11908 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11909 NT_STATUS_OK
ReadX 11909 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11913 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11914 NT_STATUS_OK
QUERY_FILE_INFORMATION 11914 1004 NT_STATUS_OK
WriteX 11914 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11914 258 NT_STATUS_OK
WriteX 11914 0 2048 2048 NT_STATUS_OK
Close 11914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11915 NT_STATUS_OK
ReadX 11915 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11916 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11916 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11917 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11917 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11921 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11922 NT_STATUS_OK
QUERY_FILE_INFORMATION 11922 1004 NT_STATUS_OK
WriteX 11922 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11922 258 NT_STATUS_OK
WriteX 11922 0 2048 2048 NT_STATUS_OK
Close 11922 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11923 NT_STATUS_OK
ReadX 11923 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11915 0 4096 4096 NT_STATUS_OK
Flush 11915 NT_STATUS_OK
WriteX 11923 0 4096 4096 NT_STATUS_OK
Flush 11923 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11915 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11923 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11917 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11924 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11925 NT_STATUS_OK
WriteX 11925 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11925 258 NT_STATUS_OK
WriteX 11925 0 4096 4096 NT_STATUS_OK
Close 11925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11926 NT_STATUS_OK
ReadX 11926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11927 NT_STATUS_OK
Close 11927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11928 NT_STATUS_OK
WriteX 11928 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11928 258 NT_STATUS_OK
WriteX 11928 0 4096 4096 NT_STATUS_OK
Close 11928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11929 NT_STATUS_OK
ReadX 11929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11929 0 4096 4096 NT_STATUS_OK
Close 11926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11909 NT_STATUS_OK
Close 11903 NT_STATUS_OK
Close 11917 NT_STATUS_OK
Close 11906 NT_STATUS_OK
Close 11907 NT_STATUS_OK
Close 11908 NT_STATUS_OK
Close 11904 NT_STATUS_OK
Close 11897 NT_STATUS_OK
Close 11898 NT_STATUS_OK
Close 11901 NT_STATUS_OK
Close 11902 NT_STATUS_OK
Close 11899 NT_STATUS_OK
Close 11900 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11932 NT_STATUS_OK
Close 11932 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11934 NT_STATUS_OK
ReadX 11934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11935 NT_STATUS_OK
Close 11935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11936 NT_STATUS_OK
WriteX 11936 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11936 258 NT_STATUS_OK
WriteX 11936 0 2048 2048 NT_STATUS_OK
Close 11936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11937 NT_STATUS_OK
ReadX 11937 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11938 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11939 NT_STATUS_OK
ReadX 11939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11940 NT_STATUS_OK
ReadX 11940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11941 NT_STATUS_OK
ReadX 11941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11942 NT_STATUS_OK
ReadX 11942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11943 NT_STATUS_OK
ReadX 11943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11944 NT_STATUS_OK
ReadX 11944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11945 NT_STATUS_OK
ReadX 11945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11946 NT_STATUS_OK
ReadX 11946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11947 NT_STATUS_OK
ReadX 11947 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11948 NT_STATUS_OK
ReadX 11948 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11949 NT_STATUS_OK
ReadX 11949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11950 NT_STATUS_OK
ReadX 11950 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11951 NT_STATUS_OK
QUERY_FILE_INFORMATION 11951 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11934 NT_STATUS_OK
Close 11937 NT_STATUS_OK
Close 11949 NT_STATUS_OK
Close 11944 NT_STATUS_OK
Close 11945 NT_STATUS_OK
Close 11946 NT_STATUS_OK
Close 11947 NT_STATUS_OK
Close 11948 NT_STATUS_OK
Close 11950 NT_STATUS_OK
Close 11938 NT_STATUS_OK
Close 11939 NT_STATUS_OK
Close 11942 NT_STATUS_OK
Close 11943 NT_STATUS_OK
Close 11940 NT_STATUS_OK
Close 11941 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11953 NT_STATUS_OK
QUERY_FILE_INFORMATION 11953 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11955 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11956 NT_STATUS_OK
ReadX 11956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11957 NT_STATUS_OK
ReadX 11957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11958 NT_STATUS_OK
ReadX 11958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11959 NT_STATUS_OK
ReadX 11959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11960 NT_STATUS_OK
ReadX 11960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11961 NT_STATUS_OK
ReadX 11961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11962 NT_STATUS_OK
ReadX 11962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11963 NT_STATUS_OK
ReadX 11963 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11964 NT_STATUS_OK
ReadX 11964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11965 NT_STATUS_OK
ReadX 11965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11966 NT_STATUS_OK
ReadX 11966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11967 NT_STATUS_OK
ReadX 11967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11968 NT_STATUS_OK
ReadX 11968 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11972 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11973 NT_STATUS_OK
QUERY_FILE_INFORMATION 11973 1004 NT_STATUS_OK
WriteX 11973 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11973 258 NT_STATUS_OK
WriteX 11973 0 2048 2048 NT_STATUS_OK
Close 11973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11974 NT_STATUS_OK
ReadX 11974 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11975 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11977 NT_STATUS_OK
ReadX 11977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11978 NT_STATUS_OK
ReadX 11978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11979 NT_STATUS_OK
ReadX 11979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11980 NT_STATUS_OK
ReadX 11980 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11984 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11985 NT_STATUS_OK
QUERY_FILE_INFORMATION 11985 1004 NT_STATUS_OK
WriteX 11985 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11985 258 NT_STATUS_OK
WriteX 11985 0 2048 2048 NT_STATUS_OK
Close 11985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11986 NT_STATUS_OK
ReadX 11986 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11988 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11988 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11992 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11993 NT_STATUS_OK
QUERY_FILE_INFORMATION 11993 1004 NT_STATUS_OK
WriteX 11993 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11993 258 NT_STATUS_OK
WriteX 11993 0 2048 2048 NT_STATUS_OK
Close 11993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11994 NT_STATUS_OK
ReadX 11994 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11974 0 4096 4096 NT_STATUS_OK
Flush 11974 NT_STATUS_OK
WriteX 11986 0 4096 4096 NT_STATUS_OK
Flush 11986 NT_STATUS_OK
WriteX 11994 0 4096 4096 NT_STATUS_OK
Flush 11994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11974 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11986 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11994 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11976 4096 16384 16384 NT_STATUS_OK
ReadX 11956 4096 16384 16384 NT_STATUS_OK
ReadX 11988 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11995 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11996 NT_STATUS_OK
ReadX 11996 0 2048 2048 NT_STATUS_OK
WriteX 11996 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11997 NT_STATUS_OK
QUERY_FILE_INFORMATION 11997 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11996 NT_STATUS_OK
Close 11980 NT_STATUS_OK
Close 11968 NT_STATUS_OK
Close 11960 NT_STATUS_OK
Close 11976 NT_STATUS_OK
Close 11977 NT_STATUS_OK
Close 11978 NT_STATUS_OK
Close 11979 NT_STATUS_OK
Close 11967 NT_STATUS_OK
Close 11988 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Close 11965 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Close 11963 NT_STATUS_OK
Close 11964 NT_STATUS_OK
Close 11956 NT_STATUS_OK
Close 11957 NT_STATUS_OK
Close 11958 NT_STATUS_OK
Close 11959 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11999 NT_STATUS_OK
QUERY_FILE_INFORMATION 11999 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12001 NT_STATUS_OK
QUERY_FILE_INFORMATION 12001 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12003 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12004 NT_STATUS_OK
ReadX 12004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12005 NT_STATUS_OK
ReadX 12005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12006 NT_STATUS_OK
ReadX 12006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12007 NT_STATUS_OK
ReadX 12007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12008 NT_STATUS_OK
ReadX 12008 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12004 4096 16384 16384 NT_STATUS_OK
WriteX 12004 0 4096 4096 NT_STATUS_OK
WriteX 12005 0 4096 4096 NT_STATUS_OK
WriteX 12006 0 4096 4096 NT_STATUS_OK
WriteX 12007 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12010 NT_STATUS_OK
ReadX 12010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12011 NT_STATUS_OK
ReadX 12011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12012 NT_STATUS_OK
ReadX 12012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12013 NT_STATUS_OK
ReadX 12013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12014 NT_STATUS_OK
ReadX 12014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12015 NT_STATUS_OK
ReadX 12015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12016 NT_STATUS_OK
ReadX 12016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12017 NT_STATUS_OK
ReadX 12017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12018 NT_STATUS_OK
ReadX 12018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12019 NT_STATUS_OK
ReadX 12019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12020 NT_STATUS_OK
ReadX 12020 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12021 NT_STATUS_OK
ReadX 12021 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12022 NT_STATUS_OK
ReadX 12022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12023 NT_STATUS_OK
ReadX 12023 0 8192 8192 NT_STATUS_OK
ReadX 12010 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12024 0 4096 4096 NT_STATUS_OK
ReadX 12024 4096 4096 4096 NT_STATUS_OK
ReadX 12024 8192 4096 4096 NT_STATUS_OK
WriteX 12010 0 4096 4096 NT_STATUS_OK
WriteX 12011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12025 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12025 0 4096 4096 NT_STATUS_OK
ReadX 12025 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12004 0 4096 4096 NT_STATUS_OK
WriteX 12005 0 4096 4096 NT_STATUS_OK
WriteX 12006 0 4096 4096 NT_STATUS_OK
WriteX 12007 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12029 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12030 NT_STATUS_OK
QUERY_FILE_INFORMATION 12030 1004 NT_STATUS_OK
WriteX 12030 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12030 258 NT_STATUS_OK
WriteX 12030 0 2048 2048 NT_STATUS_OK
Close 12030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12031 NT_STATUS_OK
ReadX 12031 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12031 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12031 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12032 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12033 NT_STATUS_OK
ReadX 12033 0 4096 4096 NT_STATUS_OK
ReadX 12033 4096 4096 4096 NT_STATUS_OK
WriteX 12033 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12031 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12034 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12035 NT_STATUS_OK
ReadX 12035 0 4096 4096 NT_STATUS_OK
ReadX 12035 4096 4096 4096 NT_STATUS_OK
WriteX 12035 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12036 NT_STATUS_OK
QUERY_FILE_INFORMATION 12036 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12023 NT_STATUS_OK
Close 12008 NT_STATUS_OK
Close 12004 NT_STATUS_OK
Close 12005 NT_STATUS_OK
Close 12006 NT_STATUS_OK
Close 12007 NT_STATUS_OK
Close 12016 NT_STATUS_OK
Close 12021 NT_STATUS_OK
Close 12017 NT_STATUS_OK
Close 12018 NT_STATUS_OK
Close 12019 NT_STATUS_OK
Close 12020 NT_STATUS_OK
Close 12022 NT_STATUS_OK
Close 12010 NT_STATUS_OK
Close 12011 NT_STATUS_OK
Close 12014 NT_STATUS_OK
Close 12015 NT_STATUS_OK
Close 12012 NT_STATUS_OK
Close 12013 NT_STATUS_OK
Close 12035 NT_STATUS_OK
Close 12024 NT_STATUS_OK
Close 12025 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12038 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12038 0 4096 4096 NT_STATUS_OK
ReadX 12038 4096 4096 4096 NT_STATUS_OK
ReadX 12038 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12039 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12040 NT_STATUS_OK
ReadX 12040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12041 NT_STATUS_OK
ReadX 12041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12042 NT_STATUS_OK
ReadX 12042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12043 NT_STATUS_OK
ReadX 12043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12044 NT_STATUS_OK
ReadX 12044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12045 NT_STATUS_OK
ReadX 12045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12046 NT_STATUS_OK
ReadX 12046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12047 NT_STATUS_OK
ReadX 12047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12048 NT_STATUS_OK
ReadX 12048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12049 NT_STATUS_OK
ReadX 12049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12050 NT_STATUS_OK
ReadX 12050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12051 NT_STATUS_OK
ReadX 12051 0 4096 4096 NT_STATUS_OK
ReadX 12039 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12055 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12056 NT_STATUS_OK
QUERY_FILE_INFORMATION 12056 1004 NT_STATUS_OK
WriteX 12056 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12056 258 NT_STATUS_OK
WriteX 12056 0 2048 2048 NT_STATUS_OK
Close 12056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12057 NT_STATUS_OK
ReadX 12057 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12061 NT_STATUS_OK
Close 12061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12062 NT_STATUS_OK
QUERY_FILE_INFORMATION 12062 1004 NT_STATUS_OK
WriteX 12062 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12062 258 NT_STATUS_OK
WriteX 12062 0 2048 2048 NT_STATUS_OK
Close 12062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12063 NT_STATUS_OK
ReadX 12063 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12063 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12046 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12064 NT_STATUS_OK
QUERY_FILE_INFORMATION 12064 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12050 NT_STATUS_OK
Close 12045 NT_STATUS_OK
Close 12051 NT_STATUS_OK
Close 12039 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Close 12043 NT_STATUS_OK
Close 12044 NT_STATUS_OK
Close 12041 NT_STATUS_OK
Close 12042 NT_STATUS_OK
Close 12046 NT_STATUS_OK
Close 12047 NT_STATUS_OK
Close 12048 NT_STATUS_OK
Close 12049 NT_STATUS_OK
Close 12038 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12066 NT_STATUS_OK
QUERY_FILE_INFORMATION 12066 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12068 NT_STATUS_OK
ReadX 12068 61440 4096 4096 NT_STATUS_OK
ReadX 12068 126976 4096 4096 NT_STATUS_OK
WriteX 12068 0 65536 65536 NT_STATUS_OK
WriteX 12068 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12069 NT_STATUS_OK
ReadX 12069 61440 4096 4096 NT_STATUS_OK
ReadX 12069 126976 4096 4096 NT_STATUS_OK
ReadX 12069 192512 4096 4096 NT_STATUS_OK
ReadX 12069 258048 4096 4096 NT_STATUS_OK
WriteX 12069 0 65536 65536 NT_STATUS_OK
WriteX 12069 65536 65536 65536 NT_STATUS_OK
WriteX 12069 131072 65536 65536 NT_STATUS_OK
WriteX 12069 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12070 NT_STATUS_OK
ReadX 12070 61440 4096 4096 NT_STATUS_OK
ReadX 12070 126976 4096 4096 NT_STATUS_OK
ReadX 12070 192512 4096 4096 NT_STATUS_OK
ReadX 12070 258048 4096 4096 NT_STATUS_OK
ReadX 12070 323584 4096 4096 NT_STATUS_OK
ReadX 12070 389120 4096 4096 NT_STATUS_OK
ReadX 12070 454656 4096 4096 NT_STATUS_OK
ReadX 12070 520192 4096 4096 NT_STATUS_OK
WriteX 12070 0 65536 65536 NT_STATUS_OK
WriteX 12070 65536 65536 65536 NT_STATUS_OK
WriteX 12070 131072 65536 65536 NT_STATUS_OK
WriteX 12070 196608 65536 65536 NT_STATUS_OK
WriteX 12070 262144 65536 65536 NT_STATUS_OK
WriteX 12070 327680 65536 65536 NT_STATUS_OK
WriteX 12070 393216 65536 65536 NT_STATUS_OK
WriteX 12070 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12071 NT_STATUS_OK
ReadX 12071 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12071 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12071 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12071 8192 4096 4096 NT_STATUS_OK
ReadX 12071 12288 4096 4096 NT_STATUS_OK
ReadX 12071 16384 4096 4096 NT_STATUS_OK
ReadX 12071 20480 4096 4096 NT_STATUS_OK
ReadX 12071 24576 4096 4096 NT_STATUS_OK
ReadX 12071 28672 4096 4096 NT_STATUS_OK
ReadX 12071 32768 4096 4096 NT_STATUS_OK
ReadX 12071 36864 4096 4096 NT_STATUS_OK
ReadX 12071 40960 4096 4096 NT_STATUS_OK
ReadX 12071 45056 4096 4096 NT_STATUS_OK
ReadX 12071 49152 4096 4096 NT_STATUS_OK
ReadX 12071 53248 4096 4096 NT_STATUS_OK
ReadX 12071 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12071 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12072 NT_STATUS_OK
Close 12072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12068 NT_STATUS_OK
Close 12069 NT_STATUS_OK
Close 12070 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12074 NT_STATUS_OK
WriteX 12074 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12074 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12074 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12074 1004 NT_STATUS_OK
WriteX 12074 0 57088 57088 NT_STATUS_OK
WriteX 12074 0 4096 4096 NT_STATUS_OK
Flush 12074 NT_STATUS_OK
Close 12071 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12075 NT_STATUS_OK
SET_FILE_INFORMATION 12075 1004 NT_STATUS_OK
Close 12075 NT_STATUS_OK
SET_FILE_INFORMATION 12074 1004 NT_STATUS_OK
WriteX 12074 0 4096 4096 NT_STATUS_OK
Close 12074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12076 NT_STATUS_OK
Close 12076 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12078 NT_STATUS_OK
ReadX 12078 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12078 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12079 NT_STATUS_OK
WriteX 12079 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12079 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12079 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12079 1004 NT_STATUS_OK
WriteX 12079 0 51456 51456 NT_STATUS_OK
WriteX 12079 0 4096 4096 NT_STATUS_OK
Flush 12079 NT_STATUS_OK
SET_FILE_INFORMATION 12079 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12079 1004 NT_STATUS_OK
WriteX 12079 0 4096 4096 NT_STATUS_OK
Close 12079 NT_STATUS_OK
Close 12078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12081 NT_STATUS_OK
Close 12081 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12083 NT_STATUS_OK
ReadX 12083 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12083 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12085 NT_STATUS_OK
Close 12085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12088 NT_STATUS_OK
WriteX 12088 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12088 258 NT_STATUS_OK
WriteX 12088 0 53077 53077 NT_STATUS_OK
Close 12088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12089 NT_STATUS_OK
WriteX 12089 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12089 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12089 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12089 1004 NT_STATUS_OK
WriteX 12089 0 65536 65536 NT_STATUS_OK
WriteX 12089 65536 1856 1856 NT_STATUS_OK
WriteX 12089 0 4096 4096 NT_STATUS_OK
Flush 12089 NT_STATUS_OK
SET_FILE_INFORMATION 12089 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12089 1004 NT_STATUS_OK
WriteX 12089 0 4096 4096 NT_STATUS_OK
Close 12089 NT_STATUS_OK
Close 12083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12091 NT_STATUS_OK
Close 12091 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12093 NT_STATUS_OK
ReadX 12093 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12095 NT_STATUS_OK
Close 12095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12098 NT_STATUS_OK
WriteX 12098 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12098 258 NT_STATUS_OK
WriteX 12098 0 7983 7983 NT_STATUS_OK
Close 12098 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12100 NT_STATUS_OK
Close 12100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12103 NT_STATUS_OK
WriteX 12103 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12103 258 NT_STATUS_OK
WriteX 12103 0 65536 65536 NT_STATUS_OK
WriteX 12103 65536 65536 65536 NT_STATUS_OK
WriteX 12103 131072 65536 65536 NT_STATUS_OK
WriteX 12103 196608 65536 65536 NT_STATUS_OK
WriteX 12103 262144 65536 65536 NT_STATUS_OK
WriteX 12103 327680 65536 65536 NT_STATUS_OK
WriteX 12103 393216 65536 65536 NT_STATUS_OK
WriteX 12103 458752 46731 46731 NT_STATUS_OK
Close 12103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12104 NT_STATUS_OK
WriteX 12104 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12104 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12093 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12104 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12104 1004 NT_STATUS_OK
WriteX 12104 0 65536 65536 NT_STATUS_OK
WriteX 12104 65536 22848 22848 NT_STATUS_OK
WriteX 12104 0 4096 4096 NT_STATUS_OK
Flush 12104 NT_STATUS_OK
SET_FILE_INFORMATION 12104 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12104 1004 NT_STATUS_OK
WriteX 12104 0 4096 4096 NT_STATUS_OK
Close 12104 NT_STATUS_OK
Close 12093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12106 NT_STATUS_OK
Close 12106 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12108 NT_STATUS_OK
ReadX 12108 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12108 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12109 NT_STATUS_OK
ReadX 12109 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12109 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12109 1004 NT_STATUS_OK
ReadX 12109 8192 4096 4096 NT_STATUS_OK
ReadX 12109 12288 4096 4096 NT_STATUS_OK
ReadX 12109 16384 4096 4096 NT_STATUS_OK
ReadX 12109 20480 4096 4096 NT_STATUS_OK
ReadX 12109 24576 4096 4096 NT_STATUS_OK
ReadX 12109 28672 4096 4096 NT_STATUS_OK
ReadX 12109 32768 4096 4096 NT_STATUS_OK
ReadX 12109 36864 4096 4096 NT_STATUS_OK
ReadX 12109 40960 4096 4096 NT_STATUS_OK
ReadX 12109 45056 4096 4096 NT_STATUS_OK
ReadX 12109 49152 4096 4096 NT_STATUS_OK
ReadX 12109 53248 4096 4096 NT_STATUS_OK
ReadX 12109 57344 4096 4096 NT_STATUS_OK
ReadX 12109 61440 4096 4096 NT_STATUS_OK
ReadX 12109 65536 4096 4096 NT_STATUS_OK
ReadX 12109 69632 4096 4096 NT_STATUS_OK
ReadX 12109 73728 4096 4096 NT_STATUS_OK
ReadX 12109 77824 4096 4096 NT_STATUS_OK
ReadX 12109 81920 4096 4096 NT_STATUS_OK
ReadX 12109 86016 4096 4096 NT_STATUS_OK
ReadX 12109 90112 4096 4096 NT_STATUS_OK
ReadX 12109 94208 4096 4096 NT_STATUS_OK
ReadX 12109 98304 4096 4096 NT_STATUS_OK
ReadX 12109 102400 4096 4096 NT_STATUS_OK
ReadX 12109 106496 4096 4096 NT_STATUS_OK
ReadX 12109 110592 4096 4096 NT_STATUS_OK
ReadX 12109 114688 4096 4096 NT_STATUS_OK
ReadX 12109 118784 4096 4096 NT_STATUS_OK
ReadX 12109 122880 4096 4096 NT_STATUS_OK
ReadX 12109 126976 4096 4096 NT_STATUS_OK
ReadX 12109 131072 4096 4096 NT_STATUS_OK
ReadX 12109 135168 4096 4096 NT_STATUS_OK
ReadX 12109 139264 4096 4096 NT_STATUS_OK
ReadX 12109 143360 4096 4096 NT_STATUS_OK
ReadX 12109 147456 4096 4096 NT_STATUS_OK
ReadX 12109 151552 4096 4096 NT_STATUS_OK
ReadX 12109 155648 4096 4096 NT_STATUS_OK
ReadX 12109 159744 4096 4096 NT_STATUS_OK
ReadX 12109 163840 4096 4096 NT_STATUS_OK
ReadX 12109 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12109 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12110 NT_STATUS_OK
Close 12110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12108 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12112 NT_STATUS_OK
WriteX 12112 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12112 258 NT_STATUS_OK
Close 12109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12113 NT_STATUS_OK
SET_FILE_INFORMATION 12113 1004 NT_STATUS_OK
Close 12113 NT_STATUS_OK
WriteX 12112 0 42388 42388 NT_STATUS_OK
Close 12112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12114 NT_STATUS_OK
Close 12114 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12116 NT_STATUS_OK
ReadX 12116 0 4096 4096 NT_STATUS_OK
ReadX 12116 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12117 NT_STATUS_OK
WriteX 12117 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12117 258 NT_STATUS_OK
SET_FILE_INFORMATION 12117 1004 NT_STATUS_OK
WriteX 12117 0 42652 42652 NT_STATUS_OK
Close 12117 NT_STATUS_OK
Close 12116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12119 NT_STATUS_OK
Close 12119 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12121 NT_STATUS_OK
ReadX 12121 0 4096 4096 NT_STATUS_OK
ReadX 12121 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12123 NT_STATUS_OK
Close 12123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12126 NT_STATUS_OK
WriteX 12126 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12126 258 NT_STATUS_OK
WriteX 12126 0 65536 65536 NT_STATUS_OK
WriteX 12126 65536 49 49 NT_STATUS_OK
Close 12126 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12127 NT_STATUS_OK
ReadX 12127 0 61440 61440 NT_STATUS_OK
ReadX 12127 61440 4096 4096 NT_STATUS_OK
ReadX 12127 65536 61440 61440 NT_STATUS_OK
ReadX 12127 126976 4096 4096 NT_STATUS_OK
ReadX 12127 131072 61440 61440 NT_STATUS_OK
ReadX 12127 192512 4096 4096 NT_STATUS_OK
ReadX 12127 196608 61440 61440 NT_STATUS_OK
ReadX 12127 258048 4096 4096 NT_STATUS_OK
ReadX 12127 262144 61440 61440 NT_STATUS_OK
ReadX 12127 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12128 NT_STATUS_OK
ReadX 12128 0 61440 61440 NT_STATUS_OK
ReadX 12128 61440 4096 4096 NT_STATUS_OK
ReadX 12128 65536 61440 61440 NT_STATUS_OK
ReadX 12128 126976 4096 4096 NT_STATUS_OK
ReadX 12128 131072 61440 61440 NT_STATUS_OK
ReadX 12128 192512 4096 4096 NT_STATUS_OK
ReadX 12128 196608 61440 61440 NT_STATUS_OK
ReadX 12128 258048 4096 4096 NT_STATUS_OK
ReadX 12128 262144 61440 61440 NT_STATUS_OK
ReadX 12128 323584 4096 4096 NT_STATUS_OK
ReadX 12128 327680 61440 61440 NT_STATUS_OK
ReadX 12128 389120 4096 4096 NT_STATUS_OK
ReadX 12128 393216 61440 61440 NT_STATUS_OK
ReadX 12128 454656 4096 4096 NT_STATUS_OK
ReadX 12128 458752 61440 61440 NT_STATUS_OK
ReadX 12128 520192 4096 4096 NT_STATUS_OK
ReadX 12128 524288 61440 61440 NT_STATUS_OK
ReadX 12128 585728 4096 4096 NT_STATUS_OK
ReadX 12128 589824 61440 61440 NT_STATUS_OK
ReadX 12128 651264 4096 4096 NT_STATUS_OK
ReadX 12128 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12129 NT_STATUS_OK
ReadX 12129 0 61440 61440 NT_STATUS_OK
ReadX 12129 61440 4096 4096 NT_STATUS_OK
ReadX 12129 65536 61440 61440 NT_STATUS_OK
ReadX 12129 126976 4096 4096 NT_STATUS_OK
ReadX 12129 131072 61440 61440 NT_STATUS_OK
ReadX 12129 192512 4096 4096 NT_STATUS_OK
ReadX 12129 196608 61440 61440 NT_STATUS_OK
ReadX 12129 258048 4096 4096 NT_STATUS_OK
ReadX 12129 262144 61440 61440 NT_STATUS_OK
ReadX 12129 323584 4096 4096 NT_STATUS_OK
ReadX 12129 327680 61440 61440 NT_STATUS_OK
ReadX 12129 389120 4096 4096 NT_STATUS_OK
ReadX 12129 393216 61440 61440 NT_STATUS_OK
ReadX 12129 454656 4096 4096 NT_STATUS_OK
ReadX 12129 458752 61440 61440 NT_STATUS_OK
ReadX 12129 520192 4096 4096 NT_STATUS_OK
ReadX 12129 524288 61440 61440 NT_STATUS_OK
ReadX 12129 585728 4096 4096 NT_STATUS_OK
ReadX 12129 589824 61440 61440 NT_STATUS_OK
ReadX 12129 651264 4096 4096 NT_STATUS_OK
ReadX 12129 655360 61440 61440 NT_STATUS_OK
ReadX 12129 716800 4096 4096 NT_STATUS_OK
ReadX 12129 720896 61440 61440 NT_STATUS_OK
ReadX 12129 782336 4096 4096 NT_STATUS_OK
ReadX 12129 786432 61440 61440 NT_STATUS_OK
ReadX 12129 847872 4096 4096 NT_STATUS_OK
ReadX 12129 851968 61440 61440 NT_STATUS_OK
ReadX 12129 913408 4096 4096 NT_STATUS_OK
ReadX 12129 917504 61440 61440 NT_STATUS_OK
ReadX 12129 978944 4096 4096 NT_STATUS_OK
ReadX 12129 983040 61440 61440 NT_STATUS_OK
ReadX 12129 1044480 4096 4096 NT_STATUS_OK
ReadX 12129 1048576 61440 61440 NT_STATUS_OK
ReadX 12129 1110016 4096 4096 NT_STATUS_OK
ReadX 12129 1114112 61440 61440 NT_STATUS_OK
ReadX 12129 1175552 4096 4096 NT_STATUS_OK
ReadX 12129 1179648 61440 61440 NT_STATUS_OK
ReadX 12129 1241088 4096 4096 NT_STATUS_OK
ReadX 12129 1245184 61440 61440 NT_STATUS_OK
ReadX 12129 1306624 4096 4096 NT_STATUS_OK
ReadX 12129 1310720 61440 61440 NT_STATUS_OK
ReadX 12129 1372160 4096 4096 NT_STATUS_OK
ReadX 12129 1376256 61440 61440 NT_STATUS_OK
ReadX 12129 1437696 4096 4096 NT_STATUS_OK
ReadX 12129 1441792 61440 61440 NT_STATUS_OK
ReadX 12129 1503232 4096 4096 NT_STATUS_OK
ReadX 12129 1507328 61440 61440 NT_STATUS_OK
ReadX 12129 1568768 4096 4096 NT_STATUS_OK
ReadX 12129 1572864 61440 61440 NT_STATUS_OK
ReadX 12129 1634304 4096 4096 NT_STATUS_OK
ReadX 12129 1638400 61440 61440 NT_STATUS_OK
ReadX 12129 1699840 4096 4096 NT_STATUS_OK
ReadX 12129 1703936 61440 61440 NT_STATUS_OK
ReadX 12129 1765376 4096 4096 NT_STATUS_OK
ReadX 12129 1769472 61440 61440 NT_STATUS_OK
ReadX 12129 1830912 4096 4096 NT_STATUS_OK
ReadX 12129 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12130 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12131 NT_STATUS_OK
QUERY_FILE_INFORMATION 12131 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12131 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12131 1005 NT_STATUS_OK
ReadX 12131 2156 24 24 NT_STATUS_OK
ReadX 12131 2139 276 276 NT_STATUS_OK
ReadX 12131 2136 14 14 NT_STATUS_OK
ReadX 12131 2136 7 7 NT_STATUS_OK
ReadX 12131 2138 12 12 NT_STATUS_OK
ReadX 12131 2137 8 8 NT_STATUS_OK
ReadX 12131 2135 15 15 NT_STATUS_OK
ReadX 12131 0 16 16 NT_STATUS_OK
ReadX 12131 16 2048 2048 NT_STATUS_OK
ReadX 12131 2064 2048 2048 NT_STATUS_OK
ReadX 12131 257 2048 2048 NT_STATUS_OK
ReadX 12131 385 2048 2048 NT_STATUS_OK
ReadX 12131 513 2048 2048 NT_STATUS_OK
ReadX 12131 641 2048 2048 NT_STATUS_OK
ReadX 12131 769 2048 2048 NT_STATUS_OK
ReadX 12131 897 2048 2048 NT_STATUS_OK
ReadX 12131 1025 2048 2048 NT_STATUS_OK
ReadX 12131 1153 2048 2048 NT_STATUS_OK
ReadX 12131 1281 2048 2048 NT_STATUS_OK
ReadX 12131 1409 2048 2048 NT_STATUS_OK
ReadX 12131 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12133 NT_STATUS_OK
Close 12133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12127 NT_STATUS_OK
Close 12128 NT_STATUS_OK
Close 12129 NT_STATUS_OK
Close 12121 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12136 NT_STATUS_OK
WriteX 12136 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12136 258 NT_STATUS_OK
WriteX 12136 0 10575 10575 NT_STATUS_OK
Flush 12136 NT_STATUS_OK
Close 12136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12137 NT_STATUS_OK
Close 12137 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12139 NT_STATUS_OK
ReadX 12139 0 4096 4096 NT_STATUS_OK
Close 12131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12141 NT_STATUS_OK
LockX 12141 2147483538 1 NT_STATUS_OK
UnlockX 12141 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12141 1005 NT_STATUS_OK
ReadX 12141 0 512 512 NT_STATUS_OK
ReadX 12141 512 512 512 NT_STATUS_OK
ReadX 12141 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12141 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12141 1004 NT_STATUS_OK
Close 12141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12142 NT_STATUS_OK
QUERY_FILE_INFORMATION 12142 1005 NT_STATUS_OK
ReadX 12142 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12143 NT_STATUS_OK
LockX 12143 2147483538 1 NT_STATUS_OK
UnlockX 12143 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12143 1005 NT_STATUS_OK
ReadX 12143 0 512 512 NT_STATUS_OK
ReadX 12143 512 512 512 NT_STATUS_OK
ReadX 12143 1024 512 512 NT_STATUS_OK
ReadX 12143 288 20 20 NT_STATUS_OK
ReadX 12143 308 2084 2084 NT_STATUS_OK
ReadX 12143 388 2084 2084 NT_STATUS_OK
ReadX 12143 388 2084 2084 NT_STATUS_OK
ReadX 12130 2157 1386 1386 NT_STATUS_OK
ReadX 12143 2472 399 399 NT_STATUS_OK
ReadX 12143 3072 1536 1536 NT_STATUS_OK
ReadX 12143 544 149 149 NT_STATUS_OK
ReadX 12143 693 485 485 NT_STATUS_OK
Close 12143 NT_STATUS_OK
ReadX 12130 2157 4096 4096 NT_STATUS_OK
ReadX 12130 6253 4096 4096 NT_STATUS_OK
ReadX 12130 10349 4096 4096 NT_STATUS_OK
ReadX 12130 14445 4096 4096 NT_STATUS_OK
ReadX 12130 18541 4096 4096 NT_STATUS_OK
ReadX 12130 22637 256 256 NT_STATUS_OK
ReadX 12130 22893 4096 4096 NT_STATUS_OK
ReadX 12130 26989 4096 4096 NT_STATUS_OK
ReadX 12130 31085 4096 4096 NT_STATUS_OK
ReadX 12130 35181 4096 4096 NT_STATUS_OK
ReadX 12130 39277 4096 4096 NT_STATUS_OK
ReadX 12130 43373 4096 4096 NT_STATUS_OK
ReadX 12130 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12130 2157 1024 1024 NT_STATUS_OK
ReadX 12130 1667 4688 4688 NT_STATUS_OK
ReadX 12130 6355 3516 3516 NT_STATUS_OK
ReadX 12130 9871 16384 16384 NT_STATUS_OK
ReadX 12130 26255 3771 3771 NT_STATUS_OK
ReadX 12130 30026 2048 2048 NT_STATUS_OK
ReadX 12130 32074 1024 1024 NT_STATUS_OK
ReadX 12130 33098 6652 6652 NT_STATUS_OK
ReadX 12130 39750 16384 16384 NT_STATUS_OK
ReadX 12130 56134 10496 10496 NT_STATUS_OK
ReadX 12130 66630 1784 1784 NT_STATUS_OK
ReadX 12130 68414 90 90 NT_STATUS_OK
ReadX 12130 68504 273 273 NT_STATUS_OK
ReadX 12130 68777 1600 1600 NT_STATUS_OK
ReadX 12130 70377 640 640 NT_STATUS_OK
ReadX 12130 71017 1280 1280 NT_STATUS_OK
ReadX 12130 72297 8464 8464 NT_STATUS_OK
ReadX 12130 80761 158 158 NT_STATUS_OK
ReadX 12130 80919 912 912 NT_STATUS_OK
ReadX 12130 81831 1980 1980 NT_STATUS_OK
ReadX 12130 83811 2256 2256 NT_STATUS_OK
ReadX 12130 86067 400 400 NT_STATUS_OK
ReadX 12130 86467 252 252 NT_STATUS_OK
ReadX 12130 86719 42 42 NT_STATUS_OK
ReadX 12130 86761 725 725 NT_STATUS_OK
ReadX 12130 2009 512 512 NT_STATUS_OK
ReadX 12130 3895 9 9 NT_STATUS_OK
ReadX 12130 3781 46 46 NT_STATUS_OK
ReadX 12130 4059 92 92 NT_STATUS_OK
ReadX 12130 3781 92 92 NT_STATUS_OK
ReadX 12130 3986 184 184 NT_STATUS_OK
ReadX 12130 3987 16384 16384 NT_STATUS_OK
ReadX 12130 3902 16384 16384 NT_STATUS_OK
ReadX 12130 3781 10240 10240 NT_STATUS_OK
ReadX 12130 3821 16384 16384 NT_STATUS_OK
ReadX 12130 3891 935 935 NT_STATUS_OK
ReadX 12130 4060 10240 10240 NT_STATUS_OK
ReadX 12130 4059 184 184 NT_STATUS_OK
ReadX 12130 256 184 184 NT_STATUS_OK
ReadX 12130 256 1026 1026 NT_STATUS_OK
ReadX 12130 3901 326 326 NT_STATUS_OK
ReadX 12130 3899 652 652 NT_STATUS_OK
ReadX 12130 256 2 2 NT_STATUS_OK
ReadX 12130 258 4948 4948 NT_STATUS_OK
Close 12130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12145 NT_STATUS_OK
Close 12145 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12148 NT_STATUS_OK
WriteX 12148 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12148 258 NT_STATUS_OK
WriteX 12148 0 65536 65536 NT_STATUS_OK
WriteX 12148 65536 65536 65536 NT_STATUS_OK
WriteX 12148 131072 65536 65536 NT_STATUS_OK
WriteX 12148 196608 65536 65536 NT_STATUS_OK
WriteX 12148 262144 65536 65536 NT_STATUS_OK
WriteX 12148 327680 65536 65536 NT_STATUS_OK
WriteX 12148 393216 65536 65536 NT_STATUS_OK
WriteX 12148 458752 65536 65536 NT_STATUS_OK
WriteX 12148 524288 65536 65536 NT_STATUS_OK
WriteX 12148 589824 35257 35257 NT_STATUS_OK
Close 12148 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12150 NT_STATUS_OK
Close 12150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12153 NT_STATUS_OK
WriteX 12153 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12153 258 NT_STATUS_OK
WriteX 12153 0 65536 65536 NT_STATUS_OK
WriteX 12153 65536 65536 65536 NT_STATUS_OK
WriteX 12153 131072 65536 65536 NT_STATUS_OK
WriteX 12153 196608 65536 65536 NT_STATUS_OK
WriteX 12153 262144 65536 65536 NT_STATUS_OK
WriteX 12153 327680 65536 65536 NT_STATUS_OK
WriteX 12153 393216 65536 65536 NT_STATUS_OK
WriteX 12153 458752 65536 65536 NT_STATUS_OK
WriteX 12153 524288 65536 65536 NT_STATUS_OK
WriteX 12153 589824 57598 57598 NT_STATUS_OK
Close 12153 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12155 NT_STATUS_OK
WriteX 12155 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12155 258 NT_STATUS_OK
WriteX 12155 0 12543 12543 NT_STATUS_OK
Flush 12155 NT_STATUS_OK
Close 12155 NT_STATUS_OK
Close 12139 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12157 NT_STATUS_OK
Close 12157 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12159 NT_STATUS_OK
ReadX 12159 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12160 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12161 NT_STATUS_OK
QUERY_FILE_INFORMATION 12161 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12161 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12161 1005 NT_STATUS_OK
ReadX 12161 1938 24 24 NT_STATUS_OK
ReadX 12161 1920 276 276 NT_STATUS_OK
ReadX 12161 1918 14 14 NT_STATUS_OK
ReadX 12161 1918 7 7 NT_STATUS_OK
ReadX 12161 1919 12 12 NT_STATUS_OK
ReadX 12161 1919 8 8 NT_STATUS_OK
ReadX 12161 1917 15 15 NT_STATUS_OK
ReadX 12161 0 16 16 NT_STATUS_OK
ReadX 12161 16 2048 2048 NT_STATUS_OK
ReadX 12161 2064 2048 2048 NT_STATUS_OK
ReadX 12161 257 2048 2048 NT_STATUS_OK
ReadX 12161 385 2048 2048 NT_STATUS_OK
ReadX 12161 513 2048 2048 NT_STATUS_OK
ReadX 12161 641 2048 2048 NT_STATUS_OK
ReadX 12161 769 2048 2048 NT_STATUS_OK
ReadX 12161 897 2048 2048 NT_STATUS_OK
ReadX 12161 1025 2048 2048 NT_STATUS_OK
ReadX 12161 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12163 NT_STATUS_OK
Close 12163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12166 NT_STATUS_OK
WriteX 12166 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12166 258 NT_STATUS_OK
WriteX 12166 0 11588 11588 NT_STATUS_OK
Flush 12166 NT_STATUS_OK
Close 12166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12167 NT_STATUS_OK
Close 12167 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12169 NT_STATUS_OK
ReadX 12169 0 4096 4096 NT_STATUS_OK
Close 12161 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12171 NT_STATUS_OK
WriteX 12171 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12171 258 NT_STATUS_OK
WriteX 12171 0 11615 11615 NT_STATUS_OK
Flush 12171 NT_STATUS_OK
Close 12171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12173 NT_STATUS_OK
Close 12173 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12175 NT_STATUS_OK
ReadX 12175 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12177 NT_STATUS_OK
Close 12177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12180 NT_STATUS_OK
WriteX 12180 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12180 258 NT_STATUS_OK
WriteX 12180 0 65536 65536 NT_STATUS_OK
WriteX 12180 65536 16050 16050 NT_STATUS_OK
Close 12180 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12160 1939 64 64 NT_STATUS_OK
ReadX 12160 128 248 248 NT_STATUS_OK
ReadX 12160 128 568 568 NT_STATUS_OK
ReadX 12160 3872 1536 1536 NT_STATUS_OK
ReadX 12160 3456 2560 2560 NT_STATUS_OK
ReadX 12160 3136 512 512 NT_STATUS_OK
ReadX 12160 2880 4096 4096 NT_STATUS_OK
ReadX 12160 3264 3072 3072 NT_STATUS_OK
ReadX 12160 320 4096 4096 NT_STATUS_OK
ReadX 12160 1024 4096 4096 NT_STATUS_OK
ReadX 12160 3616 4096 4096 NT_STATUS_OK
ReadX 12160 1939 64 64 NT_STATUS_OK
ReadX 12160 128 248 248 NT_STATUS_OK
ReadX 12160 128 608 608 NT_STATUS_OK
ReadX 12160 2858 1024 1024 NT_STATUS_OK
ReadX 12160 2810 4096 4096 NT_STATUS_OK
ReadX 12160 2826 4096 4096 NT_STATUS_OK
ReadX 12160 2580 2048 2048 NT_STATUS_OK
ReadX 12160 2800 2560 2560 NT_STATUS_OK
ReadX 12160 2100 4096 4096 NT_STATUS_OK
ReadX 12160 2084 4096 4096 NT_STATUS_OK
ReadX 12160 868 4096 4096 NT_STATUS_OK
ReadX 12160 2324 4096 4096 NT_STATUS_OK
ReadX 12160 884 4096 4096 NT_STATUS_OK
ReadX 12160 2604 1024 1024 NT_STATUS_OK
ReadX 12160 580 4096 4096 NT_STATUS_OK
ReadX 12160 596 4096 4096 NT_STATUS_OK
ReadX 12160 2752 4096 4096 NT_STATUS_OK
ReadX 12160 2842 1024 1024 NT_STATUS_OK
ReadX 12160 660 4096 4096 NT_STATUS_OK
ReadX 12160 2720 4096 4096 NT_STATUS_OK
ReadX 12160 2736 4096 4096 NT_STATUS_OK
ReadX 12160 628 4096 4096 NT_STATUS_OK
ReadX 12160 2704 4096 4096 NT_STATUS_OK
ReadX 12160 1556 4096 4096 NT_STATUS_OK
ReadX 12160 576 4096 4096 NT_STATUS_OK
ReadX 12160 3168 1536 1536 NT_STATUS_OK
ReadX 12160 832 4096 4096 NT_STATUS_OK
ReadX 12160 1088 4096 4096 NT_STATUS_OK
ReadX 12160 1344 4096 4096 NT_STATUS_OK
ReadX 12160 1600 4096 4096 NT_STATUS_OK
ReadX 12160 1856 4096 4096 NT_STATUS_OK
ReadX 12160 2112 4096 4096 NT_STATUS_OK
ReadX 12160 1892 4096 4096 NT_STATUS_OK
ReadX 12160 820 4096 4096 NT_STATUS_OK
ReadX 12160 788 4096 4096 NT_STATUS_OK
ReadX 12160 1604 4096 4096 NT_STATUS_OK
ReadX 12160 3648 4096 4096 NT_STATUS_OK
ReadX 12160 2608 4096 4096 NT_STATUS_OK
ReadX 12160 548 4096 4096 NT_STATUS_OK
ReadX 12160 740 4096 4096 NT_STATUS_OK
ReadX 12160 1344 4096 4096 NT_STATUS_OK
ReadX 12160 3392 4096 4096 NT_STATUS_OK
ReadX 12160 3904 4096 4096 NT_STATUS_OK
ReadX 12160 644 4096 4096 NT_STATUS_OK
ReadX 12160 676 4096 4096 NT_STATUS_OK
ReadX 12160 2688 4096 4096 NT_STATUS_OK
ReadX 12160 320 4096 4096 NT_STATUS_OK
ReadX 12160 900 4096 4096 NT_STATUS_OK
ReadX 12160 1908 4096 4096 NT_STATUS_OK
ReadX 12160 852 4096 4096 NT_STATUS_OK
ReadX 12160 724 4096 4096 NT_STATUS_OK
ReadX 12160 2292 4096 4096 NT_STATUS_OK
ReadX 12160 612 4096 4096 NT_STATUS_OK
ReadX 12160 388 4096 4096 NT_STATUS_OK
ReadX 12160 2368 4096 4096 NT_STATUS_OK
ReadX 12160 2624 4096 4096 NT_STATUS_OK
ReadX 12160 500 4096 4096 NT_STATUS_OK
ReadX 12160 356 4096 4096 NT_STATUS_OK
ReadX 12160 1024 4096 4096 NT_STATUS_OK
ReadX 12160 576 4096 4096 NT_STATUS_OK
ReadX 12160 340 4096 4096 NT_STATUS_OK
ReadX 12160 420 4096 4096 NT_STATUS_OK
ReadX 12160 1600 4096 4096 NT_STATUS_OK
ReadX 12160 404 4096 4096 NT_STATUS_OK
ReadX 12160 1428 4096 4096 NT_STATUS_OK
ReadX 12160 2656 4096 4096 NT_STATUS_OK
ReadX 12160 2624 4096 4096 NT_STATUS_OK
ReadX 12160 452 4096 4096 NT_STATUS_OK
ReadX 12160 692 4096 4096 NT_STATUS_OK
ReadX 12160 564 4096 4096 NT_STATUS_OK
ReadX 12160 372 4096 4096 NT_STATUS_OK
ReadX 12160 468 4096 4096 NT_STATUS_OK
ReadX 12160 484 4096 4096 NT_STATUS_OK
ReadX 12160 1088 4096 4096 NT_STATUS_OK
ReadX 12160 1924 4096 4096 NT_STATUS_OK
ReadX 12160 2768 4096 4096 NT_STATUS_OK
ReadX 12160 832 4096 4096 NT_STATUS_OK
ReadX 12160 836 4096 4096 NT_STATUS_OK
ReadX 12160 1856 4096 4096 NT_STATUS_OK
ReadX 12160 2640 4096 4096 NT_STATUS_OK
ReadX 12160 436 4096 4096 NT_STATUS_OK
ReadX 12160 1828 4096 4096 NT_STATUS_OK
ReadX 12160 804 4096 4096 NT_STATUS_OK
ReadX 12160 1860 4096 4096 NT_STATUS_OK
ReadX 12160 1812 4096 4096 NT_STATUS_OK
ReadX 12160 756 4096 4096 NT_STATUS_OK
ReadX 12160 1636 4096 4096 NT_STATUS_OK
ReadX 12160 772 4096 4096 NT_STATUS_OK
ReadX 12160 2036 4096 4096 NT_STATUS_OK
ReadX 12160 1220 4096 4096 NT_STATUS_OK
ReadX 12160 1652 4096 4096 NT_STATUS_OK
ReadX 12160 2588 4096 4096 NT_STATUS_OK
ReadX 12160 916 4096 4096 NT_STATUS_OK
ReadX 12160 260 4096 4096 NT_STATUS_OK
ReadX 12160 932 4096 4096 NT_STATUS_OK
ReadX 12160 2624 4096 4096 NT_STATUS_OK
ReadX 12160 308 4096 4096 NT_STATUS_OK
ReadX 12160 292 4096 4096 NT_STATUS_OK
ReadX 12160 1140 4096 4096 NT_STATUS_OK
ReadX 12160 276 4096 4096 NT_STATUS_OK
ReadX 12160 2020 4096 4096 NT_STATUS_OK
ReadX 12160 2880 4096 4096 NT_STATUS_OK
ReadX 12160 516 4096 4096 NT_STATUS_OK
ReadX 12160 1844 4096 4096 NT_STATUS_OK
ReadX 12160 1124 4096 4096 NT_STATUS_OK
ReadX 12160 3136 4096 4096 NT_STATUS_OK
ReadX 12160 324 4096 4096 NT_STATUS_OK
ReadX 12160 1156 4096 4096 NT_STATUS_OK
ReadX 12160 1172 4096 4096 NT_STATUS_OK
ReadX 12160 2112 4096 4096 NT_STATUS_OK
ReadX 12160 2368 4096 4096 NT_STATUS_OK
ReadX 12160 964 4096 4096 NT_STATUS_OK
ReadX 12160 980 4096 4096 NT_STATUS_OK
ReadX 12160 1012 4096 4096 NT_STATUS_OK
ReadX 12160 532 4096 4096 NT_STATUS_OK
ReadX 12160 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12160 1620 4096 4096 NT_STATUS_OK
ReadX 12160 1604 4096 4096 NT_STATUS_OK
ReadX 12160 2116 4096 4096 NT_STATUS_OK
ReadX 12160 2132 4096 4096 NT_STATUS_OK
ReadX 12160 2148 4096 4096 NT_STATUS_OK
ReadX 12160 2276 4096 4096 NT_STATUS_OK
ReadX 12160 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12182 NT_STATUS_OK
Close 12182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12185 NT_STATUS_OK
QUERY_FILE_INFORMATION 12140 1004 NT_STATUS_OK
Close 12140 NT_STATUS_OK
WriteX 12185 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12185 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12142 1004 NT_STATUS_OK
Close 12142 NT_STATUS_OK
WriteX 12185 0 65536 65536 NT_STATUS_OK
WriteX 12185 65536 64850 64850 NT_STATUS_OK
Close 12185 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12187 NT_STATUS_OK
WriteX 12187 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12187 258 NT_STATUS_OK
ReadX 12160 2068 4096 4096 NT_STATUS_OK
ReadX 12160 1588 4096 4096 NT_STATUS_OK
ReadX 12160 1572 4096 4096 NT_STATUS_OK
WriteX 12187 0 18630 18630 NT_STATUS_OK
Flush 12187 NT_STATUS_OK
Close 12187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12189 NT_STATUS_OK
Close 12189 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12191 NT_STATUS_OK
ReadX 12191 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12160 612 4096 4096 NT_STATUS_OK
ReadX 12160 564 4096 4096 NT_STATUS_OK
ReadX 12160 1876 4096 4096 NT_STATUS_OK
ReadX 12160 628 4096 4096 NT_STATUS_OK
ReadX 12160 740 4096 4096 NT_STATUS_OK
ReadX 12160 724 4096 4096 NT_STATUS_OK
ReadX 12160 644 4096 4096 NT_STATUS_OK
ReadX 12160 2324 4096 4096 NT_STATUS_OK
ReadX 12160 660 4096 4096 NT_STATUS_OK
ReadX 12160 852 4096 4096 NT_STATUS_OK
ReadX 12160 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12160 2368 4096 4096 NT_STATUS_OK
ReadX 12160 1024 4096 4096 NT_STATUS_OK
ReadX 12160 320 4096 4096 NT_STATUS_OK
ReadX 12160 580 4096 4096 NT_STATUS_OK
ReadX 12160 3136 512 512 NT_STATUS_OK
ReadX 12160 2880 4096 4096 NT_STATUS_OK
Close 12160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12192 NT_STATUS_OK
ReadX 12192 61440 4096 4096 NT_STATUS_OK
ReadX 12192 126976 4096 4096 NT_STATUS_OK
WriteX 12192 0 65536 65536 NT_STATUS_OK
WriteX 12192 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12193 NT_STATUS_OK
ReadX 12193 61440 4096 4096 NT_STATUS_OK
ReadX 12193 126976 4096 4096 NT_STATUS_OK
ReadX 12193 192512 4096 4096 NT_STATUS_OK
ReadX 12193 258048 4096 4096 NT_STATUS_OK
WriteX 12193 0 65536 65536 NT_STATUS_OK
WriteX 12193 65536 65536 65536 NT_STATUS_OK
WriteX 12193 131072 65536 65536 NT_STATUS_OK
WriteX 12193 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12194 NT_STATUS_OK
ReadX 12194 61440 4096 4096 NT_STATUS_OK
ReadX 12194 126976 4096 4096 NT_STATUS_OK
ReadX 12194 192512 4096 4096 NT_STATUS_OK
ReadX 12194 258048 4096 4096 NT_STATUS_OK
ReadX 12194 323584 4096 4096 NT_STATUS_OK
ReadX 12194 389120 4096 4096 NT_STATUS_OK
ReadX 12194 454656 4096 4096 NT_STATUS_OK
ReadX 12194 520192 4096 4096 NT_STATUS_OK
WriteX 12194 0 65536 65536 NT_STATUS_OK
WriteX 12194 65536 65536 65536 NT_STATUS_OK
WriteX 12194 131072 65536 65536 NT_STATUS_OK
WriteX 12194 196608 65536 65536 NT_STATUS_OK
WriteX 12194 262144 65536 65536 NT_STATUS_OK
WriteX 12194 327680 65536 65536 NT_STATUS_OK
WriteX 12194 393216 65536 65536 NT_STATUS_OK
WriteX 12194 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12195 NT_STATUS_OK
ReadX 12195 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12196 NT_STATUS_OK
Close 12196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12197 NT_STATUS_OK
WriteX 12197 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12197 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12195 0 8192 8192 NT_STATUS_OK
Flush 12195 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12195 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12195 0 8192 8192 NT_STATUS_OK
Flush 12195 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12195 0 8192 8192 NT_STATUS_OK
Flush 12195 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12195 0 8192 8192 NT_STATUS_OK
Flush 12195 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12199 NT_STATUS_OK
Close 12199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12191 NT_STATUS_OK
Close 12159 NT_STATUS_OK
Close 12192 NT_STATUS_OK
Close 12193 NT_STATUS_OK
Close 12194 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12202 NT_STATUS_OK
WriteX 12202 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12202 258 NT_STATUS_OK
WriteX 12202 0 62591 62591 NT_STATUS_OK
Close 12202 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12204 NT_STATUS_OK
Close 12204 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12207 NT_STATUS_OK
WriteX 12207 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12207 258 NT_STATUS_OK
WriteX 12207 0 10845 10845 NT_STATUS_OK
Close 12207 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12209 NT_STATUS_OK
Close 12209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12212 NT_STATUS_OK
WriteX 12212 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12212 258 NT_STATUS_OK
WriteX 12212 0 30118 30118 NT_STATUS_OK
Close 12212 NT_STATUS_OK
WriteX 12195 0 4096 4096 NT_STATUS_OK
WriteX 12197 0 64 64 NT_STATUS_OK
Close 12197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12195 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12214 NT_STATUS_OK
ReadX 12214 0 61440 61440 NT_STATUS_OK
ReadX 12214 61440 4096 4096 NT_STATUS_OK
ReadX 12214 65536 61440 61440 NT_STATUS_OK
ReadX 12214 126976 4096 4096 NT_STATUS_OK
ReadX 12214 131072 61440 61440 NT_STATUS_OK
ReadX 12214 192512 4096 4096 NT_STATUS_OK
ReadX 12214 196608 61440 61440 NT_STATUS_OK
ReadX 12214 258048 4096 4096 NT_STATUS_OK
ReadX 12214 262144 61440 61440 NT_STATUS_OK
ReadX 12214 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12215 NT_STATUS_OK
ReadX 12215 0 61440 61440 NT_STATUS_OK
ReadX 12215 61440 4096 4096 NT_STATUS_OK
ReadX 12215 65536 61440 61440 NT_STATUS_OK
ReadX 12215 126976 4096 4096 NT_STATUS_OK
ReadX 12215 131072 61440 61440 NT_STATUS_OK
ReadX 12215 192512 4096 4096 NT_STATUS_OK
ReadX 12215 196608 61440 61440 NT_STATUS_OK
ReadX 12215 258048 4096 4096 NT_STATUS_OK
ReadX 12215 262144 61440 61440 NT_STATUS_OK
ReadX 12215 323584 4096 4096 NT_STATUS_OK
ReadX 12215 327680 61440 61440 NT_STATUS_OK
ReadX 12215 389120 4096 4096 NT_STATUS_OK
ReadX 12215 393216 61440 61440 NT_STATUS_OK
ReadX 12215 454656 4096 4096 NT_STATUS_OK
ReadX 12215 458752 61440 61440 NT_STATUS_OK
ReadX 12215 520192 4096 4096 NT_STATUS_OK
ReadX 12215 524288 61440 61440 NT_STATUS_OK
ReadX 12215 585728 4096 4096 NT_STATUS_OK
ReadX 12215 589824 61440 61440 NT_STATUS_OK
ReadX 12215 651264 4096 4096 NT_STATUS_OK
ReadX 12215 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12216 NT_STATUS_OK
ReadX 12216 0 61440 61440 NT_STATUS_OK
ReadX 12216 61440 4096 4096 NT_STATUS_OK
ReadX 12216 65536 61440 61440 NT_STATUS_OK
ReadX 12216 126976 4096 4096 NT_STATUS_OK
ReadX 12216 131072 61440 61440 NT_STATUS_OK
ReadX 12216 192512 4096 4096 NT_STATUS_OK
ReadX 12216 196608 61440 61440 NT_STATUS_OK
ReadX 12216 258048 4096 4096 NT_STATUS_OK
ReadX 12216 262144 61440 61440 NT_STATUS_OK
ReadX 12216 323584 4096 4096 NT_STATUS_OK
ReadX 12216 327680 61440 61440 NT_STATUS_OK
ReadX 12216 389120 4096 4096 NT_STATUS_OK
ReadX 12216 393216 61440 61440 NT_STATUS_OK
ReadX 12216 454656 4096 4096 NT_STATUS_OK
ReadX 12216 458752 61440 61440 NT_STATUS_OK
ReadX 12216 520192 4096 4096 NT_STATUS_OK
ReadX 12216 524288 61440 61440 NT_STATUS_OK
ReadX 12216 585728 4096 4096 NT_STATUS_OK
ReadX 12216 589824 61440 61440 NT_STATUS_OK
ReadX 12216 651264 4096 4096 NT_STATUS_OK
ReadX 12216 655360 61440 61440 NT_STATUS_OK
ReadX 12216 716800 4096 4096 NT_STATUS_OK
ReadX 12216 720896 61440 61440 NT_STATUS_OK
ReadX 12216 782336 4096 4096 NT_STATUS_OK
ReadX 12216 786432 61440 61440 NT_STATUS_OK
ReadX 12216 847872 4096 4096 NT_STATUS_OK
ReadX 12216 851968 61440 61440 NT_STATUS_OK
ReadX 12216 913408 4096 4096 NT_STATUS_OK
ReadX 12216 917504 61440 61440 NT_STATUS_OK
ReadX 12216 978944 4096 4096 NT_STATUS_OK
ReadX 12216 983040 61440 61440 NT_STATUS_OK
ReadX 12216 1044480 4096 4096 NT_STATUS_OK
ReadX 12216 1048576 61440 61440 NT_STATUS_OK
ReadX 12216 1110016 4096 4096 NT_STATUS_OK
ReadX 12216 1114112 61440 61440 NT_STATUS_OK
ReadX 12216 1175552 4096 4096 NT_STATUS_OK
ReadX 12216 1179648 61440 61440 NT_STATUS_OK
ReadX 12216 1241088 4096 4096 NT_STATUS_OK
ReadX 12216 1245184 61440 61440 NT_STATUS_OK
ReadX 12216 1306624 4096 4096 NT_STATUS_OK
ReadX 12216 1310720 61440 61440 NT_STATUS_OK
ReadX 12216 1372160 4096 4096 NT_STATUS_OK
ReadX 12216 1376256 61440 61440 NT_STATUS_OK
ReadX 12216 1437696 4096 4096 NT_STATUS_OK
ReadX 12216 1441792 61440 61440 NT_STATUS_OK
ReadX 12216 1503232 4096 4096 NT_STATUS_OK
ReadX 12216 1507328 61440 61440 NT_STATUS_OK
ReadX 12216 1568768 4096 4096 NT_STATUS_OK
ReadX 12216 1572864 61440 61440 NT_STATUS_OK
ReadX 12216 1634304 4096 4096 NT_STATUS_OK
ReadX 12216 1638400 61440 61440 NT_STATUS_OK
ReadX 12216 1699840 4096 4096 NT_STATUS_OK
ReadX 12216 1703936 61440 61440 NT_STATUS_OK
ReadX 12216 1765376 4096 4096 NT_STATUS_OK
ReadX 12216 1769472 61440 61440 NT_STATUS_OK
ReadX 12216 1830912 4096 4096 NT_STATUS_OK
ReadX 12216 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12217 NT_STATUS_OK
Close 12217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12214 NT_STATUS_OK
Close 12215 NT_STATUS_OK
Close 12216 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12219 NT_STATUS_OK
ReadX 12219 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12220 NT_STATUS_OK
ReadX 12220 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12221 NT_STATUS_OK
ReadX 12221 0 4096 4096 NT_STATUS_OK
ReadX 12221 4096 4096 4096 NT_STATUS_OK
ReadX 12221 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12222 NT_STATUS_OK
Close 12222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12219 NT_STATUS_OK
Close 12220 NT_STATUS_OK
Close 12221 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12224 NT_STATUS_OK
ReadX 12224 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12225 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12225 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12226 NT_STATUS_OK
Close 12226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12224 NT_STATUS_OK
Close 12225 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12228 NT_STATUS_OK
ReadX 12228 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12229 NT_STATUS_OK
ReadX 12229 0 8192 8192 NT_STATUS_OK
ReadX 12229 8192 8192 8192 NT_STATUS_OK
ReadX 12229 16384 8192 8192 NT_STATUS_OK
ReadX 12229 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12231 NT_STATUS_OK
Close 12231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12229 NT_STATUS_OK
Close 12228 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12234 NT_STATUS_OK
WriteX 12234 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12234 258 NT_STATUS_OK
WriteX 12234 0 10438 10438 NT_STATUS_OK
Close 12234 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12235 NT_STATUS_OK
Close 12235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12236 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12237 NT_STATUS_OK
Close 12237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12238 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12239 NT_STATUS_OK
Close 12239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12240 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12241 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12241 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12242 NT_STATUS_OK
Close 12242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12243 NT_STATUS_OK
ReadX 12243 0 4096 4096 NT_STATUS_OK
ReadX 12243 4096 4096 4096 NT_STATUS_OK
ReadX 12243 8192 4096 4096 NT_STATUS_OK
ReadX 12243 12288 8192 8192 NT_STATUS_OK
ReadX 12243 20480 8192 8192 NT_STATUS_OK
ReadX 12243 28672 8192 8192 NT_STATUS_OK
ReadX 12243 36864 8192 8192 NT_STATUS_OK
ReadX 12243 45056 8192 8192 NT_STATUS_OK
ReadX 12243 53248 8192 8192 NT_STATUS_OK
ReadX 12243 61440 8192 8192 NT_STATUS_OK
ReadX 12243 69632 8192 8192 NT_STATUS_OK
ReadX 12243 77824 8192 8192 NT_STATUS_OK
ReadX 12243 86016 8192 8192 NT_STATUS_OK
ReadX 12243 94208 8192 8192 NT_STATUS_OK
ReadX 12243 102400 8192 8192 NT_STATUS_OK
ReadX 12243 110592 8192 8192 NT_STATUS_OK
ReadX 12243 118784 8192 8192 NT_STATUS_OK
ReadX 12243 126976 8192 8192 NT_STATUS_OK
ReadX 12243 135168 8192 8192 NT_STATUS_OK
ReadX 12243 143360 8192 8192 NT_STATUS_OK
ReadX 12243 151552 8192 8192 NT_STATUS_OK
ReadX 12243 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12243 NT_STATUS_OK
Close 12236 NT_STATUS_OK
Close 12238 NT_STATUS_OK
Close 12240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12245 NT_STATUS_OK
Close 12245 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12248 NT_STATUS_OK
WriteX 12248 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12248 258 NT_STATUS_OK
WriteX 12248 0 28489 28489 NT_STATUS_OK
Close 12248 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12249 NT_STATUS_OK
Close 12249 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12251 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12251 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12252 NT_STATUS_OK
Close 12252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12251 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12254 NT_STATUS_OK
ReadX 12254 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12255 NT_STATUS_OK
ReadX 12255 0 8192 8192 NT_STATUS_OK
ReadX 12255 8192 8192 8192 NT_STATUS_OK
ReadX 12255 16384 8192 8192 NT_STATUS_OK
ReadX 12255 24576 8192 8192 NT_STATUS_OK
ReadX 12255 32768 16384 16384 NT_STATUS_OK
ReadX 12255 49152 8192 8192 NT_STATUS_OK
ReadX 12255 57344 8192 8192 NT_STATUS_OK
ReadX 12255 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12257 NT_STATUS_OK
Close 12257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12255 NT_STATUS_OK
Close 12254 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12260 NT_STATUS_OK
WriteX 12260 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12260 258 NT_STATUS_OK
WriteX 12260 0 29253 29253 NT_STATUS_OK
Close 12260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12261 NT_STATUS_OK
Close 12261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12262 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12264 NT_STATUS_OK
Close 12264 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12267 NT_STATUS_OK
WriteX 12267 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12267 258 NT_STATUS_OK
WriteX 12267 0 30183 30183 NT_STATUS_OK
Close 12267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12268 NT_STATUS_OK
Close 12268 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12270 NT_STATUS_OK
WriteX 12270 0 510 510 NT_STATUS_OK
WriteX 12270 510 512 512 NT_STATUS_OK
WriteX 12270 1022 510 510 NT_STATUS_OK
WriteX 12270 1532 510 510 NT_STATUS_OK
WriteX 12270 2042 168 168 NT_STATUS_OK
Close 12270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12271 NT_STATUS_OK
Close 12271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12273 NT_STATUS_OK
ReadX 12273 0 4096 4096 NT_STATUS_OK
WriteX 12273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12274 NT_STATUS_OK
ReadX 12274 61440 4096 4096 NT_STATUS_OK
ReadX 12274 126976 4096 4096 NT_STATUS_OK
WriteX 12274 0 65536 65536 NT_STATUS_OK
WriteX 12274 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12275 NT_STATUS_OK
ReadX 12275 61440 4096 4096 NT_STATUS_OK
ReadX 12275 126976 4096 4096 NT_STATUS_OK
ReadX 12275 192512 4096 4096 NT_STATUS_OK
ReadX 12275 258048 4096 4096 NT_STATUS_OK
WriteX 12275 0 65536 65536 NT_STATUS_OK
WriteX 12275 65536 65536 65536 NT_STATUS_OK
WriteX 12275 131072 65536 65536 NT_STATUS_OK
WriteX 12275 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12276 NT_STATUS_OK
ReadX 12276 61440 4096 4096 NT_STATUS_OK
ReadX 12276 126976 4096 4096 NT_STATUS_OK
ReadX 12276 192512 4096 4096 NT_STATUS_OK
ReadX 12276 258048 4096 4096 NT_STATUS_OK
ReadX 12276 323584 4096 4096 NT_STATUS_OK
ReadX 12276 389120 4096 4096 NT_STATUS_OK
ReadX 12276 454656 4096 4096 NT_STATUS_OK
ReadX 12276 520192 4096 4096 NT_STATUS_OK
WriteX 12276 0 65536 65536 NT_STATUS_OK
WriteX 12276 65536 65536 65536 NT_STATUS_OK
WriteX 12276 131072 65536 65536 NT_STATUS_OK
WriteX 12276 196608 65536 65536 NT_STATUS_OK
WriteX 12276 262144 65536 65536 NT_STATUS_OK
WriteX 12276 327680 65536 65536 NT_STATUS_OK
WriteX 12276 393216 65536 65536 NT_STATUS_OK
WriteX 12276 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12277 NT_STATUS_OK
Close 12277 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12273 NT_STATUS_OK
Close 12274 NT_STATUS_OK
Close 12275 NT_STATUS_OK
Close 12276 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12279 NT_STATUS_OK
Close 12279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12283 NT_STATUS_OK
Close 12283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12286 NT_STATUS_OK
Close 12286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12288 NT_STATUS_OK
Close 12288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12292 NT_STATUS_OK
Close 12292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12295 NT_STATUS_OK
Close 12295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12297 NT_STATUS_OK
Close 12297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12301 NT_STATUS_OK
Close 12301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12306 NT_STATUS_OK
Close 12306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12311 NT_STATUS_OK
Close 12311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12316 NT_STATUS_OK
Close 12316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12321 NT_STATUS_OK
Close 12321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12326 NT_STATUS_OK
Close 12326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12331 NT_STATUS_OK
Close 12331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12336 NT_STATUS_OK
Close 12336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12339 NT_STATUS_OK
Close 12339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12342 NT_STATUS_OK
Close 12342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12345 NT_STATUS_OK
WriteX 12345 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12345 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12345 0 65536 65536 NT_STATUS_OK
WriteX 12345 65536 65536 65536 NT_STATUS_OK
WriteX 12345 131072 65536 65536 NT_STATUS_OK
WriteX 12345 196608 65536 65536 NT_STATUS_OK
WriteX 12345 262144 26634 26634 NT_STATUS_OK
Close 12345 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12350 NT_STATUS_OK
Close 12350 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12351 NT_STATUS_OK
Close 12351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12352 NT_STATUS_OK
ReadX 12352 0 4096 4096 NT_STATUS_OK
Close 12352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12353 NT_STATUS_OK
ReadX 12353 0 4096 4096 NT_STATUS_OK
ReadX 12353 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12354 NT_STATUS_OK
Close 12354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12353 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12358 NT_STATUS_OK
Close 12358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12361 NT_STATUS_OK
Close 12361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12363 NT_STATUS_OK
Close 12363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12367 NT_STATUS_OK
Close 12367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12370 NT_STATUS_OK
Close 12370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12372 NT_STATUS_OK
Close 12372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12376 NT_STATUS_OK
Close 12376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12381 NT_STATUS_OK
Close 12381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12386 NT_STATUS_OK
Close 12386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12391 NT_STATUS_OK
Close 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12396 NT_STATUS_OK
Close 12396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12401 NT_STATUS_OK
Close 12401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12405 NT_STATUS_OK
Close 12405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12410 NT_STATUS_OK
Close 12410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12415 NT_STATUS_OK
Close 12415 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12418 NT_STATUS_OK
Close 12418 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12420 NT_STATUS_OK
Close 12420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12430 NT_STATUS_OK
Close 12430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12431 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12432 NT_STATUS_OK
ReadX 12432 0 4096 4096 NT_STATUS_OK
Close 12432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12433 NT_STATUS_OK
ReadX 12433 0 4096 4096 NT_STATUS_OK
Close 12433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12434 NT_STATUS_OK
ReadX 12434 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12444 NT_STATUS_OK
Close 12444 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12445 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
Close 12446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12447 NT_STATUS_OK
ReadX 12447 0 4096 4096 NT_STATUS_OK
Close 12447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12448 NT_STATUS_OK
ReadX 12448 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12434 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12477 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12477 0 4096 4096 NT_STATUS_OK
Close 12477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12478 NT_STATUS_OK
ReadX 12478 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12478 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12479 NT_STATUS_OK
ReadX 12479 0 4096 4096 NT_STATUS_OK
ReadX 12479 4096 4096 4096 NT_STATUS_OK
ReadX 12479 8192 4096 4096 NT_STATUS_OK
ReadX 12479 12288 4096 4096 NT_STATUS_OK
ReadX 12479 16384 4096 4096 NT_STATUS_OK
ReadX 12479 20480 4096 4096 NT_STATUS_OK
ReadX 12479 24576 4096 4096 NT_STATUS_OK
ReadX 12479 28672 4096 4096 NT_STATUS_OK
ReadX 12479 32768 4096 4096 NT_STATUS_OK
ReadX 12479 36864 4096 4096 NT_STATUS_OK
ReadX 12479 40960 4096 4096 NT_STATUS_OK
ReadX 12479 45056 4096 4096 NT_STATUS_OK
ReadX 12479 49152 4096 4096 NT_STATUS_OK
ReadX 12479 53248 4096 4096 NT_STATUS_OK
ReadX 12479 57344 4096 4096 NT_STATUS_OK
ReadX 12479 61440 4096 4096 NT_STATUS_OK
ReadX 12479 65536 4096 4096 NT_STATUS_OK
ReadX 12479 69632 4096 4096 NT_STATUS_OK
ReadX 12479 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12479 1004 NT_STATUS_OK
WriteX 12479 0 4096 4096 NT_STATUS_OK
Close 12479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12480 NT_STATUS_OK
SET_FILE_INFORMATION 12480 1004 NT_STATUS_OK
Close 12480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12481 NT_STATUS_OK
ReadX 12481 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12482 NT_STATUS_OK
Close 12482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12485 NT_STATUS_OK
WriteX 12485 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12485 258 NT_STATUS_OK
WriteX 12485 0 65536 65536 NT_STATUS_OK
WriteX 12485 65536 19979 19979 NT_STATUS_OK
Close 12485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12486 NT_STATUS_OK
ReadX 12486 0 4096 4096 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
QUERY_FILE_INFORMATION 12486 1004 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
SET_FILE_INFORMATION 12486 1004 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
Close 12486 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12487 NT_STATUS_OK
ReadX 12487 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12488 NT_STATUS_OK
ReadX 12488 0 4096 4096 NT_STATUS_OK
Close 12487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12489 NT_STATUS_OK
ReadX 12489 0 4096 4096 NT_STATUS_OK
Close 12489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12490 NT_STATUS_OK
ReadX 12490 0 4096 4096 NT_STATUS_OK
Close 12490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12491 NT_STATUS_OK
ReadX 12491 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12491 1004 NT_STATUS_OK
WriteX 12491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12492 NT_STATUS_OK
Close 12492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12488 NT_STATUS_OK
Close 12491 NT_STATUS_OK
Close 12481 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12494 NT_STATUS_OK
Close 12494 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12497 NT_STATUS_OK
WriteX 12497 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12497 258 NT_STATUS_OK
WriteX 12497 0 65536 65536 NT_STATUS_OK
WriteX 12497 65536 17654 17654 NT_STATUS_OK
Close 12497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12498 NT_STATUS_OK
ReadX 12498 0 4096 4096 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
Flush 12498 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
Flush 12498 NT_STATUS_OK
QUERY_FILE_INFORMATION 12498 1004 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
Flush 12498 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
Flush 12498 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
Flush 12498 NT_STATUS_OK
SET_FILE_INFORMATION 12498 1004 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
Flush 12498 NT_STATUS_OK
Close 12498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12499 NT_STATUS_OK
SET_FILE_INFORMATION 12499 1004 NT_STATUS_OK
Close 12499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12500 NT_STATUS_OK
ReadX 12500 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12501 NT_STATUS_OK
Close 12501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12503 NT_STATUS_OK
ReadX 12503 0 4096 4096 NT_STATUS_OK
ReadX 12503 4096 4096 4096 NT_STATUS_OK
ReadX 12503 8192 4096 4096 NT_STATUS_OK
ReadX 12503 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12503 16384 4096 4096 NT_STATUS_OK
ReadX 12503 20480 4096 4096 NT_STATUS_OK
ReadX 12503 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12504 NT_STATUS_OK
ReadX 12504 0 4096 4096 NT_STATUS_OK
Close 12504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12505 NT_STATUS_OK
ReadX 12505 0 4096 4096 NT_STATUS_OK
Close 12505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12506 NT_STATUS_OK
ReadX 12506 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12506 1004 NT_STATUS_OK
WriteX 12506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12507 NT_STATUS_OK
Close 12507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12506 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12509 NT_STATUS_OK
Close 12509 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12512 NT_STATUS_OK
WriteX 12512 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12512 258 NT_STATUS_OK
WriteX 12512 0 65536 65536 NT_STATUS_OK
WriteX 12512 65536 19490 19490 NT_STATUS_OK
Close 12512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12513 NT_STATUS_OK
ReadX 12513 0 4096 4096 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
QUERY_FILE_INFORMATION 12513 1004 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
SET_FILE_INFORMATION 12513 1004 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
Close 12513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12514 NT_STATUS_OK
SET_FILE_INFORMATION 12514 1004 NT_STATUS_OK
Close 12514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12516 NT_STATUS_OK
Close 12516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12518 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12518 0 4096 4096 NT_STATUS_OK
Close 12518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12519 NT_STATUS_OK
ReadX 12519 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12520 NT_STATUS_OK
ReadX 12520 0 4096 4096 NT_STATUS_OK
ReadX 12520 4096 4096 4096 NT_STATUS_OK
ReadX 12520 8192 4096 4096 NT_STATUS_OK
ReadX 12520 12288 4096 4096 NT_STATUS_OK
ReadX 12520 16384 4096 4096 NT_STATUS_OK
ReadX 12520 20480 4096 4096 NT_STATUS_OK
ReadX 12520 24576 4096 4096 NT_STATUS_OK
ReadX 12520 28672 4096 4096 NT_STATUS_OK
ReadX 12520 32768 4096 4096 NT_STATUS_OK
ReadX 12520 36864 4096 4096 NT_STATUS_OK
ReadX 12520 40960 4096 4096 NT_STATUS_OK
ReadX 12520 45056 4096 4096 NT_STATUS_OK
ReadX 12520 49152 4096 4096 NT_STATUS_OK
ReadX 12520 53248 4096 4096 NT_STATUS_OK
ReadX 12520 57344 4096 4096 NT_STATUS_OK
ReadX 12520 61440 4096 4096 NT_STATUS_OK
ReadX 12520 65536 4096 4096 NT_STATUS_OK
ReadX 12520 69632 4096 4096 NT_STATUS_OK
ReadX 12520 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12520 1004 NT_STATUS_OK
WriteX 12520 0 4096 4096 NT_STATUS_OK
Close 12520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12521 NT_STATUS_OK
SET_FILE_INFORMATION 12521 1004 NT_STATUS_OK
Close 12521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12523 NT_STATUS_OK
Close 12523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12515 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12526 NT_STATUS_OK
WriteX 12526 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12526 258 NT_STATUS_OK
WriteX 12526 0 65536 65536 NT_STATUS_OK
WriteX 12526 65536 8866 8866 NT_STATUS_OK
Close 12526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12527 NT_STATUS_OK
ReadX 12527 0 4096 4096 NT_STATUS_OK
WriteX 12527 0 4096 4096 NT_STATUS_OK
Flush 12527 NT_STATUS_OK
SET_FILE_INFORMATION 12527 1004 NT_STATUS_OK
WriteX 12527 0 4096 4096 NT_STATUS_OK
Flush 12527 NT_STATUS_OK
Close 12527 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12528 NT_STATUS_OK
ReadX 12528 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12529 NT_STATUS_OK
ReadX 12529 0 4096 4096 NT_STATUS_OK
Close 12529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12530 NT_STATUS_OK
ReadX 12530 0 4096 4096 NT_STATUS_OK
Close 12530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12531 NT_STATUS_OK
ReadX 12531 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12531 1004 NT_STATUS_OK
WriteX 12531 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12532 NT_STATUS_OK
Close 12532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12531 NT_STATUS_OK
Close 12522 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12534 NT_STATUS_OK
Close 12534 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12537 NT_STATUS_OK
WriteX 12537 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12537 258 NT_STATUS_OK
WriteX 12537 0 65536 65536 NT_STATUS_OK
WriteX 12537 65536 9298 9298 NT_STATUS_OK
Close 12537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12538 NT_STATUS_OK
ReadX 12538 0 4096 4096 NT_STATUS_OK
WriteX 12538 0 4096 4096 NT_STATUS_OK
Flush 12538 NT_STATUS_OK
SET_FILE_INFORMATION 12538 1004 NT_STATUS_OK
WriteX 12538 0 4096 4096 NT_STATUS_OK
Flush 12538 NT_STATUS_OK
Close 12538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12539 NT_STATUS_OK
SET_FILE_INFORMATION 12539 1004 NT_STATUS_OK
Close 12539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12540 NT_STATUS_OK
ReadX 12540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12541 NT_STATUS_OK
Close 12541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12544 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12544 0 4096 4096 NT_STATUS_OK
Close 12544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12545 NT_STATUS_OK
ReadX 12545 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12545 4096 4096 4096 NT_STATUS_OK
ReadX 12545 8192 4096 4096 NT_STATUS_OK
ReadX 12545 12288 4096 4096 NT_STATUS_OK
ReadX 12545 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12546 NT_STATUS_OK
ReadX 12546 0 4096 4096 NT_STATUS_OK
Close 12546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12547 NT_STATUS_OK
ReadX 12547 0 4096 4096 NT_STATUS_OK
Close 12547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12548 NT_STATUS_OK
ReadX 12548 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12548 1004 NT_STATUS_OK
WriteX 12548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12549 NT_STATUS_OK
Close 12549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12545 NT_STATUS_OK
Close 12548 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12551 NT_STATUS_OK
Close 12551 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12554 NT_STATUS_OK
WriteX 12554 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12554 258 NT_STATUS_OK
WriteX 12554 0 65536 65536 NT_STATUS_OK
WriteX 12554 65536 11540 11540 NT_STATUS_OK
Close 12554 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12555 NT_STATUS_OK
ReadX 12555 0 4096 4096 NT_STATUS_OK
WriteX 12555 0 4096 4096 NT_STATUS_OK
Flush 12555 NT_STATUS_OK
SET_FILE_INFORMATION 12555 1004 NT_STATUS_OK
WriteX 12555 0 4096 4096 NT_STATUS_OK
Flush 12555 NT_STATUS_OK
Close 12555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12556 NT_STATUS_OK
SET_FILE_INFORMATION 12556 1004 NT_STATUS_OK
Close 12556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12557 NT_STATUS_OK
ReadX 12557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12558 NT_STATUS_OK
Close 12558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12560 NT_STATUS_OK
ReadX 12560 61440 4096 4096 NT_STATUS_OK
ReadX 12560 126976 4096 4096 NT_STATUS_OK
WriteX 12560 0 65536 65536 NT_STATUS_OK
WriteX 12560 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12561 NT_STATUS_OK
ReadX 12561 61440 4096 4096 NT_STATUS_OK
ReadX 12561 126976 4096 4096 NT_STATUS_OK
ReadX 12561 192512 4096 4096 NT_STATUS_OK
ReadX 12561 258048 4096 4096 NT_STATUS_OK
WriteX 12561 0 65536 65536 NT_STATUS_OK
WriteX 12561 65536 65536 65536 NT_STATUS_OK
WriteX 12561 131072 65536 65536 NT_STATUS_OK
WriteX 12561 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12562 NT_STATUS_OK
ReadX 12562 61440 4096 4096 NT_STATUS_OK
ReadX 12562 126976 4096 4096 NT_STATUS_OK
ReadX 12562 192512 4096 4096 NT_STATUS_OK
ReadX 12562 258048 4096 4096 NT_STATUS_OK
ReadX 12562 323584 4096 4096 NT_STATUS_OK
ReadX 12562 389120 4096 4096 NT_STATUS_OK
ReadX 12562 454656 4096 4096 NT_STATUS_OK
ReadX 12562 520192 4096 4096 NT_STATUS_OK
WriteX 12562 0 65536 65536 NT_STATUS_OK
WriteX 12562 65536 65536 65536 NT_STATUS_OK
WriteX 12562 131072 65536 65536 NT_STATUS_OK
WriteX 12562 196608 65536 65536 NT_STATUS_OK
WriteX 12562 262144 65536 65536 NT_STATUS_OK
WriteX 12562 327680 65536 65536 NT_STATUS_OK
WriteX 12562 393216 65536 65536 NT_STATUS_OK
WriteX 12562 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12563 NT_STATUS_OK
ReadX 12563 0 4096 4096 NT_STATUS_OK
ReadX 12563 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12564 NT_STATUS_OK
WriteX 12564 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12564 258 NT_STATUS_OK
WriteX 12564 0 53 53 NT_STATUS_OK
Close 12564 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12565 NT_STATUS_OK
Close 12565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12557 NT_STATUS_OK
Close 12503 NT_STATUS_OK
Close 12560 NT_STATUS_OK
Close 12561 NT_STATUS_OK
Close 12562 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12563 8192 4096 4096 NT_STATUS_OK
ReadX 12563 12288 4096 4096 NT_STATUS_OK
WriteX 12567 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12567 258 NT_STATUS_OK
ReadX 12563 16384 4096 4096 NT_STATUS_OK
ReadX 12563 20480 4096 4096 NT_STATUS_OK
WriteX 12567 0 15360 15360 NT_STATUS_OK
Close 12567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12568 NT_STATUS_OK
ReadX 12568 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12568 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12568 1004 NT_STATUS_OK
WriteX 12568 0 4096 4096 NT_STATUS_OK
Close 12568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12569 NT_STATUS_OK
Close 12569 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12571 NT_STATUS_OK
ReadX 12571 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12572 NT_STATUS_OK
Close 12572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12571 4096 4096 4096 NT_STATUS_OK
ReadX 12571 8192 4096 4096 NT_STATUS_OK
ReadX 12571 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12574 NT_STATUS_OK
ReadX 12574 0 4096 4096 NT_STATUS_OK
ReadX 12574 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12575 NT_STATUS_OK
ReadX 12575 0 4096 4096 NT_STATUS_OK
ReadX 12575 4096 4096 4096 NT_STATUS_OK
ReadX 12575 8192 4096 4096 NT_STATUS_OK
Close 12574 NT_STATUS_OK
Close 12575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12576 NT_STATUS_OK
WriteX 12576 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12576 258 NT_STATUS_OK
WriteX 12576 0 15360 15360 NT_STATUS_OK
Close 12576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12577 NT_STATUS_OK
ReadX 12577 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12577 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12577 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12578 NT_STATUS_OK
Close 12578 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12580 NT_STATUS_OK
ReadX 12580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12581 NT_STATUS_OK
SET_FILE_INFORMATION 12581 1004 NT_STATUS_OK
Close 12581 NT_STATUS_OK
WriteX 12577 0 4096 4096 NT_STATUS_OK
Close 12577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12582 NT_STATUS_OK
Close 12582 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12584 NT_STATUS_OK
ReadX 12584 0 4096 4096 NT_STATUS_OK
ReadX 12584 4096 4096 4096 NT_STATUS_OK
ReadX 12584 8192 4096 4096 NT_STATUS_OK
ReadX 12584 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12584 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12584 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12585 NT_STATUS_OK
ReadX 12585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12586 NT_STATUS_OK
WriteX 12586 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12586 258 NT_STATUS_OK
WriteX 12586 0 53 53 NT_STATUS_OK
Close 12586 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12587 NT_STATUS_OK
Close 12587 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12585 4096 4096 4096 NT_STATUS_OK
ReadX 12585 8192 4096 4096 NT_STATUS_OK
ReadX 12585 12288 4096 4096 NT_STATUS_OK
WriteX 12589 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12589 258 NT_STATUS_OK
WriteX 12589 0 12006 12006 NT_STATUS_OK
Close 12589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12590 NT_STATUS_OK
ReadX 12590 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
WriteX 12590 0 4096 4096 NT_STATUS_OK
Close 12590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12591 NT_STATUS_OK
Close 12591 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12593 NT_STATUS_OK
ReadX 12593 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12594 NT_STATUS_OK
Close 12594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12593 4096 4096 4096 NT_STATUS_OK
ReadX 12593 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12596 NT_STATUS_OK
WriteX 12596 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12596 258 NT_STATUS_OK
WriteX 12596 0 11991 11991 NT_STATUS_OK
Close 12596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12597 NT_STATUS_OK
ReadX 12597 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12597 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12597 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12585 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12598 NT_STATUS_OK
Close 12598 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12600 NT_STATUS_OK
ReadX 12600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12601 NT_STATUS_OK
SET_FILE_INFORMATION 12601 1004 NT_STATUS_OK
Close 12601 NT_STATUS_OK
WriteX 12597 0 4096 4096 NT_STATUS_OK
Close 12597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12602 NT_STATUS_OK
Close 12602 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12604 NT_STATUS_OK
ReadX 12604 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12605 NT_STATUS_OK
Close 12605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12604 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12604 1004 NT_STATUS_OK
ReadX 12604 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12604 1004 NT_STATUS_OK
WriteX 12604 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12604 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12604 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12604 1004 NT_STATUS_OK
Close 12580 NT_STATUS_OK
WriteX 12584 0 19054 19054 NT_STATUS_OK
WriteX 12604 0 12288 12288 NT_STATUS_OK
Close 12600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12607 NT_STATUS_OK
Close 12607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12584 NT_STATUS_OK
Close 12604 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12609 NT_STATUS_OK
Close 12609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12611 NT_STATUS_OK
ReadX 12611 0 61440 61440 NT_STATUS_OK
ReadX 12611 61440 4096 4096 NT_STATUS_OK
ReadX 12611 65536 61440 61440 NT_STATUS_OK
ReadX 12611 126976 4096 4096 NT_STATUS_OK
ReadX 12611 131072 61440 61440 NT_STATUS_OK
ReadX 12611 192512 4096 4096 NT_STATUS_OK
ReadX 12611 196608 61440 61440 NT_STATUS_OK
ReadX 12611 258048 4096 4096 NT_STATUS_OK
ReadX 12611 262144 61440 61440 NT_STATUS_OK
ReadX 12611 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12612 NT_STATUS_OK
ReadX 12612 0 61440 61440 NT_STATUS_OK
ReadX 12612 61440 4096 4096 NT_STATUS_OK
ReadX 12612 65536 61440 61440 NT_STATUS_OK
ReadX 12612 126976 4096 4096 NT_STATUS_OK
ReadX 12612 131072 61440 61440 NT_STATUS_OK
ReadX 12612 192512 4096 4096 NT_STATUS_OK
ReadX 12612 196608 61440 61440 NT_STATUS_OK
ReadX 12612 258048 4096 4096 NT_STATUS_OK
ReadX 12612 262144 61440 61440 NT_STATUS_OK
ReadX 12612 323584 4096 4096 NT_STATUS_OK
ReadX 12612 327680 61440 61440 NT_STATUS_OK
ReadX 12612 389120 4096 4096 NT_STATUS_OK
ReadX 12612 393216 61440 61440 NT_STATUS_OK
ReadX 12612 454656 4096 4096 NT_STATUS_OK
ReadX 12612 458752 61440 61440 NT_STATUS_OK
ReadX 12612 520192 4096 4096 NT_STATUS_OK
ReadX 12612 524288 61440 61440 NT_STATUS_OK
ReadX 12612 585728 4096 4096 NT_STATUS_OK
ReadX 12612 589824 61440 61440 NT_STATUS_OK
ReadX 12612 651264 4096 4096 NT_STATUS_OK
ReadX 12612 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12613 NT_STATUS_OK
ReadX 12613 0 61440 61440 NT_STATUS_OK
ReadX 12613 61440 4096 4096 NT_STATUS_OK
ReadX 12613 65536 61440 61440 NT_STATUS_OK
ReadX 12613 126976 4096 4096 NT_STATUS_OK
ReadX 12613 131072 61440 61440 NT_STATUS_OK
ReadX 12613 192512 4096 4096 NT_STATUS_OK
ReadX 12613 196608 61440 61440 NT_STATUS_OK
ReadX 12613 258048 4096 4096 NT_STATUS_OK
ReadX 12613 262144 61440 61440 NT_STATUS_OK
ReadX 12613 323584 4096 4096 NT_STATUS_OK
ReadX 12613 327680 61440 61440 NT_STATUS_OK
ReadX 12613 389120 4096 4096 NT_STATUS_OK
ReadX 12613 393216 61440 61440 NT_STATUS_OK
ReadX 12613 454656 4096 4096 NT_STATUS_OK
ReadX 12613 458752 61440 61440 NT_STATUS_OK
ReadX 12613 520192 4096 4096 NT_STATUS_OK
ReadX 12613 524288 61440 61440 NT_STATUS_OK
ReadX 12613 585728 4096 4096 NT_STATUS_OK
ReadX 12613 589824 61440 61440 NT_STATUS_OK
ReadX 12613 651264 4096 4096 NT_STATUS_OK
ReadX 12613 655360 61440 61440 NT_STATUS_OK
ReadX 12613 716800 4096 4096 NT_STATUS_OK
ReadX 12613 720896 61440 61440 NT_STATUS_OK
ReadX 12613 782336 4096 4096 NT_STATUS_OK
ReadX 12613 786432 61440 61440 NT_STATUS_OK
ReadX 12613 847872 4096 4096 NT_STATUS_OK
ReadX 12613 851968 61440 61440 NT_STATUS_OK
ReadX 12613 913408 4096 4096 NT_STATUS_OK
ReadX 12613 917504 61440 61440 NT_STATUS_OK
ReadX 12613 978944 4096 4096 NT_STATUS_OK
ReadX 12613 983040 61440 61440 NT_STATUS_OK
ReadX 12613 1044480 4096 4096 NT_STATUS_OK
ReadX 12613 1048576 61440 61440 NT_STATUS_OK
ReadX 12613 1110016 4096 4096 NT_STATUS_OK
ReadX 12613 1114112 61440 61440 NT_STATUS_OK
ReadX 12613 1175552 4096 4096 NT_STATUS_OK
ReadX 12613 1179648 61440 61440 NT_STATUS_OK
ReadX 12613 1241088 4096 4096 NT_STATUS_OK
ReadX 12613 1245184 61440 61440 NT_STATUS_OK
ReadX 12613 1306624 4096 4096 NT_STATUS_OK
ReadX 12613 1310720 61440 61440 NT_STATUS_OK
ReadX 12613 1372160 4096 4096 NT_STATUS_OK
ReadX 12613 1376256 61440 61440 NT_STATUS_OK
ReadX 12613 1437696 4096 4096 NT_STATUS_OK
ReadX 12613 1441792 61440 61440 NT_STATUS_OK
ReadX 12613 1503232 4096 4096 NT_STATUS_OK
ReadX 12613 1507328 61440 61440 NT_STATUS_OK
ReadX 12613 1568768 4096 4096 NT_STATUS_OK
ReadX 12613 1572864 61440 61440 NT_STATUS_OK
ReadX 12613 1634304 4096 4096 NT_STATUS_OK
ReadX 12613 1638400 61440 61440 NT_STATUS_OK
ReadX 12613 1699840 4096 4096 NT_STATUS_OK
ReadX 12613 1703936 61440 61440 NT_STATUS_OK
ReadX 12613 1765376 4096 4096 NT_STATUS_OK
ReadX 12613 1769472 61440 61440 NT_STATUS_OK
ReadX 12613 1830912 4096 4096 NT_STATUS_OK
ReadX 12613 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12614 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12615 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12616 NT_STATUS_OK
ReadX 12616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12617 NT_STATUS_OK
ReadX 12617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12618 NT_STATUS_OK
ReadX 12618 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12619 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12619 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12620 NT_STATUS_OK
QUERY_FILE_INFORMATION 12620 1004 NT_STATUS_OK
WriteX 12620 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12620 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12621 NT_STATUS_OK
Close 12621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12622 NT_STATUS_OK
WriteX 12622 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12622 258 NT_STATUS_OK
WriteX 12622 0 491 491 NT_STATUS_OK
Close 12622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12623 NT_STATUS_OK
ReadX 12623 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12620 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12625 NT_STATUS_OK
Close 12625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12626 NT_STATUS_OK
WriteX 12626 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12626 258 NT_STATUS_OK
WriteX 12626 0 543 543 NT_STATUS_OK
Close 12626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12627 NT_STATUS_OK
ReadX 12627 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12611 NT_STATUS_OK
Close 12612 NT_STATUS_OK
Close 12613 NT_STATUS_OK
Close 12627 NT_STATUS_OK
Close 12615 NT_STATUS_OK
Close 12616 NT_STATUS_OK
Close 12617 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12630 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12631 NT_STATUS_OK
ReadX 12631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12632 NT_STATUS_OK
ReadX 12632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12633 NT_STATUS_OK
ReadX 12633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12634 NT_STATUS_OK
ReadX 12634 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12635 NT_STATUS_OK
ReadX 12635 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12639 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12640 NT_STATUS_OK
QUERY_FILE_INFORMATION 12640 1004 NT_STATUS_OK
WriteX 12640 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12640 258 NT_STATUS_OK
WriteX 12640 0 2048 2048 NT_STATUS_OK
Close 12640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12641 NT_STATUS_OK
ReadX 12641 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12641 0 4096 4096 NT_STATUS_OK
Flush 12641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12641 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12646 NT_STATUS_OK
WriteX 12646 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12646 258 NT_STATUS_OK
WriteX 12646 0 2048 2048 NT_STATUS_OK
Close 12646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12647 NT_STATUS_OK
ReadX 12647 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12651 NT_STATUS_OK
Close 12651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12652 NT_STATUS_OK
WriteX 12652 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12652 258 NT_STATUS_OK
WriteX 12652 0 2048 2048 NT_STATUS_OK
Close 12652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12653 NT_STATUS_OK
ReadX 12653 0 2048 2048 NT_STATUS_OK
ReadX 12631 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12635 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12647 0 4096 4096 NT_STATUS_OK
WriteX 12631 0 8192 8192 NT_STATUS_OK
WriteX 12632 0 4096 4096 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
ReadX 12647 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12656 NT_STATUS_OK
ReadX 12656 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12657 NT_STATUS_OK
QUERY_FILE_INFORMATION 12657 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Close 12632 NT_STATUS_OK
Close 12633 NT_STATUS_OK
Close 12634 NT_STATUS_OK
Close 12647 NT_STATUS_OK
Close 12631 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12659 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12660 NT_STATUS_OK
ReadX 12660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12661 NT_STATUS_OK
ReadX 12661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12662 NT_STATUS_OK
ReadX 12662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12663 NT_STATUS_OK
ReadX 12663 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12664 NT_STATUS_OK
ReadX 12664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12665 NT_STATUS_OK
ReadX 12665 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12666 NT_STATUS_OK
ReadX 12666 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12667 NT_STATUS_OK
ReadX 12667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12668 NT_STATUS_OK
ReadX 12668 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12669 NT_STATUS_OK
ReadX 12669 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12670 NT_STATUS_OK
ReadX 12670 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12671 NT_STATUS_OK
ReadX 12671 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12672 NT_STATUS_OK
ReadX 12672 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12676 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12677 NT_STATUS_OK
QUERY_FILE_INFORMATION 12677 1004 NT_STATUS_OK
WriteX 12677 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12677 258 NT_STATUS_OK
WriteX 12677 0 2048 2048 NT_STATUS_OK
Close 12677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12678 NT_STATUS_OK
ReadX 12678 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12679 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12679 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12680 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12680 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12684 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12685 NT_STATUS_OK
QUERY_FILE_INFORMATION 12685 1004 NT_STATUS_OK
WriteX 12685 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12685 258 NT_STATUS_OK
WriteX 12685 0 2048 2048 NT_STATUS_OK
Close 12685 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12686 NT_STATUS_OK
ReadX 12686 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12678 0 4096 4096 NT_STATUS_OK
Flush 12678 NT_STATUS_OK
WriteX 12686 0 4096 4096 NT_STATUS_OK
Flush 12686 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12678 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12686 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12680 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12687 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12687 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12688 NT_STATUS_OK
WriteX 12688 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12688 258 NT_STATUS_OK
WriteX 12688 0 4096 4096 NT_STATUS_OK
Close 12688 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12689 NT_STATUS_OK
ReadX 12689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12690 NT_STATUS_OK
Close 12690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12691 NT_STATUS_OK
WriteX 12691 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12691 258 NT_STATUS_OK
WriteX 12691 0 4096 4096 NT_STATUS_OK
Close 12691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12692 NT_STATUS_OK
ReadX 12692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12692 0 4096 4096 NT_STATUS_OK
Close 12689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12672 NT_STATUS_OK
Close 12666 NT_STATUS_OK
Close 12680 NT_STATUS_OK
Close 12669 NT_STATUS_OK
Close 12670 NT_STATUS_OK
Close 12671 NT_STATUS_OK
Close 12667 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Close 12661 NT_STATUS_OK
Close 12664 NT_STATUS_OK
Close 12665 NT_STATUS_OK
Close 12662 NT_STATUS_OK
Close 12663 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12695 NT_STATUS_OK
Close 12695 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12697 NT_STATUS_OK
ReadX 12697 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12698 NT_STATUS_OK
Close 12698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12699 NT_STATUS_OK
WriteX 12699 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12699 258 NT_STATUS_OK
WriteX 12699 0 2048 2048 NT_STATUS_OK
Close 12699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12700 NT_STATUS_OK
ReadX 12700 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12701 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12701 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12702 NT_STATUS_OK
ReadX 12702 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12703 NT_STATUS_OK
ReadX 12703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12704 NT_STATUS_OK
ReadX 12704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12705 NT_STATUS_OK
ReadX 12705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12706 NT_STATUS_OK
ReadX 12706 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12707 NT_STATUS_OK
ReadX 12707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12708 NT_STATUS_OK
ReadX 12708 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12709 NT_STATUS_OK
ReadX 12709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12710 NT_STATUS_OK
ReadX 12710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12711 NT_STATUS_OK
ReadX 12711 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12712 NT_STATUS_OK
ReadX 12712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12713 NT_STATUS_OK
ReadX 12713 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12678 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12714 NT_STATUS_OK
QUERY_FILE_INFORMATION 12714 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12697 NT_STATUS_OK
Close 12700 NT_STATUS_OK
Close 12712 NT_STATUS_OK
Close 12707 NT_STATUS_OK
Close 12708 NT_STATUS_OK
Close 12709 NT_STATUS_OK
Close 12710 NT_STATUS_OK
Close 12711 NT_STATUS_OK
Close 12713 NT_STATUS_OK
Close 12701 NT_STATUS_OK
Close 12702 NT_STATUS_OK
Close 12705 NT_STATUS_OK
Close 12706 NT_STATUS_OK
Close 12703 NT_STATUS_OK
Close 12704 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12686 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12716 NT_STATUS_OK
QUERY_FILE_INFORMATION 12716 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12718 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
Close 12718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12719 NT_STATUS_OK
ReadX 12719 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12720 NT_STATUS_OK
ReadX 12720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12721 NT_STATUS_OK
ReadX 12721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12722 NT_STATUS_OK
ReadX 12722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12723 NT_STATUS_OK
ReadX 12723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12724 NT_STATUS_OK
ReadX 12724 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12725 NT_STATUS_OK
ReadX 12725 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12726 NT_STATUS_OK
ReadX 12726 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12727 NT_STATUS_OK
ReadX 12727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12728 NT_STATUS_OK
ReadX 12728 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12729 NT_STATUS_OK
ReadX 12729 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12730 NT_STATUS_OK
ReadX 12730 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12731 NT_STATUS_OK
ReadX 12731 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12735 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12736 NT_STATUS_OK
QUERY_FILE_INFORMATION 12736 1004 NT_STATUS_OK
WriteX 12736 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12736 258 NT_STATUS_OK
WriteX 12736 0 2048 2048 NT_STATUS_OK
Close 12736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12737 NT_STATUS_OK
ReadX 12737 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12738 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12739 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12740 NT_STATUS_OK
ReadX 12740 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12741 NT_STATUS_OK
ReadX 12741 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12742 NT_STATUS_OK
ReadX 12742 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12743 NT_STATUS_OK
ReadX 12743 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12747 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12748 NT_STATUS_OK
QUERY_FILE_INFORMATION 12748 1004 NT_STATUS_OK
WriteX 12748 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12748 258 NT_STATUS_OK
WriteX 12748 0 2048 2048 NT_STATUS_OK
Close 12748 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12749 NT_STATUS_OK
ReadX 12749 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12750 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12751 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12751 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12755 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12756 NT_STATUS_OK
QUERY_FILE_INFORMATION 12756 1004 NT_STATUS_OK
WriteX 12756 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12756 258 NT_STATUS_OK
WriteX 12756 0 2048 2048 NT_STATUS_OK
Close 12756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12757 NT_STATUS_OK
ReadX 12757 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12737 0 4096 4096 NT_STATUS_OK
Flush 12737 NT_STATUS_OK
WriteX 12749 0 4096 4096 NT_STATUS_OK
Flush 12749 NT_STATUS_OK
WriteX 12757 0 4096 4096 NT_STATUS_OK
Flush 12757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12737 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12749 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12757 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12739 4096 16384 16384 NT_STATUS_OK
ReadX 12719 4096 16384 16384 NT_STATUS_OK
ReadX 12751 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12758 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12759 NT_STATUS_OK
ReadX 12759 0 2048 2048 NT_STATUS_OK
WriteX 12759 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12760 NT_STATUS_OK
QUERY_FILE_INFORMATION 12760 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12759 NT_STATUS_OK
Close 12743 NT_STATUS_OK
Close 12731 NT_STATUS_OK
Close 12723 NT_STATUS_OK
Close 12739 NT_STATUS_OK
Close 12740 NT_STATUS_OK
Close 12741 NT_STATUS_OK
Close 12742 NT_STATUS_OK
Close 12730 NT_STATUS_OK
Close 12751 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Close 12728 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Close 12726 NT_STATUS_OK
Close 12727 NT_STATUS_OK
Close 12719 NT_STATUS_OK
Close 12720 NT_STATUS_OK
Close 12721 NT_STATUS_OK
Close 12722 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12762 NT_STATUS_OK
QUERY_FILE_INFORMATION 12762 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12764 NT_STATUS_OK
QUERY_FILE_INFORMATION 12764 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12766 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12767 NT_STATUS_OK
ReadX 12767 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12768 NT_STATUS_OK
ReadX 12768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12769 NT_STATUS_OK
ReadX 12769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12770 NT_STATUS_OK
ReadX 12770 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12771 NT_STATUS_OK
ReadX 12771 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12767 4096 16384 16384 NT_STATUS_OK
WriteX 12767 0 4096 4096 NT_STATUS_OK
WriteX 12768 0 4096 4096 NT_STATUS_OK
WriteX 12769 0 4096 4096 NT_STATUS_OK
WriteX 12770 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12772 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12773 NT_STATUS_OK
ReadX 12773 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12774 NT_STATUS_OK
ReadX 12774 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12775 NT_STATUS_OK
ReadX 12775 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12776 NT_STATUS_OK
ReadX 12776 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12777 NT_STATUS_OK
ReadX 12777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12778 NT_STATUS_OK
ReadX 12778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12779 NT_STATUS_OK
ReadX 12779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12780 NT_STATUS_OK
ReadX 12780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12781 NT_STATUS_OK
ReadX 12781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12782 NT_STATUS_OK
ReadX 12782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12783 NT_STATUS_OK
ReadX 12783 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12784 NT_STATUS_OK
ReadX 12784 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12785 NT_STATUS_OK
ReadX 12785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12786 NT_STATUS_OK
ReadX 12786 0 8192 8192 NT_STATUS_OK
ReadX 12773 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12787 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12787 0 4096 4096 NT_STATUS_OK
ReadX 12787 4096 4096 4096 NT_STATUS_OK
ReadX 12787 8192 4096 4096 NT_STATUS_OK
WriteX 12773 0 4096 4096 NT_STATUS_OK
WriteX 12774 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12788 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12788 0 4096 4096 NT_STATUS_OK
ReadX 12788 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12767 0 4096 4096 NT_STATUS_OK
WriteX 12768 0 4096 4096 NT_STATUS_OK
WriteX 12769 0 4096 4096 NT_STATUS_OK
Close 12786 NT_STATUS_OK
WriteX 12770 0 4096 4096 NT_STATUS_OK
Close 12779 NT_STATUS_OK
Close 12784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12787 NT_STATUS_OK
Close 12781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12782 NT_STATUS_OK
Close 12767 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12780 NT_STATUS_OK
Close 12785 NT_STATUS_OK
Close 12773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12789 NT_STATUS_OK
Close 12774 NT_STATUS_OK
ReadX 12789 0 4096 4096 NT_STATUS_OK
Close 12788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12790 NT_STATUS_OK
Close 12777 NT_STATUS_OK
ReadX 12790 0 4096 4096 NT_STATUS_OK
Close 12778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12791 NT_STATUS_OK
Close 12771 NT_STATUS_OK
ReadX 12791 0 4096 4096 NT_STATUS_OK
Close 12768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12792 NT_STATUS_OK
Close 12769 NT_STATUS_OK
ReadX 12792 0 4096 4096 NT_STATUS_OK
Close 12770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12793 NT_STATUS_OK
ReadX 12793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12794 NT_STATUS_OK
ReadX 12794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12795 NT_STATUS_OK
ReadX 12795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12796 NT_STATUS_OK
ReadX 12796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12797 NT_STATUS_OK
ReadX 12797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12798 NT_STATUS_OK
ReadX 12798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12799 NT_STATUS_OK
ReadX 12799 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12803 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12804 NT_STATUS_OK
QUERY_FILE_INFORMATION 12804 1004 NT_STATUS_OK
WriteX 12804 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12804 258 NT_STATUS_OK
WriteX 12804 0 2048 2048 NT_STATUS_OK
Close 12804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12805 NT_STATUS_OK
ReadX 12805 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12789 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12807 NT_STATUS_OK
ReadX 12807 0 4096 4096 NT_STATUS_OK
ReadX 12807 4096 4096 4096 NT_STATUS_OK
WriteX 12807 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12808 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12809 NT_STATUS_OK
ReadX 12809 0 4096 4096 NT_STATUS_OK
ReadX 12809 4096 4096 4096 NT_STATUS_OK
WriteX 12809 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12810 NT_STATUS_OK
QUERY_FILE_INFORMATION 12810 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12793 NT_STATUS_OK
Close 12798 NT_STATUS_OK
Close 12794 NT_STATUS_OK
Close 12795 NT_STATUS_OK
Close 12796 NT_STATUS_OK
Close 12797 NT_STATUS_OK
Close 12799 NT_STATUS_OK
Close 12789 NT_STATUS_OK
Close 12790 NT_STATUS_OK
Close 12791 NT_STATUS_OK
Close 12792 NT_STATUS_OK
Close 12775 NT_STATUS_OK
Close 12776 NT_STATUS_OK
Close 12809 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12812 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12812 0 4096 4096 NT_STATUS_OK
ReadX 12812 4096 4096 4096 NT_STATUS_OK
ReadX 12812 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12813 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12814 NT_STATUS_OK
ReadX 12814 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12815 NT_STATUS_OK
ReadX 12815 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12816 NT_STATUS_OK
ReadX 12816 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12817 NT_STATUS_OK
ReadX 12817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12818 NT_STATUS_OK
ReadX 12818 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12819 NT_STATUS_OK
ReadX 12819 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12820 NT_STATUS_OK
ReadX 12820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12821 NT_STATUS_OK
ReadX 12821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12822 NT_STATUS_OK
ReadX 12822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12823 NT_STATUS_OK
ReadX 12823 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12824 NT_STATUS_OK
ReadX 12824 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12825 NT_STATUS_OK
ReadX 12825 0 4096 4096 NT_STATUS_OK
ReadX 12813 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12829 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12830 NT_STATUS_OK
QUERY_FILE_INFORMATION 12830 1004 NT_STATUS_OK
WriteX 12830 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12830 258 NT_STATUS_OK
WriteX 12830 0 2048 2048 NT_STATUS_OK
Close 12830 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12831 NT_STATUS_OK
ReadX 12831 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12831 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12835 NT_STATUS_OK
Close 12835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12836 NT_STATUS_OK
QUERY_FILE_INFORMATION 12836 1004 NT_STATUS_OK
WriteX 12836 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12836 258 NT_STATUS_OK
WriteX 12836 0 2048 2048 NT_STATUS_OK
Close 12836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12837 NT_STATUS_OK
ReadX 12837 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12837 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12820 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12838 NT_STATUS_OK
QUERY_FILE_INFORMATION 12838 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12824 NT_STATUS_OK
Close 12819 NT_STATUS_OK
Close 12825 NT_STATUS_OK
Close 12813 NT_STATUS_OK
Close 12814 NT_STATUS_OK
Close 12817 NT_STATUS_OK
Close 12818 NT_STATUS_OK
Close 12815 NT_STATUS_OK
Close 12816 NT_STATUS_OK
Close 12820 NT_STATUS_OK
Close 12821 NT_STATUS_OK
Close 12822 NT_STATUS_OK
Close 12823 NT_STATUS_OK
Close 12812 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12840 NT_STATUS_OK
QUERY_FILE_INFORMATION 12840 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12842 NT_STATUS_OK
ReadX 12842 61440 4096 4096 NT_STATUS_OK
ReadX 12842 126976 4096 4096 NT_STATUS_OK
WriteX 12842 0 65536 65536 NT_STATUS_OK
WriteX 12842 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12843 NT_STATUS_OK
ReadX 12843 61440 4096 4096 NT_STATUS_OK
ReadX 12843 126976 4096 4096 NT_STATUS_OK
ReadX 12843 192512 4096 4096 NT_STATUS_OK
ReadX 12843 258048 4096 4096 NT_STATUS_OK
WriteX 12843 0 65536 65536 NT_STATUS_OK
WriteX 12843 65536 65536 65536 NT_STATUS_OK
WriteX 12843 131072 65536 65536 NT_STATUS_OK
WriteX 12843 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12844 NT_STATUS_OK
ReadX 12844 61440 4096 4096 NT_STATUS_OK
ReadX 12844 126976 4096 4096 NT_STATUS_OK
ReadX 12844 192512 4096 4096 NT_STATUS_OK
ReadX 12844 258048 4096 4096 NT_STATUS_OK
ReadX 12844 323584 4096 4096 NT_STATUS_OK
ReadX 12844 389120 4096 4096 NT_STATUS_OK
ReadX 12844 454656 4096 4096 NT_STATUS_OK
ReadX 12844 520192 4096 4096 NT_STATUS_OK
WriteX 12844 0 65536 65536 NT_STATUS_OK
WriteX 12844 65536 65536 65536 NT_STATUS_OK
WriteX 12844 131072 65536 65536 NT_STATUS_OK
WriteX 12844 196608 65536 65536 NT_STATUS_OK
WriteX 12844 262144 65536 65536 NT_STATUS_OK
WriteX 12844 327680 65536 65536 NT_STATUS_OK
WriteX 12844 393216 65536 65536 NT_STATUS_OK
WriteX 12844 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12845 NT_STATUS_OK
ReadX 12845 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12845 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12845 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12845 8192 4096 4096 NT_STATUS_OK
ReadX 12845 12288 4096 4096 NT_STATUS_OK
ReadX 12845 16384 4096 4096 NT_STATUS_OK
ReadX 12845 20480 4096 4096 NT_STATUS_OK
ReadX 12845 24576 4096 4096 NT_STATUS_OK
ReadX 12845 28672 4096 4096 NT_STATUS_OK
ReadX 12845 32768 4096 4096 NT_STATUS_OK
ReadX 12845 36864 4096 4096 NT_STATUS_OK
ReadX 12845 40960 4096 4096 NT_STATUS_OK
ReadX 12845 45056 4096 4096 NT_STATUS_OK
ReadX 12845 49152 4096 4096 NT_STATUS_OK
ReadX 12845 53248 4096 4096 NT_STATUS_OK
ReadX 12845 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12845 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12846 NT_STATUS_OK
Close 12846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12842 NT_STATUS_OK
Close 12843 NT_STATUS_OK
Close 12844 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12848 NT_STATUS_OK
WriteX 12848 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12848 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12848 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12848 1004 NT_STATUS_OK
WriteX 12848 0 57088 57088 NT_STATUS_OK
WriteX 12848 0 4096 4096 NT_STATUS_OK
Flush 12848 NT_STATUS_OK
Close 12845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12849 NT_STATUS_OK
SET_FILE_INFORMATION 12849 1004 NT_STATUS_OK
Close 12849 NT_STATUS_OK
SET_FILE_INFORMATION 12848 1004 NT_STATUS_OK
WriteX 12848 0 4096 4096 NT_STATUS_OK
Close 12848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12850 NT_STATUS_OK
Close 12850 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12852 NT_STATUS_OK
ReadX 12852 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12852 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12853 NT_STATUS_OK
WriteX 12853 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12853 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12853 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12853 1004 NT_STATUS_OK
WriteX 12853 0 51456 51456 NT_STATUS_OK
WriteX 12853 0 4096 4096 NT_STATUS_OK
Flush 12853 NT_STATUS_OK
SET_FILE_INFORMATION 12853 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12853 1004 NT_STATUS_OK
WriteX 12853 0 4096 4096 NT_STATUS_OK
Close 12853 NT_STATUS_OK
Close 12852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12855 NT_STATUS_OK
Close 12855 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12857 NT_STATUS_OK
ReadX 12857 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12857 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12859 NT_STATUS_OK
Close 12859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12862 NT_STATUS_OK
WriteX 12862 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12862 258 NT_STATUS_OK
WriteX 12862 0 53077 53077 NT_STATUS_OK
Close 12862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12863 NT_STATUS_OK
WriteX 12863 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12863 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12863 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12863 1004 NT_STATUS_OK
WriteX 12863 0 65536 65536 NT_STATUS_OK
WriteX 12863 65536 1856 1856 NT_STATUS_OK
WriteX 12863 0 4096 4096 NT_STATUS_OK
Flush 12863 NT_STATUS_OK
SET_FILE_INFORMATION 12863 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12863 1004 NT_STATUS_OK
WriteX 12863 0 4096 4096 NT_STATUS_OK
Close 12863 NT_STATUS_OK
Close 12857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12865 NT_STATUS_OK
Close 12865 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12867 NT_STATUS_OK
ReadX 12867 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12869 NT_STATUS_OK
Close 12869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12872 NT_STATUS_OK
WriteX 12872 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12872 258 NT_STATUS_OK
WriteX 12872 0 7983 7983 NT_STATUS_OK
Close 12872 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12874 NT_STATUS_OK
Close 12874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12877 NT_STATUS_OK
WriteX 12877 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12877 258 NT_STATUS_OK
WriteX 12877 0 65536 65536 NT_STATUS_OK
WriteX 12877 65536 65536 65536 NT_STATUS_OK
WriteX 12877 131072 65536 65536 NT_STATUS_OK
WriteX 12877 196608 65536 65536 NT_STATUS_OK
WriteX 12877 262144 65536 65536 NT_STATUS_OK
WriteX 12877 327680 65536 65536 NT_STATUS_OK
WriteX 12877 393216 65536 65536 NT_STATUS_OK
WriteX 12877 458752 46731 46731 NT_STATUS_OK
Close 12877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12878 NT_STATUS_OK
WriteX 12878 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12878 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12867 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12878 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12878 1004 NT_STATUS_OK
WriteX 12878 0 65536 65536 NT_STATUS_OK
WriteX 12878 65536 22848 22848 NT_STATUS_OK
WriteX 12878 0 4096 4096 NT_STATUS_OK
Flush 12878 NT_STATUS_OK
SET_FILE_INFORMATION 12878 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12878 1004 NT_STATUS_OK
WriteX 12878 0 4096 4096 NT_STATUS_OK
Close 12878 NT_STATUS_OK
Close 12867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12880 NT_STATUS_OK
Close 12880 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12882 NT_STATUS_OK
ReadX 12882 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12882 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12883 NT_STATUS_OK
ReadX 12883 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12883 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12883 1004 NT_STATUS_OK
ReadX 12883 8192 4096 4096 NT_STATUS_OK
ReadX 12883 12288 4096 4096 NT_STATUS_OK
ReadX 12883 16384 4096 4096 NT_STATUS_OK
ReadX 12883 20480 4096 4096 NT_STATUS_OK
ReadX 12883 24576 4096 4096 NT_STATUS_OK
ReadX 12883 28672 4096 4096 NT_STATUS_OK
ReadX 12883 32768 4096 4096 NT_STATUS_OK
ReadX 12883 36864 4096 4096 NT_STATUS_OK
ReadX 12883 40960 4096 4096 NT_STATUS_OK
ReadX 12883 45056 4096 4096 NT_STATUS_OK
ReadX 12883 49152 4096 4096 NT_STATUS_OK
ReadX 12883 53248 4096 4096 NT_STATUS_OK
ReadX 12883 57344 4096 4096 NT_STATUS_OK
ReadX 12883 61440 4096 4096 NT_STATUS_OK
ReadX 12883 65536 4096 4096 NT_STATUS_OK
ReadX 12883 69632 4096 4096 NT_STATUS_OK
ReadX 12883 73728 4096 4096 NT_STATUS_OK
ReadX 12883 77824 4096 4096 NT_STATUS_OK
ReadX 12883 81920 4096 4096 NT_STATUS_OK
ReadX 12883 86016 4096 4096 NT_STATUS_OK
ReadX 12883 90112 4096 4096 NT_STATUS_OK
ReadX 12883 94208 4096 4096 NT_STATUS_OK
ReadX 12883 98304 4096 4096 NT_STATUS_OK
ReadX 12883 102400 4096 4096 NT_STATUS_OK
ReadX 12883 106496 4096 4096 NT_STATUS_OK
ReadX 12883 110592 4096 4096 NT_STATUS_OK
ReadX 12883 114688 4096 4096 NT_STATUS_OK
ReadX 12883 118784 4096 4096 NT_STATUS_OK
ReadX 12883 122880 4096 4096 NT_STATUS_OK
ReadX 12883 126976 4096 4096 NT_STATUS_OK
ReadX 12883 131072 4096 4096 NT_STATUS_OK
ReadX 12883 135168 4096 4096 NT_STATUS_OK
ReadX 12883 139264 4096 4096 NT_STATUS_OK
ReadX 12883 143360 4096 4096 NT_STATUS_OK
ReadX 12883 147456 4096 4096 NT_STATUS_OK
ReadX 12883 151552 4096 4096 NT_STATUS_OK
ReadX 12883 155648 4096 4096 NT_STATUS_OK
ReadX 12883 159744 4096 4096 NT_STATUS_OK
ReadX 12883 163840 4096 4096 NT_STATUS_OK
ReadX 12883 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12883 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12884 NT_STATUS_OK
Close 12884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12882 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12886 NT_STATUS_OK
WriteX 12886 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12886 258 NT_STATUS_OK
Close 12883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12887 NT_STATUS_OK
SET_FILE_INFORMATION 12887 1004 NT_STATUS_OK
Close 12887 NT_STATUS_OK
WriteX 12886 0 42388 42388 NT_STATUS_OK
Close 12886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12888 NT_STATUS_OK
Close 12888 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12890 NT_STATUS_OK
ReadX 12890 0 4096 4096 NT_STATUS_OK
ReadX 12890 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12891 NT_STATUS_OK
WriteX 12891 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12891 258 NT_STATUS_OK
SET_FILE_INFORMATION 12891 1004 NT_STATUS_OK
WriteX 12891 0 42652 42652 NT_STATUS_OK
Close 12891 NT_STATUS_OK
Close 12890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12893 NT_STATUS_OK
Close 12893 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12895 NT_STATUS_OK
ReadX 12895 0 4096 4096 NT_STATUS_OK
ReadX 12895 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12897 NT_STATUS_OK
Close 12897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12900 NT_STATUS_OK
WriteX 12900 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12900 258 NT_STATUS_OK
WriteX 12900 0 65536 65536 NT_STATUS_OK
WriteX 12900 65536 49 49 NT_STATUS_OK
Close 12900 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12901 NT_STATUS_OK
ReadX 12901 0 61440 61440 NT_STATUS_OK
ReadX 12901 61440 4096 4096 NT_STATUS_OK
ReadX 12901 65536 61440 61440 NT_STATUS_OK
ReadX 12901 126976 4096 4096 NT_STATUS_OK
ReadX 12901 131072 61440 61440 NT_STATUS_OK
ReadX 12901 192512 4096 4096 NT_STATUS_OK
ReadX 12901 196608 61440 61440 NT_STATUS_OK
ReadX 12901 258048 4096 4096 NT_STATUS_OK
ReadX 12901 262144 61440 61440 NT_STATUS_OK
ReadX 12901 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12902 NT_STATUS_OK
ReadX 12902 0 61440 61440 NT_STATUS_OK
ReadX 12902 61440 4096 4096 NT_STATUS_OK
ReadX 12902 65536 61440 61440 NT_STATUS_OK
ReadX 12902 126976 4096 4096 NT_STATUS_OK
ReadX 12902 131072 61440 61440 NT_STATUS_OK
ReadX 12902 192512 4096 4096 NT_STATUS_OK
ReadX 12902 196608 61440 61440 NT_STATUS_OK
ReadX 12902 258048 4096 4096 NT_STATUS_OK
ReadX 12902 262144 61440 61440 NT_STATUS_OK
ReadX 12902 323584 4096 4096 NT_STATUS_OK
ReadX 12902 327680 61440 61440 NT_STATUS_OK
ReadX 12902 389120 4096 4096 NT_STATUS_OK
ReadX 12902 393216 61440 61440 NT_STATUS_OK
ReadX 12902 454656 4096 4096 NT_STATUS_OK
ReadX 12902 458752 61440 61440 NT_STATUS_OK
ReadX 12902 520192 4096 4096 NT_STATUS_OK
ReadX 12902 524288 61440 61440 NT_STATUS_OK
ReadX 12902 585728 4096 4096 NT_STATUS_OK
ReadX 12902 589824 61440 61440 NT_STATUS_OK
ReadX 12902 651264 4096 4096 NT_STATUS_OK
ReadX 12902 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12903 NT_STATUS_OK
ReadX 12903 0 61440 61440 NT_STATUS_OK
ReadX 12903 61440 4096 4096 NT_STATUS_OK
ReadX 12903 65536 61440 61440 NT_STATUS_OK
ReadX 12903 126976 4096 4096 NT_STATUS_OK
ReadX 12903 131072 61440 61440 NT_STATUS_OK
ReadX 12903 192512 4096 4096 NT_STATUS_OK
ReadX 12903 196608 61440 61440 NT_STATUS_OK
ReadX 12903 258048 4096 4096 NT_STATUS_OK
ReadX 12903 262144 61440 61440 NT_STATUS_OK
ReadX 12903 323584 4096 4096 NT_STATUS_OK
ReadX 12903 327680 61440 61440 NT_STATUS_OK
ReadX 12903 389120 4096 4096 NT_STATUS_OK
ReadX 12903 393216 61440 61440 NT_STATUS_OK
ReadX 12903 454656 4096 4096 NT_STATUS_OK
ReadX 12903 458752 61440 61440 NT_STATUS_OK
ReadX 12903 520192 4096 4096 NT_STATUS_OK
ReadX 12903 524288 61440 61440 NT_STATUS_OK
ReadX 12903 585728 4096 4096 NT_STATUS_OK
ReadX 12903 589824 61440 61440 NT_STATUS_OK
ReadX 12903 651264 4096 4096 NT_STATUS_OK
ReadX 12903 655360 61440 61440 NT_STATUS_OK
ReadX 12903 716800 4096 4096 NT_STATUS_OK
ReadX 12903 720896 61440 61440 NT_STATUS_OK
ReadX 12903 782336 4096 4096 NT_STATUS_OK
ReadX 12903 786432 61440 61440 NT_STATUS_OK
ReadX 12903 847872 4096 4096 NT_STATUS_OK
ReadX 12903 851968 61440 61440 NT_STATUS_OK
ReadX 12903 913408 4096 4096 NT_STATUS_OK
ReadX 12903 917504 61440 61440 NT_STATUS_OK
ReadX 12903 978944 4096 4096 NT_STATUS_OK
ReadX 12903 983040 61440 61440 NT_STATUS_OK
ReadX 12903 1044480 4096 4096 NT_STATUS_OK
ReadX 12903 1048576 61440 61440 NT_STATUS_OK
ReadX 12903 1110016 4096 4096 NT_STATUS_OK
ReadX 12903 1114112 61440 61440 NT_STATUS_OK
ReadX 12903 1175552 4096 4096 NT_STATUS_OK
ReadX 12903 1179648 61440 61440 NT_STATUS_OK
ReadX 12903 1241088 4096 4096 NT_STATUS_OK
ReadX 12903 1245184 61440 61440 NT_STATUS_OK
ReadX 12903 1306624 4096 4096 NT_STATUS_OK
ReadX 12903 1310720 61440 61440 NT_STATUS_OK
ReadX 12903 1372160 4096 4096 NT_STATUS_OK
ReadX 12903 1376256 61440 61440 NT_STATUS_OK
ReadX 12903 1437696 4096 4096 NT_STATUS_OK
ReadX 12903 1441792 61440 61440 NT_STATUS_OK
ReadX 12903 1503232 4096 4096 NT_STATUS_OK
ReadX 12903 1507328 61440 61440 NT_STATUS_OK
ReadX 12903 1568768 4096 4096 NT_STATUS_OK
ReadX 12903 1572864 61440 61440 NT_STATUS_OK
ReadX 12903 1634304 4096 4096 NT_STATUS_OK
ReadX 12903 1638400 61440 61440 NT_STATUS_OK
ReadX 12903 1699840 4096 4096 NT_STATUS_OK
ReadX 12903 1703936 61440 61440 NT_STATUS_OK
ReadX 12903 1765376 4096 4096 NT_STATUS_OK
ReadX 12903 1769472 61440 61440 NT_STATUS_OK
ReadX 12903 1830912 4096 4096 NT_STATUS_OK
ReadX 12903 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12905 NT_STATUS_OK
QUERY_FILE_INFORMATION 12905 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12905 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12905 1005 NT_STATUS_OK
ReadX 12905 2156 24 24 NT_STATUS_OK
ReadX 12905 2139 276 276 NT_STATUS_OK
ReadX 12905 2136 14 14 NT_STATUS_OK
ReadX 12905 2136 7 7 NT_STATUS_OK
ReadX 12905 2138 12 12 NT_STATUS_OK
ReadX 12905 2137 8 8 NT_STATUS_OK
ReadX 12905 2135 15 15 NT_STATUS_OK
ReadX 12905 0 16 16 NT_STATUS_OK
ReadX 12905 16 2048 2048 NT_STATUS_OK
ReadX 12905 2064 2048 2048 NT_STATUS_OK
ReadX 12905 257 2048 2048 NT_STATUS_OK
ReadX 12905 385 2048 2048 NT_STATUS_OK
ReadX 12905 513 2048 2048 NT_STATUS_OK
ReadX 12905 641 2048 2048 NT_STATUS_OK
ReadX 12905 769 2048 2048 NT_STATUS_OK
ReadX 12905 897 2048 2048 NT_STATUS_OK
ReadX 12905 1025 2048 2048 NT_STATUS_OK
ReadX 12905 1153 2048 2048 NT_STATUS_OK
ReadX 12905 1281 2048 2048 NT_STATUS_OK
ReadX 12905 1409 2048 2048 NT_STATUS_OK
ReadX 12905 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12907 NT_STATUS_OK
Close 12907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12901 NT_STATUS_OK
Close 12902 NT_STATUS_OK
Close 12903 NT_STATUS_OK
Close 12895 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12910 NT_STATUS_OK
WriteX 12910 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12910 258 NT_STATUS_OK
WriteX 12910 0 10575 10575 NT_STATUS_OK
Flush 12910 NT_STATUS_OK
Close 12910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12911 NT_STATUS_OK
Close 12911 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12913 NT_STATUS_OK
ReadX 12913 0 4096 4096 NT_STATUS_OK
Close 12905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12915 NT_STATUS_OK
LockX 12915 2147483538 1 NT_STATUS_OK
UnlockX 12915 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12915 1005 NT_STATUS_OK
ReadX 12915 0 512 512 NT_STATUS_OK
ReadX 12915 512 512 512 NT_STATUS_OK
ReadX 12915 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12915 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12915 1004 NT_STATUS_OK
Close 12915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12916 NT_STATUS_OK
QUERY_FILE_INFORMATION 12916 1005 NT_STATUS_OK
ReadX 12916 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12917 NT_STATUS_OK
LockX 12917 2147483538 1 NT_STATUS_OK
UnlockX 12917 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12917 1005 NT_STATUS_OK
ReadX 12917 0 512 512 NT_STATUS_OK
ReadX 12917 512 512 512 NT_STATUS_OK
ReadX 12917 1024 512 512 NT_STATUS_OK
ReadX 12917 288 20 20 NT_STATUS_OK
ReadX 12917 308 2084 2084 NT_STATUS_OK
ReadX 12917 388 2084 2084 NT_STATUS_OK
ReadX 12917 388 2084 2084 NT_STATUS_OK
ReadX 12904 2157 1386 1386 NT_STATUS_OK
ReadX 12917 2472 399 399 NT_STATUS_OK
ReadX 12917 3072 1536 1536 NT_STATUS_OK
ReadX 12917 544 149 149 NT_STATUS_OK
ReadX 12917 693 485 485 NT_STATUS_OK
Close 12917 NT_STATUS_OK
ReadX 12904 2157 4096 4096 NT_STATUS_OK
ReadX 12904 6253 4096 4096 NT_STATUS_OK
ReadX 12904 10349 4096 4096 NT_STATUS_OK
ReadX 12904 14445 4096 4096 NT_STATUS_OK
ReadX 12904 18541 4096 4096 NT_STATUS_OK
ReadX 12904 22637 256 256 NT_STATUS_OK
ReadX 12904 22893 4096 4096 NT_STATUS_OK
ReadX 12904 26989 4096 4096 NT_STATUS_OK
ReadX 12904 31085 4096 4096 NT_STATUS_OK
ReadX 12904 35181 4096 4096 NT_STATUS_OK
ReadX 12904 39277 4096 4096 NT_STATUS_OK
ReadX 12904 43373 4096 4096 NT_STATUS_OK
ReadX 12904 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12904 2157 1024 1024 NT_STATUS_OK
ReadX 12904 1667 4688 4688 NT_STATUS_OK
ReadX 12904 6355 3516 3516 NT_STATUS_OK
ReadX 12904 9871 16384 16384 NT_STATUS_OK
ReadX 12904 26255 3771 3771 NT_STATUS_OK
ReadX 12904 30026 2048 2048 NT_STATUS_OK
ReadX 12904 32074 1024 1024 NT_STATUS_OK
ReadX 12904 33098 6652 6652 NT_STATUS_OK
ReadX 12904 39750 16384 16384 NT_STATUS_OK
ReadX 12904 56134 10496 10496 NT_STATUS_OK
ReadX 12904 66630 1784 1784 NT_STATUS_OK
ReadX 12904 68414 90 90 NT_STATUS_OK
ReadX 12904 68504 273 273 NT_STATUS_OK
ReadX 12904 68777 1600 1600 NT_STATUS_OK
ReadX 12904 70377 640 640 NT_STATUS_OK
ReadX 12904 71017 1280 1280 NT_STATUS_OK
ReadX 12904 72297 8464 8464 NT_STATUS_OK
ReadX 12904 80761 158 158 NT_STATUS_OK
ReadX 12904 80919 912 912 NT_STATUS_OK
ReadX 12904 81831 1980 1980 NT_STATUS_OK
ReadX 12904 83811 2256 2256 NT_STATUS_OK
ReadX 12904 86067 400 400 NT_STATUS_OK
ReadX 12904 86467 252 252 NT_STATUS_OK
ReadX 12904 86719 42 42 NT_STATUS_OK
ReadX 12904 86761 725 725 NT_STATUS_OK
ReadX 12904 2009 512 512 NT_STATUS_OK
ReadX 12904 3895 9 9 NT_STATUS_OK
ReadX 12904 3781 46 46 NT_STATUS_OK
ReadX 12904 4059 92 92 NT_STATUS_OK
ReadX 12904 3781 92 92 NT_STATUS_OK
ReadX 12904 3986 184 184 NT_STATUS_OK
ReadX 12904 3987 16384 16384 NT_STATUS_OK
ReadX 12904 3902 16384 16384 NT_STATUS_OK
ReadX 12904 3781 10240 10240 NT_STATUS_OK
ReadX 12904 3821 16384 16384 NT_STATUS_OK
ReadX 12904 3891 935 935 NT_STATUS_OK
ReadX 12904 4060 10240 10240 NT_STATUS_OK
ReadX 12904 4059 184 184 NT_STATUS_OK
ReadX 12904 256 184 184 NT_STATUS_OK
ReadX 12904 256 1026 1026 NT_STATUS_OK
ReadX 12904 3901 326 326 NT_STATUS_OK
ReadX 12904 3899 652 652 NT_STATUS_OK
ReadX 12904 256 2 2 NT_STATUS_OK
ReadX 12904 258 4948 4948 NT_STATUS_OK
Close 12904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12919 NT_STATUS_OK
Close 12919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12922 NT_STATUS_OK
WriteX 12922 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12922 258 NT_STATUS_OK
WriteX 12922 0 65536 65536 NT_STATUS_OK
WriteX 12922 65536 65536 65536 NT_STATUS_OK
WriteX 12922 131072 65536 65536 NT_STATUS_OK
WriteX 12922 196608 65536 65536 NT_STATUS_OK
WriteX 12922 262144 65536 65536 NT_STATUS_OK
WriteX 12922 327680 65536 65536 NT_STATUS_OK
WriteX 12922 393216 65536 65536 NT_STATUS_OK
WriteX 12922 458752 65536 65536 NT_STATUS_OK
WriteX 12922 524288 65536 65536 NT_STATUS_OK
WriteX 12922 589824 35257 35257 NT_STATUS_OK
Close 12922 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12924 NT_STATUS_OK
Close 12924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12927 NT_STATUS_OK
WriteX 12927 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12927 258 NT_STATUS_OK
WriteX 12927 0 65536 65536 NT_STATUS_OK
WriteX 12927 65536 65536 65536 NT_STATUS_OK
WriteX 12927 131072 65536 65536 NT_STATUS_OK
WriteX 12927 196608 65536 65536 NT_STATUS_OK
WriteX 12927 262144 65536 65536 NT_STATUS_OK
WriteX 12927 327680 65536 65536 NT_STATUS_OK
WriteX 12927 393216 65536 65536 NT_STATUS_OK
WriteX 12927 458752 65536 65536 NT_STATUS_OK
WriteX 12927 524288 65536 65536 NT_STATUS_OK
WriteX 12927 589824 57598 57598 NT_STATUS_OK
Close 12927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12929 NT_STATUS_OK
WriteX 12929 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12929 258 NT_STATUS_OK
WriteX 12929 0 12543 12543 NT_STATUS_OK
Flush 12929 NT_STATUS_OK
Close 12929 NT_STATUS_OK
Close 12913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12931 NT_STATUS_OK
Close 12931 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12933 NT_STATUS_OK
ReadX 12933 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12935 NT_STATUS_OK
QUERY_FILE_INFORMATION 12935 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12935 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12935 1005 NT_STATUS_OK
ReadX 12935 1938 24 24 NT_STATUS_OK
ReadX 12935 1920 276 276 NT_STATUS_OK
ReadX 12935 1918 14 14 NT_STATUS_OK
ReadX 12935 1918 7 7 NT_STATUS_OK
ReadX 12935 1919 12 12 NT_STATUS_OK
ReadX 12935 1919 8 8 NT_STATUS_OK
ReadX 12935 1917 15 15 NT_STATUS_OK
ReadX 12935 0 16 16 NT_STATUS_OK
ReadX 12935 16 2048 2048 NT_STATUS_OK
ReadX 12935 2064 2048 2048 NT_STATUS_OK
ReadX 12935 257 2048 2048 NT_STATUS_OK
ReadX 12935 385 2048 2048 NT_STATUS_OK
ReadX 12935 513 2048 2048 NT_STATUS_OK
ReadX 12935 641 2048 2048 NT_STATUS_OK
ReadX 12935 769 2048 2048 NT_STATUS_OK
ReadX 12935 897 2048 2048 NT_STATUS_OK
ReadX 12935 1025 2048 2048 NT_STATUS_OK
ReadX 12935 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12937 NT_STATUS_OK
Close 12937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12940 NT_STATUS_OK
WriteX 12940 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12940 258 NT_STATUS_OK
WriteX 12940 0 11588 11588 NT_STATUS_OK
Flush 12940 NT_STATUS_OK
Close 12940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12941 NT_STATUS_OK
Close 12941 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12943 NT_STATUS_OK
ReadX 12943 0 4096 4096 NT_STATUS_OK
Close 12935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12945 NT_STATUS_OK
WriteX 12945 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12945 258 NT_STATUS_OK
WriteX 12945 0 11615 11615 NT_STATUS_OK
Flush 12945 NT_STATUS_OK
Close 12945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12947 NT_STATUS_OK
Close 12947 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12949 NT_STATUS_OK
ReadX 12949 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12951 NT_STATUS_OK
Close 12951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12954 NT_STATUS_OK
WriteX 12954 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12954 258 NT_STATUS_OK
WriteX 12954 0 65536 65536 NT_STATUS_OK
WriteX 12954 65536 16050 16050 NT_STATUS_OK
Close 12954 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12934 1939 64 64 NT_STATUS_OK
ReadX 12934 128 248 248 NT_STATUS_OK
ReadX 12934 128 568 568 NT_STATUS_OK
ReadX 12934 3872 1536 1536 NT_STATUS_OK
ReadX 12934 3456 2560 2560 NT_STATUS_OK
ReadX 12934 3136 512 512 NT_STATUS_OK
ReadX 12934 2880 4096 4096 NT_STATUS_OK
ReadX 12934 3264 3072 3072 NT_STATUS_OK
ReadX 12934 320 4096 4096 NT_STATUS_OK
ReadX 12934 1024 4096 4096 NT_STATUS_OK
ReadX 12934 3616 4096 4096 NT_STATUS_OK
ReadX 12934 1939 64 64 NT_STATUS_OK
ReadX 12934 128 248 248 NT_STATUS_OK
ReadX 12934 128 608 608 NT_STATUS_OK
ReadX 12934 2858 1024 1024 NT_STATUS_OK
ReadX 12934 2810 4096 4096 NT_STATUS_OK
ReadX 12934 2826 4096 4096 NT_STATUS_OK
ReadX 12934 2580 2048 2048 NT_STATUS_OK
ReadX 12934 2800 2560 2560 NT_STATUS_OK
ReadX 12934 2100 4096 4096 NT_STATUS_OK
ReadX 12934 2084 4096 4096 NT_STATUS_OK
ReadX 12934 868 4096 4096 NT_STATUS_OK
ReadX 12934 2324 4096 4096 NT_STATUS_OK
ReadX 12934 884 4096 4096 NT_STATUS_OK
ReadX 12934 2604 1024 1024 NT_STATUS_OK
ReadX 12934 580 4096 4096 NT_STATUS_OK
ReadX 12934 596 4096 4096 NT_STATUS_OK
ReadX 12934 2752 4096 4096 NT_STATUS_OK
ReadX 12934 2842 1024 1024 NT_STATUS_OK
ReadX 12934 660 4096 4096 NT_STATUS_OK
ReadX 12934 2720 4096 4096 NT_STATUS_OK
ReadX 12934 2736 4096 4096 NT_STATUS_OK
ReadX 12934 628 4096 4096 NT_STATUS_OK
ReadX 12934 2704 4096 4096 NT_STATUS_OK
ReadX 12934 1556 4096 4096 NT_STATUS_OK
ReadX 12934 576 4096 4096 NT_STATUS_OK
ReadX 12934 3168 1536 1536 NT_STATUS_OK
ReadX 12934 832 4096 4096 NT_STATUS_OK
ReadX 12934 1088 4096 4096 NT_STATUS_OK
ReadX 12934 1344 4096 4096 NT_STATUS_OK
ReadX 12934 1600 4096 4096 NT_STATUS_OK
ReadX 12934 1856 4096 4096 NT_STATUS_OK
ReadX 12934 2112 4096 4096 NT_STATUS_OK
ReadX 12934 1892 4096 4096 NT_STATUS_OK
ReadX 12934 820 4096 4096 NT_STATUS_OK
ReadX 12934 788 4096 4096 NT_STATUS_OK
ReadX 12934 1604 4096 4096 NT_STATUS_OK
ReadX 12934 3648 4096 4096 NT_STATUS_OK
ReadX 12934 2608 4096 4096 NT_STATUS_OK
ReadX 12934 548 4096 4096 NT_STATUS_OK
ReadX 12934 740 4096 4096 NT_STATUS_OK
ReadX 12934 1344 4096 4096 NT_STATUS_OK
ReadX 12934 3392 4096 4096 NT_STATUS_OK
ReadX 12934 3904 4096 4096 NT_STATUS_OK
ReadX 12934 644 4096 4096 NT_STATUS_OK
ReadX 12934 676 4096 4096 NT_STATUS_OK
ReadX 12934 2688 4096 4096 NT_STATUS_OK
ReadX 12934 320 4096 4096 NT_STATUS_OK
ReadX 12934 900 4096 4096 NT_STATUS_OK
ReadX 12934 1908 4096 4096 NT_STATUS_OK
ReadX 12934 852 4096 4096 NT_STATUS_OK
ReadX 12934 724 4096 4096 NT_STATUS_OK
ReadX 12934 2292 4096 4096 NT_STATUS_OK
ReadX 12934 612 4096 4096 NT_STATUS_OK
ReadX 12934 388 4096 4096 NT_STATUS_OK
ReadX 12934 2368 4096 4096 NT_STATUS_OK
ReadX 12934 2624 4096 4096 NT_STATUS_OK
ReadX 12934 500 4096 4096 NT_STATUS_OK
ReadX 12934 356 4096 4096 NT_STATUS_OK
ReadX 12934 1024 4096 4096 NT_STATUS_OK
ReadX 12934 576 4096 4096 NT_STATUS_OK
ReadX 12934 340 4096 4096 NT_STATUS_OK
ReadX 12934 420 4096 4096 NT_STATUS_OK
ReadX 12934 1600 4096 4096 NT_STATUS_OK
ReadX 12934 404 4096 4096 NT_STATUS_OK
ReadX 12934 1428 4096 4096 NT_STATUS_OK
ReadX 12934 2656 4096 4096 NT_STATUS_OK
ReadX 12934 2624 4096 4096 NT_STATUS_OK
ReadX 12934 452 4096 4096 NT_STATUS_OK
ReadX 12934 692 4096 4096 NT_STATUS_OK
ReadX 12934 564 4096 4096 NT_STATUS_OK
ReadX 12934 372 4096 4096 NT_STATUS_OK
ReadX 12934 468 4096 4096 NT_STATUS_OK
ReadX 12934 484 4096 4096 NT_STATUS_OK
ReadX 12934 1088 4096 4096 NT_STATUS_OK
ReadX 12934 1924 4096 4096 NT_STATUS_OK
ReadX 12934 2768 4096 4096 NT_STATUS_OK
ReadX 12934 832 4096 4096 NT_STATUS_OK
ReadX 12934 836 4096 4096 NT_STATUS_OK
ReadX 12934 1856 4096 4096 NT_STATUS_OK
ReadX 12934 2640 4096 4096 NT_STATUS_OK
ReadX 12934 436 4096 4096 NT_STATUS_OK
ReadX 12934 1828 4096 4096 NT_STATUS_OK
ReadX 12934 804 4096 4096 NT_STATUS_OK
ReadX 12934 1860 4096 4096 NT_STATUS_OK
ReadX 12934 1812 4096 4096 NT_STATUS_OK
ReadX 12934 756 4096 4096 NT_STATUS_OK
ReadX 12934 1636 4096 4096 NT_STATUS_OK
ReadX 12934 772 4096 4096 NT_STATUS_OK
ReadX 12934 2036 4096 4096 NT_STATUS_OK
ReadX 12934 1220 4096 4096 NT_STATUS_OK
ReadX 12934 1652 4096 4096 NT_STATUS_OK
ReadX 12934 2588 4096 4096 NT_STATUS_OK
ReadX 12934 916 4096 4096 NT_STATUS_OK
ReadX 12934 260 4096 4096 NT_STATUS_OK
ReadX 12934 932 4096 4096 NT_STATUS_OK
ReadX 12934 2624 4096 4096 NT_STATUS_OK
ReadX 12934 308 4096 4096 NT_STATUS_OK
ReadX 12934 292 4096 4096 NT_STATUS_OK
ReadX 12934 1140 4096 4096 NT_STATUS_OK
ReadX 12934 276 4096 4096 NT_STATUS_OK
ReadX 12934 2020 4096 4096 NT_STATUS_OK
ReadX 12934 2880 4096 4096 NT_STATUS_OK
ReadX 12934 516 4096 4096 NT_STATUS_OK
ReadX 12934 1844 4096 4096 NT_STATUS_OK
ReadX 12934 1124 4096 4096 NT_STATUS_OK
ReadX 12934 3136 4096 4096 NT_STATUS_OK
ReadX 12934 324 4096 4096 NT_STATUS_OK
ReadX 12934 1156 4096 4096 NT_STATUS_OK
ReadX 12934 1172 4096 4096 NT_STATUS_OK
ReadX 12934 2112 4096 4096 NT_STATUS_OK
ReadX 12934 2368 4096 4096 NT_STATUS_OK
ReadX 12934 964 4096 4096 NT_STATUS_OK
ReadX 12934 980 4096 4096 NT_STATUS_OK
ReadX 12934 1012 4096 4096 NT_STATUS_OK
ReadX 12934 532 4096 4096 NT_STATUS_OK
ReadX 12934 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12934 1620 4096 4096 NT_STATUS_OK
ReadX 12934 1604 4096 4096 NT_STATUS_OK
ReadX 12934 2116 4096 4096 NT_STATUS_OK
ReadX 12934 2132 4096 4096 NT_STATUS_OK
ReadX 12934 2148 4096 4096 NT_STATUS_OK
ReadX 12934 2276 4096 4096 NT_STATUS_OK
ReadX 12934 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12956 NT_STATUS_OK
Close 12956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12959 NT_STATUS_OK
QUERY_FILE_INFORMATION 12914 1004 NT_STATUS_OK
Close 12914 NT_STATUS_OK
WriteX 12959 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12959 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12916 1004 NT_STATUS_OK
Close 12916 NT_STATUS_OK
WriteX 12959 0 65536 65536 NT_STATUS_OK
WriteX 12959 65536 64850 64850 NT_STATUS_OK
Close 12959 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12961 NT_STATUS_OK
WriteX 12961 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12961 258 NT_STATUS_OK
ReadX 12934 2068 4096 4096 NT_STATUS_OK
ReadX 12934 1588 4096 4096 NT_STATUS_OK
ReadX 12934 1572 4096 4096 NT_STATUS_OK
WriteX 12961 0 18630 18630 NT_STATUS_OK
Flush 12961 NT_STATUS_OK
Close 12961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12963 NT_STATUS_OK
Close 12963 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12965 NT_STATUS_OK
ReadX 12965 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12934 612 4096 4096 NT_STATUS_OK
ReadX 12934 564 4096 4096 NT_STATUS_OK
ReadX 12934 1876 4096 4096 NT_STATUS_OK
ReadX 12934 628 4096 4096 NT_STATUS_OK
ReadX 12934 740 4096 4096 NT_STATUS_OK
ReadX 12934 724 4096 4096 NT_STATUS_OK
ReadX 12934 644 4096 4096 NT_STATUS_OK
ReadX 12934 2324 4096 4096 NT_STATUS_OK
ReadX 12934 660 4096 4096 NT_STATUS_OK
ReadX 12934 852 4096 4096 NT_STATUS_OK
ReadX 12934 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12934 2368 4096 4096 NT_STATUS_OK
ReadX 12934 1024 4096 4096 NT_STATUS_OK
ReadX 12934 320 4096 4096 NT_STATUS_OK
ReadX 12934 580 4096 4096 NT_STATUS_OK
ReadX 12934 3136 512 512 NT_STATUS_OK
ReadX 12934 2880 4096 4096 NT_STATUS_OK
Close 12934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12966 NT_STATUS_OK
ReadX 12966 61440 4096 4096 NT_STATUS_OK
ReadX 12966 126976 4096 4096 NT_STATUS_OK
WriteX 12966 0 65536 65536 NT_STATUS_OK
WriteX 12966 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12967 NT_STATUS_OK
ReadX 12967 61440 4096 4096 NT_STATUS_OK
ReadX 12967 126976 4096 4096 NT_STATUS_OK
ReadX 12967 192512 4096 4096 NT_STATUS_OK
ReadX 12967 258048 4096 4096 NT_STATUS_OK
WriteX 12967 0 65536 65536 NT_STATUS_OK
WriteX 12967 65536 65536 65536 NT_STATUS_OK
WriteX 12967 131072 65536 65536 NT_STATUS_OK
WriteX 12967 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12968 NT_STATUS_OK
ReadX 12968 61440 4096 4096 NT_STATUS_OK
ReadX 12968 126976 4096 4096 NT_STATUS_OK
ReadX 12968 192512 4096 4096 NT_STATUS_OK
ReadX 12968 258048 4096 4096 NT_STATUS_OK
ReadX 12968 323584 4096 4096 NT_STATUS_OK
ReadX 12968 389120 4096 4096 NT_STATUS_OK
ReadX 12968 454656 4096 4096 NT_STATUS_OK
ReadX 12968 520192 4096 4096 NT_STATUS_OK
WriteX 12968 0 65536 65536 NT_STATUS_OK
WriteX 12968 65536 65536 65536 NT_STATUS_OK
WriteX 12968 131072 65536 65536 NT_STATUS_OK
WriteX 12968 196608 65536 65536 NT_STATUS_OK
WriteX 12968 262144 65536 65536 NT_STATUS_OK
WriteX 12968 327680 65536 65536 NT_STATUS_OK
WriteX 12968 393216 65536 65536 NT_STATUS_OK
WriteX 12968 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12969 NT_STATUS_OK
ReadX 12969 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12970 NT_STATUS_OK
Close 12970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12971 NT_STATUS_OK
WriteX 12971 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12971 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12969 0 8192 8192 NT_STATUS_OK
Flush 12969 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12969 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12969 0 8192 8192 NT_STATUS_OK
Flush 12969 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12969 0 8192 8192 NT_STATUS_OK
Flush 12969 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12969 0 8192 8192 NT_STATUS_OK
Flush 12969 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12973 NT_STATUS_OK
Close 12973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12965 NT_STATUS_OK
Close 12933 NT_STATUS_OK
Close 12966 NT_STATUS_OK
Close 12967 NT_STATUS_OK
Close 12968 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12976 NT_STATUS_OK
WriteX 12976 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12976 258 NT_STATUS_OK
WriteX 12976 0 62591 62591 NT_STATUS_OK
Close 12976 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12978 NT_STATUS_OK
Close 12978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12981 NT_STATUS_OK
WriteX 12981 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12981 258 NT_STATUS_OK
WriteX 12981 0 10845 10845 NT_STATUS_OK
Close 12981 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12983 NT_STATUS_OK
Close 12983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12986 NT_STATUS_OK
WriteX 12986 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12986 258 NT_STATUS_OK
WriteX 12986 0 30118 30118 NT_STATUS_OK
Close 12986 NT_STATUS_OK
WriteX 12969 0 4096 4096 NT_STATUS_OK
WriteX 12971 0 64 64 NT_STATUS_OK
Close 12971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12969 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12988 NT_STATUS_OK
ReadX 12988 0 61440 61440 NT_STATUS_OK
ReadX 12988 61440 4096 4096 NT_STATUS_OK
ReadX 12988 65536 61440 61440 NT_STATUS_OK
ReadX 12988 126976 4096 4096 NT_STATUS_OK
ReadX 12988 131072 61440 61440 NT_STATUS_OK
ReadX 12988 192512 4096 4096 NT_STATUS_OK
ReadX 12988 196608 61440 61440 NT_STATUS_OK
ReadX 12988 258048 4096 4096 NT_STATUS_OK
ReadX 12988 262144 61440 61440 NT_STATUS_OK
ReadX 12988 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12989 NT_STATUS_OK
ReadX 12989 0 61440 61440 NT_STATUS_OK
ReadX 12989 61440 4096 4096 NT_STATUS_OK
ReadX 12989 65536 61440 61440 NT_STATUS_OK
ReadX 12989 126976 4096 4096 NT_STATUS_OK
ReadX 12989 131072 61440 61440 NT_STATUS_OK
ReadX 12989 192512 4096 4096 NT_STATUS_OK
ReadX 12989 196608 61440 61440 NT_STATUS_OK
ReadX 12989 258048 4096 4096 NT_STATUS_OK
ReadX 12989 262144 61440 61440 NT_STATUS_OK
ReadX 12989 323584 4096 4096 NT_STATUS_OK
ReadX 12989 327680 61440 61440 NT_STATUS_OK
ReadX 12989 389120 4096 4096 NT_STATUS_OK
ReadX 12989 393216 61440 61440 NT_STATUS_OK
ReadX 12989 454656 4096 4096 NT_STATUS_OK
ReadX 12989 458752 61440 61440 NT_STATUS_OK
ReadX 12989 520192 4096 4096 NT_STATUS_OK
ReadX 12989 524288 61440 61440 NT_STATUS_OK
ReadX 12989 585728 4096 4096 NT_STATUS_OK
ReadX 12989 589824 61440 61440 NT_STATUS_OK
ReadX 12989 651264 4096 4096 NT_STATUS_OK
ReadX 12989 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12990 NT_STATUS_OK
ReadX 12990 0 61440 61440 NT_STATUS_OK
ReadX 12990 61440 4096 4096 NT_STATUS_OK
ReadX 12990 65536 61440 61440 NT_STATUS_OK
ReadX 12990 126976 4096 4096 NT_STATUS_OK
ReadX 12990 131072 61440 61440 NT_STATUS_OK
ReadX 12990 192512 4096 4096 NT_STATUS_OK
ReadX 12990 196608 61440 61440 NT_STATUS_OK
ReadX 12990 258048 4096 4096 NT_STATUS_OK
ReadX 12990 262144 61440 61440 NT_STATUS_OK
ReadX 12990 323584 4096 4096 NT_STATUS_OK
ReadX 12990 327680 61440 61440 NT_STATUS_OK
ReadX 12990 389120 4096 4096 NT_STATUS_OK
ReadX 12990 393216 61440 61440 NT_STATUS_OK
ReadX 12990 454656 4096 4096 NT_STATUS_OK
ReadX 12990 458752 61440 61440 NT_STATUS_OK
ReadX 12990 520192 4096 4096 NT_STATUS_OK
ReadX 12990 524288 61440 61440 NT_STATUS_OK
ReadX 12990 585728 4096 4096 NT_STATUS_OK
ReadX 12990 589824 61440 61440 NT_STATUS_OK
ReadX 12990 651264 4096 4096 NT_STATUS_OK
ReadX 12990 655360 61440 61440 NT_STATUS_OK
ReadX 12990 716800 4096 4096 NT_STATUS_OK
ReadX 12990 720896 61440 61440 NT_STATUS_OK
ReadX 12990 782336 4096 4096 NT_STATUS_OK
ReadX 12990 786432 61440 61440 NT_STATUS_OK
ReadX 12990 847872 4096 4096 NT_STATUS_OK
ReadX 12990 851968 61440 61440 NT_STATUS_OK
ReadX 12990 913408 4096 4096 NT_STATUS_OK
ReadX 12990 917504 61440 61440 NT_STATUS_OK
ReadX 12990 978944 4096 4096 NT_STATUS_OK
ReadX 12990 983040 61440 61440 NT_STATUS_OK
ReadX 12990 1044480 4096 4096 NT_STATUS_OK
ReadX 12990 1048576 61440 61440 NT_STATUS_OK
ReadX 12990 1110016 4096 4096 NT_STATUS_OK
ReadX 12990 1114112 61440 61440 NT_STATUS_OK
ReadX 12990 1175552 4096 4096 NT_STATUS_OK
ReadX 12990 1179648 61440 61440 NT_STATUS_OK
ReadX 12990 1241088 4096 4096 NT_STATUS_OK
ReadX 12990 1245184 61440 61440 NT_STATUS_OK
ReadX 12990 1306624 4096 4096 NT_STATUS_OK
ReadX 12990 1310720 61440 61440 NT_STATUS_OK
ReadX 12990 1372160 4096 4096 NT_STATUS_OK
ReadX 12990 1376256 61440 61440 NT_STATUS_OK
ReadX 12990 1437696 4096 4096 NT_STATUS_OK
ReadX 12990 1441792 61440 61440 NT_STATUS_OK
ReadX 12990 1503232 4096 4096 NT_STATUS_OK
ReadX 12990 1507328 61440 61440 NT_STATUS_OK
ReadX 12990 1568768 4096 4096 NT_STATUS_OK
ReadX 12990 1572864 61440 61440 NT_STATUS_OK
ReadX 12990 1634304 4096 4096 NT_STATUS_OK
ReadX 12990 1638400 61440 61440 NT_STATUS_OK
ReadX 12990 1699840 4096 4096 NT_STATUS_OK
ReadX 12990 1703936 61440 61440 NT_STATUS_OK
ReadX 12990 1765376 4096 4096 NT_STATUS_OK
ReadX 12990 1769472 61440 61440 NT_STATUS_OK
ReadX 12990 1830912 4096 4096 NT_STATUS_OK
ReadX 12990 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12991 NT_STATUS_OK
Close 12991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12988 NT_STATUS_OK
Close 12989 NT_STATUS_OK
Close 12990 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12993 NT_STATUS_OK
ReadX 12993 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12994 NT_STATUS_OK
ReadX 12994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12995 NT_STATUS_OK
ReadX 12995 0 4096 4096 NT_STATUS_OK
ReadX 12995 4096 4096 4096 NT_STATUS_OK
ReadX 12995 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12996 NT_STATUS_OK
Close 12996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12993 NT_STATUS_OK
Close 12994 NT_STATUS_OK
Close 12995 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12998 NT_STATUS_OK
ReadX 12998 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12999 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12999 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13000 NT_STATUS_OK
Close 13000 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12998 NT_STATUS_OK
Close 12999 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13002 NT_STATUS_OK
ReadX 13002 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13003 NT_STATUS_OK
ReadX 13003 0 8192 8192 NT_STATUS_OK
ReadX 13003 8192 8192 8192 NT_STATUS_OK
ReadX 13003 16384 8192 8192 NT_STATUS_OK
ReadX 13003 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13005 NT_STATUS_OK
Close 13005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13003 NT_STATUS_OK
Close 13002 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13008 NT_STATUS_OK
WriteX 13008 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13008 258 NT_STATUS_OK
WriteX 13008 0 10438 10438 NT_STATUS_OK
Close 13008 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13009 NT_STATUS_OK
Close 13009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13011 NT_STATUS_OK
Close 13011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13012 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13013 NT_STATUS_OK
Close 13013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13014 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13015 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13016 NT_STATUS_OK
Close 13016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13017 NT_STATUS_OK
ReadX 13017 0 4096 4096 NT_STATUS_OK
ReadX 13017 4096 4096 4096 NT_STATUS_OK
ReadX 13017 8192 4096 4096 NT_STATUS_OK
ReadX 13017 12288 8192 8192 NT_STATUS_OK
ReadX 13017 20480 8192 8192 NT_STATUS_OK
ReadX 13017 28672 8192 8192 NT_STATUS_OK
ReadX 13017 36864 8192 8192 NT_STATUS_OK
ReadX 13017 45056 8192 8192 NT_STATUS_OK
ReadX 13017 53248 8192 8192 NT_STATUS_OK
ReadX 13017 61440 8192 8192 NT_STATUS_OK
ReadX 13017 69632 8192 8192 NT_STATUS_OK
ReadX 13017 77824 8192 8192 NT_STATUS_OK
ReadX 13017 86016 8192 8192 NT_STATUS_OK
ReadX 13017 94208 8192 8192 NT_STATUS_OK
ReadX 13017 102400 8192 8192 NT_STATUS_OK
ReadX 13017 110592 8192 8192 NT_STATUS_OK
ReadX 13017 118784 8192 8192 NT_STATUS_OK
ReadX 13017 126976 8192 8192 NT_STATUS_OK
ReadX 13017 135168 8192 8192 NT_STATUS_OK
ReadX 13017 143360 8192 8192 NT_STATUS_OK
ReadX 13017 151552 8192 8192 NT_STATUS_OK
ReadX 13017 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13017 NT_STATUS_OK
Close 13010 NT_STATUS_OK
Close 13012 NT_STATUS_OK
Close 13014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13019 NT_STATUS_OK
Close 13019 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13022 NT_STATUS_OK
WriteX 13022 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13022 258 NT_STATUS_OK
WriteX 13022 0 28489 28489 NT_STATUS_OK
Close 13022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13023 NT_STATUS_OK
Close 13023 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13025 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13025 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13026 NT_STATUS_OK
Close 13026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13025 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13028 NT_STATUS_OK
ReadX 13028 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 8192 8192 NT_STATUS_OK
ReadX 13029 8192 8192 8192 NT_STATUS_OK
ReadX 13029 16384 8192 8192 NT_STATUS_OK
ReadX 13029 24576 8192 8192 NT_STATUS_OK
ReadX 13029 32768 16384 16384 NT_STATUS_OK
ReadX 13029 49152 8192 8192 NT_STATUS_OK
ReadX 13029 57344 8192 8192 NT_STATUS_OK
ReadX 13029 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13031 NT_STATUS_OK
Close 13031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13029 NT_STATUS_OK
Close 13028 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13034 NT_STATUS_OK
WriteX 13034 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13034 258 NT_STATUS_OK
WriteX 13034 0 29253 29253 NT_STATUS_OK
Close 13034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13035 NT_STATUS_OK
Close 13035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13036 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13038 NT_STATUS_OK
Close 13038 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13041 NT_STATUS_OK
WriteX 13041 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13041 258 NT_STATUS_OK
WriteX 13041 0 30183 30183 NT_STATUS_OK
Close 13041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13042 NT_STATUS_OK
Close 13042 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13044 NT_STATUS_OK
WriteX 13044 0 510 510 NT_STATUS_OK
WriteX 13044 510 512 512 NT_STATUS_OK
WriteX 13044 1022 510 510 NT_STATUS_OK
WriteX 13044 1532 510 510 NT_STATUS_OK
WriteX 13044 2042 168 168 NT_STATUS_OK
Close 13044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13045 NT_STATUS_OK
Close 13045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13047 NT_STATUS_OK
ReadX 13047 0 4096 4096 NT_STATUS_OK
WriteX 13047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13048 NT_STATUS_OK
ReadX 13048 61440 4096 4096 NT_STATUS_OK
ReadX 13048 126976 4096 4096 NT_STATUS_OK
WriteX 13048 0 65536 65536 NT_STATUS_OK
WriteX 13048 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13049 NT_STATUS_OK
ReadX 13049 61440 4096 4096 NT_STATUS_OK
ReadX 13049 126976 4096 4096 NT_STATUS_OK
ReadX 13049 192512 4096 4096 NT_STATUS_OK
ReadX 13049 258048 4096 4096 NT_STATUS_OK
WriteX 13049 0 65536 65536 NT_STATUS_OK
WriteX 13049 65536 65536 65536 NT_STATUS_OK
WriteX 13049 131072 65536 65536 NT_STATUS_OK
WriteX 13049 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13050 NT_STATUS_OK
ReadX 13050 61440 4096 4096 NT_STATUS_OK
ReadX 13050 126976 4096 4096 NT_STATUS_OK
ReadX 13050 192512 4096 4096 NT_STATUS_OK
ReadX 13050 258048 4096 4096 NT_STATUS_OK
ReadX 13050 323584 4096 4096 NT_STATUS_OK
ReadX 13050 389120 4096 4096 NT_STATUS_OK
ReadX 13050 454656 4096 4096 NT_STATUS_OK
ReadX 13050 520192 4096 4096 NT_STATUS_OK
WriteX 13050 0 65536 65536 NT_STATUS_OK
WriteX 13050 65536 65536 65536 NT_STATUS_OK
WriteX 13050 131072 65536 65536 NT_STATUS_OK
WriteX 13050 196608 65536 65536 NT_STATUS_OK
WriteX 13050 262144 65536 65536 NT_STATUS_OK
WriteX 13050 327680 65536 65536 NT_STATUS_OK
WriteX 13050 393216 65536 65536 NT_STATUS_OK
WriteX 13050 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13051 NT_STATUS_OK
Close 13051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13047 NT_STATUS_OK
Close 13048 NT_STATUS_OK
Close 13049 NT_STATUS_OK
Close 13050 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13053 NT_STATUS_OK
Close 13053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13057 NT_STATUS_OK
Close 13057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13060 NT_STATUS_OK
Close 13060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13062 NT_STATUS_OK
Close 13062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13066 NT_STATUS_OK
Close 13066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13069 NT_STATUS_OK
Close 13069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13071 NT_STATUS_OK
Close 13071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13075 NT_STATUS_OK
Close 13075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13080 NT_STATUS_OK
Close 13080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13085 NT_STATUS_OK
Close 13085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13090 NT_STATUS_OK
Close 13090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13095 NT_STATUS_OK
Close 13095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13100 NT_STATUS_OK
Close 13100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13105 NT_STATUS_OK
Close 13105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13110 NT_STATUS_OK
Close 13110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13113 NT_STATUS_OK
Close 13113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13116 NT_STATUS_OK
Close 13116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13119 NT_STATUS_OK
WriteX 13119 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13119 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13119 0 65536 65536 NT_STATUS_OK
WriteX 13119 65536 65536 65536 NT_STATUS_OK
WriteX 13119 131072 65536 65536 NT_STATUS_OK
WriteX 13119 196608 65536 65536 NT_STATUS_OK
WriteX 13119 262144 26634 26634 NT_STATUS_OK
Close 13119 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13124 NT_STATUS_OK
Close 13124 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13125 NT_STATUS_OK
Close 13125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13126 NT_STATUS_OK
ReadX 13126 0 4096 4096 NT_STATUS_OK
Close 13126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13127 NT_STATUS_OK
ReadX 13127 0 4096 4096 NT_STATUS_OK
ReadX 13127 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13128 NT_STATUS_OK
Close 13128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13127 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13132 NT_STATUS_OK
Close 13132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13135 NT_STATUS_OK
Close 13135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13137 NT_STATUS_OK
Close 13137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13141 NT_STATUS_OK
Close 13141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13144 NT_STATUS_OK
Close 13144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13146 NT_STATUS_OK
Close 13146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13150 NT_STATUS_OK
Close 13150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13155 NT_STATUS_OK
Close 13155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13160 NT_STATUS_OK
Close 13160 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13165 NT_STATUS_OK
Close 13165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13170 NT_STATUS_OK
Close 13170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13175 NT_STATUS_OK
Close 13175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13179 NT_STATUS_OK
Close 13179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13184 NT_STATUS_OK
Close 13184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13189 NT_STATUS_OK
Close 13189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13192 NT_STATUS_OK
Close 13192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13194 NT_STATUS_OK
Close 13194 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13204 NT_STATUS_OK
Close 13204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13205 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13206 NT_STATUS_OK
ReadX 13206 0 4096 4096 NT_STATUS_OK
Close 13206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13207 NT_STATUS_OK
ReadX 13207 0 4096 4096 NT_STATUS_OK
Close 13207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13208 NT_STATUS_OK
ReadX 13208 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13218 NT_STATUS_OK
Close 13218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13219 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 4096 4096 NT_STATUS_OK
Close 13220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13221 NT_STATUS_OK
ReadX 13221 0 4096 4096 NT_STATUS_OK
Close 13221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13222 NT_STATUS_OK
ReadX 13222 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13208 NT_STATUS_OK
Close 13222 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13251 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13251 0 4096 4096 NT_STATUS_OK
Close 13251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13252 NT_STATUS_OK
ReadX 13252 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13253 NT_STATUS_OK
ReadX 13253 0 4096 4096 NT_STATUS_OK
ReadX 13253 4096 4096 4096 NT_STATUS_OK
ReadX 13253 8192 4096 4096 NT_STATUS_OK
ReadX 13253 12288 4096 4096 NT_STATUS_OK
ReadX 13253 16384 4096 4096 NT_STATUS_OK
ReadX 13253 20480 4096 4096 NT_STATUS_OK
ReadX 13253 24576 4096 4096 NT_STATUS_OK
ReadX 13253 28672 4096 4096 NT_STATUS_OK
ReadX 13253 32768 4096 4096 NT_STATUS_OK
ReadX 13253 36864 4096 4096 NT_STATUS_OK
ReadX 13253 40960 4096 4096 NT_STATUS_OK
ReadX 13253 45056 4096 4096 NT_STATUS_OK
ReadX 13253 49152 4096 4096 NT_STATUS_OK
ReadX 13253 53248 4096 4096 NT_STATUS_OK
ReadX 13253 57344 4096 4096 NT_STATUS_OK
ReadX 13253 61440 4096 4096 NT_STATUS_OK
ReadX 13253 65536 4096 4096 NT_STATUS_OK
ReadX 13253 69632 4096 4096 NT_STATUS_OK
ReadX 13253 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13253 1004 NT_STATUS_OK
WriteX 13253 0 4096 4096 NT_STATUS_OK
Close 13253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13254 NT_STATUS_OK
SET_FILE_INFORMATION 13254 1004 NT_STATUS_OK
Close 13254 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13255 NT_STATUS_OK
ReadX 13255 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13256 NT_STATUS_OK
Close 13256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13259 NT_STATUS_OK
WriteX 13259 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13259 258 NT_STATUS_OK
WriteX 13259 0 65536 65536 NT_STATUS_OK
WriteX 13259 65536 19979 19979 NT_STATUS_OK
Close 13259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13260 NT_STATUS_OK
ReadX 13260 0 4096 4096 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
QUERY_FILE_INFORMATION 13260 1004 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
SET_FILE_INFORMATION 13260 1004 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
Close 13260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13261 NT_STATUS_OK
ReadX 13261 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13262 NT_STATUS_OK
ReadX 13262 0 4096 4096 NT_STATUS_OK
Close 13261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13263 NT_STATUS_OK
ReadX 13263 0 4096 4096 NT_STATUS_OK
Close 13263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13264 NT_STATUS_OK
ReadX 13264 0 4096 4096 NT_STATUS_OK
Close 13264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13265 NT_STATUS_OK
ReadX 13265 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13265 1004 NT_STATUS_OK
WriteX 13265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13266 NT_STATUS_OK
Close 13266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13262 NT_STATUS_OK
Close 13265 NT_STATUS_OK
Close 13255 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13268 NT_STATUS_OK
Close 13268 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13271 NT_STATUS_OK
WriteX 13271 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13271 258 NT_STATUS_OK
WriteX 13271 0 65536 65536 NT_STATUS_OK
WriteX 13271 65536 17654 17654 NT_STATUS_OK
Close 13271 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13272 NT_STATUS_OK
ReadX 13272 0 4096 4096 NT_STATUS_OK
WriteX 13272 0 4096 4096 NT_STATUS_OK
Flush 13272 NT_STATUS_OK
WriteX 13272 0 4096 4096 NT_STATUS_OK
Flush 13272 NT_STATUS_OK
QUERY_FILE_INFORMATION 13272 1004 NT_STATUS_OK
WriteX 13272 0 4096 4096 NT_STATUS_OK
Flush 13272 NT_STATUS_OK
WriteX 13272 0 4096 4096 NT_STATUS_OK
Flush 13272 NT_STATUS_OK
WriteX 13272 0 4096 4096 NT_STATUS_OK
Flush 13272 NT_STATUS_OK
SET_FILE_INFORMATION 13272 1004 NT_STATUS_OK
WriteX 13272 0 4096 4096 NT_STATUS_OK
Flush 13272 NT_STATUS_OK
Close 13272 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13273 NT_STATUS_OK
SET_FILE_INFORMATION 13273 1004 NT_STATUS_OK
Close 13273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13274 NT_STATUS_OK
ReadX 13274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13275 NT_STATUS_OK
Close 13275 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 4096 4096 NT_STATUS_OK
ReadX 13277 4096 4096 4096 NT_STATUS_OK
ReadX 13277 8192 4096 4096 NT_STATUS_OK
ReadX 13277 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13277 16384 4096 4096 NT_STATUS_OK
ReadX 13277 20480 4096 4096 NT_STATUS_OK
ReadX 13277 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13278 NT_STATUS_OK
ReadX 13278 0 4096 4096 NT_STATUS_OK
Close 13278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 4096 4096 NT_STATUS_OK
Close 13279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13280 NT_STATUS_OK
ReadX 13280 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13280 1004 NT_STATUS_OK
WriteX 13280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13281 NT_STATUS_OK
Close 13281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13280 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13283 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13286 NT_STATUS_OK
WriteX 13286 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13286 258 NT_STATUS_OK
WriteX 13286 0 65536 65536 NT_STATUS_OK
WriteX 13286 65536 19490 19490 NT_STATUS_OK
Close 13286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13287 NT_STATUS_OK
ReadX 13287 0 4096 4096 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
QUERY_FILE_INFORMATION 13287 1004 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
SET_FILE_INFORMATION 13287 1004 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
Close 13287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13288 NT_STATUS_OK
SET_FILE_INFORMATION 13288 1004 NT_STATUS_OK
Close 13288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13289 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13290 NT_STATUS_OK
Close 13290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13292 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13292 0 4096 4096 NT_STATUS_OK
Close 13292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13293 NT_STATUS_OK
ReadX 13293 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13294 NT_STATUS_OK
ReadX 13294 0 4096 4096 NT_STATUS_OK
ReadX 13294 4096 4096 4096 NT_STATUS_OK
ReadX 13294 8192 4096 4096 NT_STATUS_OK
ReadX 13294 12288 4096 4096 NT_STATUS_OK
ReadX 13294 16384 4096 4096 NT_STATUS_OK
ReadX 13294 20480 4096 4096 NT_STATUS_OK
ReadX 13294 24576 4096 4096 NT_STATUS_OK
ReadX 13294 28672 4096 4096 NT_STATUS_OK
ReadX 13294 32768 4096 4096 NT_STATUS_OK
ReadX 13294 36864 4096 4096 NT_STATUS_OK
ReadX 13294 40960 4096 4096 NT_STATUS_OK
ReadX 13294 45056 4096 4096 NT_STATUS_OK
ReadX 13294 49152 4096 4096 NT_STATUS_OK
ReadX 13294 53248 4096 4096 NT_STATUS_OK
ReadX 13294 57344 4096 4096 NT_STATUS_OK
ReadX 13294 61440 4096 4096 NT_STATUS_OK
ReadX 13294 65536 4096 4096 NT_STATUS_OK
ReadX 13294 69632 4096 4096 NT_STATUS_OK
ReadX 13294 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13294 1004 NT_STATUS_OK
WriteX 13294 0 4096 4096 NT_STATUS_OK
Close 13294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13295 NT_STATUS_OK
SET_FILE_INFORMATION 13295 1004 NT_STATUS_OK
Close 13295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13296 NT_STATUS_OK
ReadX 13296 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13297 NT_STATUS_OK
Close 13297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13300 NT_STATUS_OK
WriteX 13300 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13300 258 NT_STATUS_OK
WriteX 13300 0 65536 65536 NT_STATUS_OK
WriteX 13300 65536 8866 8866 NT_STATUS_OK
Close 13300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13301 NT_STATUS_OK
ReadX 13301 0 4096 4096 NT_STATUS_OK
WriteX 13301 0 4096 4096 NT_STATUS_OK
Flush 13301 NT_STATUS_OK
SET_FILE_INFORMATION 13301 1004 NT_STATUS_OK
WriteX 13301 0 4096 4096 NT_STATUS_OK
Flush 13301 NT_STATUS_OK
Close 13301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13302 NT_STATUS_OK
ReadX 13302 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13303 NT_STATUS_OK
ReadX 13303 0 4096 4096 NT_STATUS_OK
Close 13303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 4096 4096 NT_STATUS_OK
Close 13304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13305 NT_STATUS_OK
ReadX 13305 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13305 1004 NT_STATUS_OK
WriteX 13305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13306 NT_STATUS_OK
Close 13306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13305 NT_STATUS_OK
Close 13296 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13308 NT_STATUS_OK
Close 13308 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13311 NT_STATUS_OK
WriteX 13311 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13311 258 NT_STATUS_OK
WriteX 13311 0 65536 65536 NT_STATUS_OK
WriteX 13311 65536 9298 9298 NT_STATUS_OK
Close 13311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13312 NT_STATUS_OK
ReadX 13312 0 4096 4096 NT_STATUS_OK
WriteX 13312 0 4096 4096 NT_STATUS_OK
Flush 13312 NT_STATUS_OK
SET_FILE_INFORMATION 13312 1004 NT_STATUS_OK
WriteX 13312 0 4096 4096 NT_STATUS_OK
Flush 13312 NT_STATUS_OK
Close 13312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13313 NT_STATUS_OK
SET_FILE_INFORMATION 13313 1004 NT_STATUS_OK
Close 13313 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13314 NT_STATUS_OK
ReadX 13314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13315 NT_STATUS_OK
Close 13315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13318 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13318 0 4096 4096 NT_STATUS_OK
Close 13318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13319 NT_STATUS_OK
ReadX 13319 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13319 4096 4096 4096 NT_STATUS_OK
ReadX 13319 8192 4096 4096 NT_STATUS_OK
ReadX 13319 12288 4096 4096 NT_STATUS_OK
ReadX 13319 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13320 NT_STATUS_OK
ReadX 13320 0 4096 4096 NT_STATUS_OK
Close 13320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13321 NT_STATUS_OK
ReadX 13321 0 4096 4096 NT_STATUS_OK
Close 13321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13322 NT_STATUS_OK
ReadX 13322 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13322 1004 NT_STATUS_OK
WriteX 13322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13323 NT_STATUS_OK
Close 13323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13319 NT_STATUS_OK
Close 13322 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13325 NT_STATUS_OK
Close 13325 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13328 NT_STATUS_OK
WriteX 13328 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13328 258 NT_STATUS_OK
WriteX 13328 0 65536 65536 NT_STATUS_OK
WriteX 13328 65536 11540 11540 NT_STATUS_OK
Close 13328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13329 NT_STATUS_OK
ReadX 13329 0 4096 4096 NT_STATUS_OK
WriteX 13329 0 4096 4096 NT_STATUS_OK
Flush 13329 NT_STATUS_OK
SET_FILE_INFORMATION 13329 1004 NT_STATUS_OK
WriteX 13329 0 4096 4096 NT_STATUS_OK
Flush 13329 NT_STATUS_OK
Close 13329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13330 NT_STATUS_OK
SET_FILE_INFORMATION 13330 1004 NT_STATUS_OK
Close 13330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13331 NT_STATUS_OK
ReadX 13331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13332 NT_STATUS_OK
Close 13332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13334 NT_STATUS_OK
ReadX 13334 61440 4096 4096 NT_STATUS_OK
ReadX 13334 126976 4096 4096 NT_STATUS_OK
WriteX 13334 0 65536 65536 NT_STATUS_OK
WriteX 13334 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13335 NT_STATUS_OK
ReadX 13335 61440 4096 4096 NT_STATUS_OK
ReadX 13335 126976 4096 4096 NT_STATUS_OK
ReadX 13335 192512 4096 4096 NT_STATUS_OK
ReadX 13335 258048 4096 4096 NT_STATUS_OK
WriteX 13335 0 65536 65536 NT_STATUS_OK
WriteX 13335 65536 65536 65536 NT_STATUS_OK
WriteX 13335 131072 65536 65536 NT_STATUS_OK
WriteX 13335 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13336 NT_STATUS_OK
ReadX 13336 61440 4096 4096 NT_STATUS_OK
ReadX 13336 126976 4096 4096 NT_STATUS_OK
ReadX 13336 192512 4096 4096 NT_STATUS_OK
ReadX 13336 258048 4096 4096 NT_STATUS_OK
ReadX 13336 323584 4096 4096 NT_STATUS_OK
ReadX 13336 389120 4096 4096 NT_STATUS_OK
ReadX 13336 454656 4096 4096 NT_STATUS_OK
ReadX 13336 520192 4096 4096 NT_STATUS_OK
WriteX 13336 0 65536 65536 NT_STATUS_OK
WriteX 13336 65536 65536 65536 NT_STATUS_OK
WriteX 13336 131072 65536 65536 NT_STATUS_OK
WriteX 13336 196608 65536 65536 NT_STATUS_OK
WriteX 13336 262144 65536 65536 NT_STATUS_OK
WriteX 13336 327680 65536 65536 NT_STATUS_OK
WriteX 13336 393216 65536 65536 NT_STATUS_OK
WriteX 13336 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13337 NT_STATUS_OK
ReadX 13337 0 4096 4096 NT_STATUS_OK
ReadX 13337 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13338 NT_STATUS_OK
WriteX 13338 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13338 258 NT_STATUS_OK
WriteX 13338 0 53 53 NT_STATUS_OK
Close 13338 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13339 NT_STATUS_OK
Close 13339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13331 NT_STATUS_OK
Close 13277 NT_STATUS_OK
Close 13334 NT_STATUS_OK
Close 13335 NT_STATUS_OK
Close 13336 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13337 8192 4096 4096 NT_STATUS_OK
ReadX 13337 12288 4096 4096 NT_STATUS_OK
WriteX 13341 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13341 258 NT_STATUS_OK
ReadX 13337 16384 4096 4096 NT_STATUS_OK
ReadX 13337 20480 4096 4096 NT_STATUS_OK
WriteX 13341 0 15360 15360 NT_STATUS_OK
Close 13341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13342 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13342 1004 NT_STATUS_OK
WriteX 13342 0 4096 4096 NT_STATUS_OK
Close 13342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13343 NT_STATUS_OK
Close 13343 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13345 NT_STATUS_OK
ReadX 13345 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13346 NT_STATUS_OK
Close 13346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13345 4096 4096 4096 NT_STATUS_OK
ReadX 13345 8192 4096 4096 NT_STATUS_OK
ReadX 13345 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13348 NT_STATUS_OK
ReadX 13348 0 4096 4096 NT_STATUS_OK
ReadX 13348 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13349 NT_STATUS_OK
ReadX 13349 0 4096 4096 NT_STATUS_OK
ReadX 13349 4096 4096 4096 NT_STATUS_OK
ReadX 13349 8192 4096 4096 NT_STATUS_OK
Close 13348 NT_STATUS_OK
Close 13349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13350 NT_STATUS_OK
WriteX 13350 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13350 258 NT_STATUS_OK
WriteX 13350 0 15360 15360 NT_STATUS_OK
Close 13350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13351 NT_STATUS_OK
ReadX 13351 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13351 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13351 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13352 NT_STATUS_OK
Close 13352 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13354 NT_STATUS_OK
ReadX 13354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13355 NT_STATUS_OK
SET_FILE_INFORMATION 13355 1004 NT_STATUS_OK
Close 13355 NT_STATUS_OK
WriteX 13351 0 4096 4096 NT_STATUS_OK
Close 13351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13356 NT_STATUS_OK
Close 13356 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13358 NT_STATUS_OK
ReadX 13358 0 4096 4096 NT_STATUS_OK
ReadX 13358 4096 4096 4096 NT_STATUS_OK
ReadX 13358 8192 4096 4096 NT_STATUS_OK
ReadX 13358 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13358 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13358 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13359 NT_STATUS_OK
ReadX 13359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13360 NT_STATUS_OK
WriteX 13360 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13360 258 NT_STATUS_OK
WriteX 13360 0 53 53 NT_STATUS_OK
Close 13360 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13361 NT_STATUS_OK
Close 13361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13359 4096 4096 4096 NT_STATUS_OK
ReadX 13359 8192 4096 4096 NT_STATUS_OK
ReadX 13359 12288 4096 4096 NT_STATUS_OK
WriteX 13363 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13363 258 NT_STATUS_OK
WriteX 13363 0 12006 12006 NT_STATUS_OK
Close 13363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13364 NT_STATUS_OK
ReadX 13364 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13364 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13364 1004 NT_STATUS_OK
WriteX 13364 0 4096 4096 NT_STATUS_OK
Close 13364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13365 NT_STATUS_OK
Close 13365 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13367 NT_STATUS_OK
ReadX 13367 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13368 NT_STATUS_OK
Close 13368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13367 4096 4096 4096 NT_STATUS_OK
ReadX 13367 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13370 NT_STATUS_OK
WriteX 13370 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13370 258 NT_STATUS_OK
WriteX 13370 0 11991 11991 NT_STATUS_OK
Close 13370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13371 NT_STATUS_OK
ReadX 13371 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13371 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13371 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13372 NT_STATUS_OK
Close 13372 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13374 NT_STATUS_OK
ReadX 13374 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13375 NT_STATUS_OK
SET_FILE_INFORMATION 13375 1004 NT_STATUS_OK
WriteX 13358 0 19054 19054 NT_STATUS_OK
Close 13375 NT_STATUS_OK
WriteX 13371 0 4096 4096 NT_STATUS_OK
Close 13371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13376 NT_STATUS_OK
Close 13376 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13378 NT_STATUS_OK
ReadX 13378 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13379 NT_STATUS_OK
Close 13379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13378 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13378 1004 NT_STATUS_OK
ReadX 13378 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13378 1004 NT_STATUS_OK
WriteX 13378 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13378 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13378 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13378 1004 NT_STATUS_OK
Close 13354 NT_STATUS_OK
WriteX 13378 0 12288 12288 NT_STATUS_OK
Close 13374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13381 NT_STATUS_OK
Close 13381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13358 NT_STATUS_OK
Close 13378 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13383 NT_STATUS_OK
Close 13383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13385 NT_STATUS_OK
ReadX 13385 0 61440 61440 NT_STATUS_OK
ReadX 13385 61440 4096 4096 NT_STATUS_OK
ReadX 13385 65536 61440 61440 NT_STATUS_OK
ReadX 13385 126976 4096 4096 NT_STATUS_OK
ReadX 13385 131072 61440 61440 NT_STATUS_OK
ReadX 13385 192512 4096 4096 NT_STATUS_OK
ReadX 13385 196608 61440 61440 NT_STATUS_OK
ReadX 13385 258048 4096 4096 NT_STATUS_OK
ReadX 13385 262144 61440 61440 NT_STATUS_OK
ReadX 13385 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13386 NT_STATUS_OK
ReadX 13386 0 61440 61440 NT_STATUS_OK
ReadX 13386 61440 4096 4096 NT_STATUS_OK
ReadX 13386 65536 61440 61440 NT_STATUS_OK
ReadX 13386 126976 4096 4096 NT_STATUS_OK
ReadX 13386 131072 61440 61440 NT_STATUS_OK
ReadX 13386 192512 4096 4096 NT_STATUS_OK
ReadX 13386 196608 61440 61440 NT_STATUS_OK
ReadX 13386 258048 4096 4096 NT_STATUS_OK
ReadX 13386 262144 61440 61440 NT_STATUS_OK
ReadX 13386 323584 4096 4096 NT_STATUS_OK
ReadX 13386 327680 61440 61440 NT_STATUS_OK
ReadX 13386 389120 4096 4096 NT_STATUS_OK
ReadX 13386 393216 61440 61440 NT_STATUS_OK
ReadX 13386 454656 4096 4096 NT_STATUS_OK
ReadX 13386 458752 61440 61440 NT_STATUS_OK
ReadX 13386 520192 4096 4096 NT_STATUS_OK
ReadX 13386 524288 61440 61440 NT_STATUS_OK
ReadX 13386 585728 4096 4096 NT_STATUS_OK
ReadX 13386 589824 61440 61440 NT_STATUS_OK
ReadX 13386 651264 4096 4096 NT_STATUS_OK
ReadX 13386 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13387 NT_STATUS_OK
ReadX 13387 0 61440 61440 NT_STATUS_OK
ReadX 13387 61440 4096 4096 NT_STATUS_OK
ReadX 13387 65536 61440 61440 NT_STATUS_OK
ReadX 13387 126976 4096 4096 NT_STATUS_OK
ReadX 13387 131072 61440 61440 NT_STATUS_OK
ReadX 13387 192512 4096 4096 NT_STATUS_OK
ReadX 13387 196608 61440 61440 NT_STATUS_OK
ReadX 13387 258048 4096 4096 NT_STATUS_OK
ReadX 13387 262144 61440 61440 NT_STATUS_OK
ReadX 13387 323584 4096 4096 NT_STATUS_OK
ReadX 13387 327680 61440 61440 NT_STATUS_OK
ReadX 13387 389120 4096 4096 NT_STATUS_OK
ReadX 13387 393216 61440 61440 NT_STATUS_OK
ReadX 13387 454656 4096 4096 NT_STATUS_OK
ReadX 13387 458752 61440 61440 NT_STATUS_OK
ReadX 13387 520192 4096 4096 NT_STATUS_OK
ReadX 13387 524288 61440 61440 NT_STATUS_OK
ReadX 13387 585728 4096 4096 NT_STATUS_OK
ReadX 13387 589824 61440 61440 NT_STATUS_OK
ReadX 13387 651264 4096 4096 NT_STATUS_OK
ReadX 13387 655360 61440 61440 NT_STATUS_OK
ReadX 13387 716800 4096 4096 NT_STATUS_OK
ReadX 13387 720896 61440 61440 NT_STATUS_OK
ReadX 13387 782336 4096 4096 NT_STATUS_OK
ReadX 13387 786432 61440 61440 NT_STATUS_OK
ReadX 13387 847872 4096 4096 NT_STATUS_OK
ReadX 13387 851968 61440 61440 NT_STATUS_OK
ReadX 13387 913408 4096 4096 NT_STATUS_OK
ReadX 13387 917504 61440 61440 NT_STATUS_OK
ReadX 13387 978944 4096 4096 NT_STATUS_OK
ReadX 13387 983040 61440 61440 NT_STATUS_OK
ReadX 13387 1044480 4096 4096 NT_STATUS_OK
ReadX 13387 1048576 61440 61440 NT_STATUS_OK
ReadX 13387 1110016 4096 4096 NT_STATUS_OK
ReadX 13387 1114112 61440 61440 NT_STATUS_OK
ReadX 13387 1175552 4096 4096 NT_STATUS_OK
ReadX 13387 1179648 61440 61440 NT_STATUS_OK
ReadX 13387 1241088 4096 4096 NT_STATUS_OK
ReadX 13387 1245184 61440 61440 NT_STATUS_OK
ReadX 13387 1306624 4096 4096 NT_STATUS_OK
ReadX 13387 1310720 61440 61440 NT_STATUS_OK
ReadX 13387 1372160 4096 4096 NT_STATUS_OK
ReadX 13387 1376256 61440 61440 NT_STATUS_OK
ReadX 13387 1437696 4096 4096 NT_STATUS_OK
ReadX 13387 1441792 61440 61440 NT_STATUS_OK
ReadX 13387 1503232 4096 4096 NT_STATUS_OK
ReadX 13387 1507328 61440 61440 NT_STATUS_OK
ReadX 13387 1568768 4096 4096 NT_STATUS_OK
ReadX 13387 1572864 61440 61440 NT_STATUS_OK
ReadX 13387 1634304 4096 4096 NT_STATUS_OK
ReadX 13387 1638400 61440 61440 NT_STATUS_OK
ReadX 13387 1699840 4096 4096 NT_STATUS_OK
ReadX 13387 1703936 61440 61440 NT_STATUS_OK
ReadX 13387 1765376 4096 4096 NT_STATUS_OK
ReadX 13387 1769472 61440 61440 NT_STATUS_OK
ReadX 13387 1830912 4096 4096 NT_STATUS_OK
ReadX 13387 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13388 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13389 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13390 NT_STATUS_OK
ReadX 13390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13392 NT_STATUS_OK
ReadX 13392 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13393 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13394 NT_STATUS_OK
QUERY_FILE_INFORMATION 13394 1004 NT_STATUS_OK
WriteX 13394 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13394 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13395 NT_STATUS_OK
Close 13395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13396 NT_STATUS_OK
WriteX 13396 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13396 258 NT_STATUS_OK
WriteX 13396 0 491 491 NT_STATUS_OK
Close 13396 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13397 NT_STATUS_OK
ReadX 13397 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13394 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13399 NT_STATUS_OK
Close 13399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13400 NT_STATUS_OK
WriteX 13400 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13400 258 NT_STATUS_OK
WriteX 13400 0 543 543 NT_STATUS_OK
Close 13400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13401 NT_STATUS_OK
ReadX 13401 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13397 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13385 NT_STATUS_OK
Close 13386 NT_STATUS_OK
Close 13387 NT_STATUS_OK
Close 13401 NT_STATUS_OK
Close 13389 NT_STATUS_OK
Close 13390 NT_STATUS_OK
Close 13391 NT_STATUS_OK
Close 13392 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13404 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13405 NT_STATUS_OK
ReadX 13405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13406 NT_STATUS_OK
ReadX 13406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13407 NT_STATUS_OK
ReadX 13407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13408 NT_STATUS_OK
ReadX 13408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13409 NT_STATUS_OK
ReadX 13409 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13413 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13414 NT_STATUS_OK
QUERY_FILE_INFORMATION 13414 1004 NT_STATUS_OK
WriteX 13414 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13414 258 NT_STATUS_OK
WriteX 13414 0 2048 2048 NT_STATUS_OK
Close 13414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13415 NT_STATUS_OK
ReadX 13415 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13415 0 4096 4096 NT_STATUS_OK
Flush 13415 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13415 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13419 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13420 NT_STATUS_OK
WriteX 13420 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13420 258 NT_STATUS_OK
WriteX 13420 0 2048 2048 NT_STATUS_OK
Close 13420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13421 NT_STATUS_OK
ReadX 13421 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13425 NT_STATUS_OK
Close 13425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13426 NT_STATUS_OK
WriteX 13426 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13426 258 NT_STATUS_OK
WriteX 13426 0 2048 2048 NT_STATUS_OK
Close 13426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13427 NT_STATUS_OK
ReadX 13427 0 2048 2048 NT_STATUS_OK
ReadX 13405 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13409 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13421 0 4096 4096 NT_STATUS_OK
WriteX 13405 0 8192 8192 NT_STATUS_OK
WriteX 13406 0 4096 4096 NT_STATUS_OK
WriteX 13407 0 4096 4096 NT_STATUS_OK
ReadX 13421 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13430 NT_STATUS_OK
ReadX 13430 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13431 NT_STATUS_OK
QUERY_FILE_INFORMATION 13431 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13431 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13430 NT_STATUS_OK
Close 13406 NT_STATUS_OK
Close 13407 NT_STATUS_OK
Close 13408 NT_STATUS_OK
Close 13421 NT_STATUS_OK
Close 13405 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13433 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13434 NT_STATUS_OK
ReadX 13434 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13435 NT_STATUS_OK
ReadX 13435 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13436 NT_STATUS_OK
ReadX 13436 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13437 NT_STATUS_OK
ReadX 13437 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13438 NT_STATUS_OK
ReadX 13438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13439 NT_STATUS_OK
ReadX 13439 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13440 NT_STATUS_OK
ReadX 13440 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13441 NT_STATUS_OK
ReadX 13441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13442 NT_STATUS_OK
ReadX 13442 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13443 NT_STATUS_OK
ReadX 13443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13444 NT_STATUS_OK
ReadX 13444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13445 NT_STATUS_OK
ReadX 13445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13446 NT_STATUS_OK
ReadX 13446 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13450 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13450 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13451 NT_STATUS_OK
QUERY_FILE_INFORMATION 13451 1004 NT_STATUS_OK
WriteX 13451 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13451 258 NT_STATUS_OK
WriteX 13451 0 2048 2048 NT_STATUS_OK
Close 13451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13452 NT_STATUS_OK
ReadX 13452 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13442 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13453 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13454 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13454 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13458 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13459 NT_STATUS_OK
QUERY_FILE_INFORMATION 13459 1004 NT_STATUS_OK
WriteX 13459 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13459 258 NT_STATUS_OK
WriteX 13459 0 2048 2048 NT_STATUS_OK
Close 13459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13460 NT_STATUS_OK
ReadX 13460 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13452 0 4096 4096 NT_STATUS_OK
Flush 13452 NT_STATUS_OK
WriteX 13460 0 4096 4096 NT_STATUS_OK
Flush 13460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13452 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13460 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13454 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13462 NT_STATUS_OK
WriteX 13462 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13462 258 NT_STATUS_OK
WriteX 13462 0 4096 4096 NT_STATUS_OK
Close 13462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13463 NT_STATUS_OK
ReadX 13463 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13464 NT_STATUS_OK
Close 13464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13465 NT_STATUS_OK
WriteX 13465 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13465 258 NT_STATUS_OK
WriteX 13465 0 4096 4096 NT_STATUS_OK
Close 13465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13466 NT_STATUS_OK
ReadX 13466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13466 0 4096 4096 NT_STATUS_OK
Close 13463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13446 NT_STATUS_OK
Close 13440 NT_STATUS_OK
Close 13454 NT_STATUS_OK
Close 13443 NT_STATUS_OK
Close 13444 NT_STATUS_OK
Close 13445 NT_STATUS_OK
Close 13441 NT_STATUS_OK
Close 13434 NT_STATUS_OK
Close 13435 NT_STATUS_OK
Close 13438 NT_STATUS_OK
Close 13439 NT_STATUS_OK
Close 13436 NT_STATUS_OK
Close 13437 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13469 NT_STATUS_OK
Close 13469 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13471 NT_STATUS_OK
ReadX 13471 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13472 NT_STATUS_OK
Close 13472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13473 NT_STATUS_OK
WriteX 13473 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13473 258 NT_STATUS_OK
WriteX 13473 0 2048 2048 NT_STATUS_OK
Close 13473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13474 NT_STATUS_OK
ReadX 13474 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13475 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13476 NT_STATUS_OK
ReadX 13476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13477 NT_STATUS_OK
ReadX 13477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13478 NT_STATUS_OK
ReadX 13478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13479 NT_STATUS_OK
ReadX 13479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13480 NT_STATUS_OK
ReadX 13480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13481 NT_STATUS_OK
ReadX 13481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13482 NT_STATUS_OK
ReadX 13482 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13483 NT_STATUS_OK
ReadX 13483 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13484 NT_STATUS_OK
ReadX 13484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13485 NT_STATUS_OK
ReadX 13485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13486 NT_STATUS_OK
ReadX 13486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13487 NT_STATUS_OK
ReadX 13487 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13488 NT_STATUS_OK
QUERY_FILE_INFORMATION 13488 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13471 NT_STATUS_OK
Close 13474 NT_STATUS_OK
Close 13486 NT_STATUS_OK
Close 13481 NT_STATUS_OK
Close 13482 NT_STATUS_OK
Close 13483 NT_STATUS_OK
Close 13484 NT_STATUS_OK
Close 13485 NT_STATUS_OK
Close 13487 NT_STATUS_OK
Close 13475 NT_STATUS_OK
Close 13476 NT_STATUS_OK
Close 13479 NT_STATUS_OK
Close 13480 NT_STATUS_OK
Close 13477 NT_STATUS_OK
Close 13478 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13490 NT_STATUS_OK
QUERY_FILE_INFORMATION 13490 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13492 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13492 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13493 NT_STATUS_OK
ReadX 13493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13494 NT_STATUS_OK
ReadX 13494 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13495 NT_STATUS_OK
ReadX 13495 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13496 NT_STATUS_OK
ReadX 13496 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13497 NT_STATUS_OK
ReadX 13497 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13498 NT_STATUS_OK
ReadX 13498 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13499 NT_STATUS_OK
ReadX 13499 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13500 NT_STATUS_OK
ReadX 13500 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13501 NT_STATUS_OK
ReadX 13501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13502 NT_STATUS_OK
ReadX 13502 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13503 NT_STATUS_OK
ReadX 13503 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13504 NT_STATUS_OK
ReadX 13504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13505 NT_STATUS_OK
ReadX 13505 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13509 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13510 NT_STATUS_OK
QUERY_FILE_INFORMATION 13510 1004 NT_STATUS_OK
WriteX 13510 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13510 258 NT_STATUS_OK
WriteX 13510 0 2048 2048 NT_STATUS_OK
Close 13510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13511 NT_STATUS_OK
ReadX 13511 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13512 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13513 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13514 NT_STATUS_OK
ReadX 13514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13515 NT_STATUS_OK
ReadX 13515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13516 NT_STATUS_OK
ReadX 13516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13517 NT_STATUS_OK
ReadX 13517 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13521 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13522 NT_STATUS_OK
QUERY_FILE_INFORMATION 13522 1004 NT_STATUS_OK
WriteX 13522 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13522 258 NT_STATUS_OK
WriteX 13522 0 2048 2048 NT_STATUS_OK
Close 13522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13523 NT_STATUS_OK
ReadX 13523 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13524 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13525 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13525 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13529 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13530 NT_STATUS_OK
QUERY_FILE_INFORMATION 13530 1004 NT_STATUS_OK
WriteX 13530 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13530 258 NT_STATUS_OK
WriteX 13530 0 2048 2048 NT_STATUS_OK
Close 13530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13531 NT_STATUS_OK
ReadX 13531 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13511 0 4096 4096 NT_STATUS_OK
Flush 13511 NT_STATUS_OK
WriteX 13523 0 4096 4096 NT_STATUS_OK
Flush 13523 NT_STATUS_OK
WriteX 13531 0 4096 4096 NT_STATUS_OK
Flush 13531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13511 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13523 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13531 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13513 4096 16384 16384 NT_STATUS_OK
ReadX 13493 4096 16384 16384 NT_STATUS_OK
ReadX 13525 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13532 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13533 NT_STATUS_OK
ReadX 13533 0 2048 2048 NT_STATUS_OK
WriteX 13533 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13511 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13534 NT_STATUS_OK
QUERY_FILE_INFORMATION 13534 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13533 NT_STATUS_OK
Close 13517 NT_STATUS_OK
Close 13505 NT_STATUS_OK
Close 13497 NT_STATUS_OK
Close 13513 NT_STATUS_OK
Close 13514 NT_STATUS_OK
Close 13515 NT_STATUS_OK
Close 13516 NT_STATUS_OK
Close 13504 NT_STATUS_OK
Close 13525 NT_STATUS_OK
Close 13499 NT_STATUS_OK
Close 13502 NT_STATUS_OK
Close 13503 NT_STATUS_OK
Close 13500 NT_STATUS_OK
Close 13501 NT_STATUS_OK
Close 13493 NT_STATUS_OK
Close 13494 NT_STATUS_OK
Close 13495 NT_STATUS_OK
Close 13496 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13536 NT_STATUS_OK
QUERY_FILE_INFORMATION 13536 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13538 NT_STATUS_OK
QUERY_FILE_INFORMATION 13538 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13541 NT_STATUS_OK
ReadX 13541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13542 NT_STATUS_OK
ReadX 13542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13543 NT_STATUS_OK
ReadX 13543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13544 NT_STATUS_OK
ReadX 13544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13545 NT_STATUS_OK
ReadX 13545 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13541 4096 16384 16384 NT_STATUS_OK
WriteX 13541 0 4096 4096 NT_STATUS_OK
WriteX 13542 0 4096 4096 NT_STATUS_OK
WriteX 13543 0 4096 4096 NT_STATUS_OK
WriteX 13544 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13546 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13547 NT_STATUS_OK
ReadX 13547 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13548 NT_STATUS_OK
ReadX 13548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13549 NT_STATUS_OK
ReadX 13549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13550 NT_STATUS_OK
ReadX 13550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13551 NT_STATUS_OK
ReadX 13551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13552 NT_STATUS_OK
ReadX 13552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13553 NT_STATUS_OK
ReadX 13553 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13554 NT_STATUS_OK
ReadX 13554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13555 NT_STATUS_OK
ReadX 13555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13556 NT_STATUS_OK
ReadX 13556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13557 NT_STATUS_OK
ReadX 13557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13558 NT_STATUS_OK
ReadX 13558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13559 NT_STATUS_OK
ReadX 13559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13560 NT_STATUS_OK
ReadX 13560 0 8192 8192 NT_STATUS_OK
ReadX 13547 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13561 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13561 0 4096 4096 NT_STATUS_OK
ReadX 13561 4096 4096 4096 NT_STATUS_OK
ReadX 13561 8192 4096 4096 NT_STATUS_OK
WriteX 13547 0 4096 4096 NT_STATUS_OK
WriteX 13548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13562 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13562 0 4096 4096 NT_STATUS_OK
ReadX 13562 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13541 0 4096 4096 NT_STATUS_OK
WriteX 13542 0 4096 4096 NT_STATUS_OK
WriteX 13543 0 4096 4096 NT_STATUS_OK
WriteX 13544 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13566 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13567 NT_STATUS_OK
QUERY_FILE_INFORMATION 13567 1004 NT_STATUS_OK
WriteX 13567 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13567 258 NT_STATUS_OK
WriteX 13567 0 2048 2048 NT_STATUS_OK
Close 13567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13568 NT_STATUS_OK
ReadX 13568 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13570 NT_STATUS_OK
ReadX 13570 0 4096 4096 NT_STATUS_OK
ReadX 13570 4096 4096 4096 NT_STATUS_OK
WriteX 13570 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13571 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13572 NT_STATUS_OK
ReadX 13572 0 4096 4096 NT_STATUS_OK
ReadX 13572 4096 4096 4096 NT_STATUS_OK
WriteX 13572 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13573 NT_STATUS_OK
QUERY_FILE_INFORMATION 13573 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13560 NT_STATUS_OK
Close 13545 NT_STATUS_OK
Close 13541 NT_STATUS_OK
Close 13542 NT_STATUS_OK
Close 13543 NT_STATUS_OK
Close 13544 NT_STATUS_OK
Close 13553 NT_STATUS_OK
Close 13558 NT_STATUS_OK
Close 13554 NT_STATUS_OK
Close 13555 NT_STATUS_OK
Close 13556 NT_STATUS_OK
Close 13557 NT_STATUS_OK
Close 13559 NT_STATUS_OK
Close 13547 NT_STATUS_OK
Close 13548 NT_STATUS_OK
Close 13551 NT_STATUS_OK
Close 13552 NT_STATUS_OK
Close 13549 NT_STATUS_OK
Close 13550 NT_STATUS_OK
Close 13572 NT_STATUS_OK
Close 13561 NT_STATUS_OK
Close 13562 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13575 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13575 0 4096 4096 NT_STATUS_OK
ReadX 13575 4096 4096 4096 NT_STATUS_OK
ReadX 13575 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13576 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13577 NT_STATUS_OK
ReadX 13577 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13578 NT_STATUS_OK
ReadX 13578 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13579 NT_STATUS_OK
ReadX 13579 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13580 NT_STATUS_OK
ReadX 13580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13581 NT_STATUS_OK
ReadX 13581 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13582 NT_STATUS_OK
ReadX 13582 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13583 NT_STATUS_OK
ReadX 13583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13584 NT_STATUS_OK
ReadX 13584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13585 NT_STATUS_OK
ReadX 13585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13586 NT_STATUS_OK
ReadX 13586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13587 NT_STATUS_OK
ReadX 13587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13588 NT_STATUS_OK
ReadX 13588 0 4096 4096 NT_STATUS_OK
ReadX 13576 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13592 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13592 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13593 NT_STATUS_OK
QUERY_FILE_INFORMATION 13593 1004 NT_STATUS_OK
WriteX 13593 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13593 258 NT_STATUS_OK
WriteX 13593 0 2048 2048 NT_STATUS_OK
Close 13593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13594 NT_STATUS_OK
ReadX 13594 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13594 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13598 NT_STATUS_OK
Close 13598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13599 NT_STATUS_OK
QUERY_FILE_INFORMATION 13599 1004 NT_STATUS_OK
WriteX 13599 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13599 258 NT_STATUS_OK
WriteX 13599 0 2048 2048 NT_STATUS_OK
Close 13599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13600 NT_STATUS_OK
ReadX 13600 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13600 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13583 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13601 NT_STATUS_OK
QUERY_FILE_INFORMATION 13601 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13587 NT_STATUS_OK
Close 13582 NT_STATUS_OK
Close 13588 NT_STATUS_OK
Close 13576 NT_STATUS_OK
Close 13577 NT_STATUS_OK
Close 13580 NT_STATUS_OK
Close 13581 NT_STATUS_OK
Close 13578 NT_STATUS_OK
Close 13579 NT_STATUS_OK
Close 13583 NT_STATUS_OK
Close 13584 NT_STATUS_OK
Close 13585 NT_STATUS_OK
Close 13586 NT_STATUS_OK
Close 13575 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13603 NT_STATUS_OK
QUERY_FILE_INFORMATION 13603 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13605 NT_STATUS_OK
ReadX 13605 61440 4096 4096 NT_STATUS_OK
ReadX 13605 126976 4096 4096 NT_STATUS_OK
WriteX 13605 0 65536 65536 NT_STATUS_OK
WriteX 13605 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13606 NT_STATUS_OK
ReadX 13606 61440 4096 4096 NT_STATUS_OK
ReadX 13606 126976 4096 4096 NT_STATUS_OK
ReadX 13606 192512 4096 4096 NT_STATUS_OK
ReadX 13606 258048 4096 4096 NT_STATUS_OK
WriteX 13606 0 65536 65536 NT_STATUS_OK
WriteX 13606 65536 65536 65536 NT_STATUS_OK
WriteX 13606 131072 65536 65536 NT_STATUS_OK
WriteX 13606 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13607 NT_STATUS_OK
ReadX 13607 61440 4096 4096 NT_STATUS_OK
ReadX 13607 126976 4096 4096 NT_STATUS_OK
ReadX 13607 192512 4096 4096 NT_STATUS_OK
ReadX 13607 258048 4096 4096 NT_STATUS_OK
ReadX 13607 323584 4096 4096 NT_STATUS_OK
ReadX 13607 389120 4096 4096 NT_STATUS_OK
ReadX 13607 454656 4096 4096 NT_STATUS_OK
ReadX 13607 520192 4096 4096 NT_STATUS_OK
WriteX 13607 0 65536 65536 NT_STATUS_OK
WriteX 13607 65536 65536 65536 NT_STATUS_OK
WriteX 13607 131072 65536 65536 NT_STATUS_OK
WriteX 13607 196608 65536 65536 NT_STATUS_OK
WriteX 13607 262144 65536 65536 NT_STATUS_OK
WriteX 13607 327680 65536 65536 NT_STATUS_OK
WriteX 13607 393216 65536 65536 NT_STATUS_OK
WriteX 13607 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13608 NT_STATUS_OK
ReadX 13608 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13608 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13608 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13608 8192 4096 4096 NT_STATUS_OK
ReadX 13608 12288 4096 4096 NT_STATUS_OK
ReadX 13608 16384 4096 4096 NT_STATUS_OK
ReadX 13608 20480 4096 4096 NT_STATUS_OK
ReadX 13608 24576 4096 4096 NT_STATUS_OK
ReadX 13608 28672 4096 4096 NT_STATUS_OK
ReadX 13608 32768 4096 4096 NT_STATUS_OK
ReadX 13608 36864 4096 4096 NT_STATUS_OK
ReadX 13608 40960 4096 4096 NT_STATUS_OK
ReadX 13608 45056 4096 4096 NT_STATUS_OK
ReadX 13608 49152 4096 4096 NT_STATUS_OK
ReadX 13608 53248 4096 4096 NT_STATUS_OK
ReadX 13608 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13608 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13609 NT_STATUS_OK
Close 13609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13605 NT_STATUS_OK
Close 13606 NT_STATUS_OK
Close 13607 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13611 NT_STATUS_OK
WriteX 13611 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13611 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13611 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13611 1004 NT_STATUS_OK
WriteX 13611 0 57088 57088 NT_STATUS_OK
WriteX 13611 0 4096 4096 NT_STATUS_OK
Flush 13611 NT_STATUS_OK
Close 13608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13612 NT_STATUS_OK
SET_FILE_INFORMATION 13612 1004 NT_STATUS_OK
Close 13612 NT_STATUS_OK
SET_FILE_INFORMATION 13611 1004 NT_STATUS_OK
WriteX 13611 0 4096 4096 NT_STATUS_OK
Close 13611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13613 NT_STATUS_OK
Close 13613 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13615 NT_STATUS_OK
ReadX 13615 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13615 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13616 NT_STATUS_OK
WriteX 13616 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13616 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13616 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13616 1004 NT_STATUS_OK
WriteX 13616 0 51456 51456 NT_STATUS_OK
WriteX 13616 0 4096 4096 NT_STATUS_OK
Flush 13616 NT_STATUS_OK
SET_FILE_INFORMATION 13616 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13616 1004 NT_STATUS_OK
WriteX 13616 0 4096 4096 NT_STATUS_OK
Close 13616 NT_STATUS_OK
Close 13615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13618 NT_STATUS_OK
Close 13618 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13620 NT_STATUS_OK
ReadX 13620 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13620 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13622 NT_STATUS_OK
Close 13622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13625 NT_STATUS_OK
WriteX 13625 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13625 258 NT_STATUS_OK
WriteX 13625 0 53077 53077 NT_STATUS_OK
Close 13625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13626 NT_STATUS_OK
WriteX 13626 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13626 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13626 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13626 1004 NT_STATUS_OK
WriteX 13626 0 65536 65536 NT_STATUS_OK
WriteX 13626 65536 1856 1856 NT_STATUS_OK
WriteX 13626 0 4096 4096 NT_STATUS_OK
Flush 13626 NT_STATUS_OK
SET_FILE_INFORMATION 13626 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13626 1004 NT_STATUS_OK
WriteX 13626 0 4096 4096 NT_STATUS_OK
Close 13626 NT_STATUS_OK
Close 13620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13628 NT_STATUS_OK
Close 13628 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13630 NT_STATUS_OK
ReadX 13630 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13632 NT_STATUS_OK
Close 13632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13635 NT_STATUS_OK
WriteX 13635 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13635 258 NT_STATUS_OK
WriteX 13635 0 7983 7983 NT_STATUS_OK
Close 13635 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13637 NT_STATUS_OK
Close 13637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13640 NT_STATUS_OK
WriteX 13640 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13640 258 NT_STATUS_OK
WriteX 13640 0 65536 65536 NT_STATUS_OK
WriteX 13640 65536 65536 65536 NT_STATUS_OK
WriteX 13640 131072 65536 65536 NT_STATUS_OK
WriteX 13640 196608 65536 65536 NT_STATUS_OK
WriteX 13640 262144 65536 65536 NT_STATUS_OK
WriteX 13640 327680 65536 65536 NT_STATUS_OK
WriteX 13640 393216 65536 65536 NT_STATUS_OK
WriteX 13640 458752 46731 46731 NT_STATUS_OK
Close 13640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13641 NT_STATUS_OK
WriteX 13641 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13641 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13630 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13641 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13641 1004 NT_STATUS_OK
WriteX 13641 0 65536 65536 NT_STATUS_OK
WriteX 13641 65536 22848 22848 NT_STATUS_OK
WriteX 13641 0 4096 4096 NT_STATUS_OK
Flush 13641 NT_STATUS_OK
SET_FILE_INFORMATION 13641 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13641 1004 NT_STATUS_OK
WriteX 13641 0 4096 4096 NT_STATUS_OK
Close 13641 NT_STATUS_OK
Close 13630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13643 NT_STATUS_OK
Close 13643 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13645 NT_STATUS_OK
ReadX 13645 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13645 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13646 NT_STATUS_OK
ReadX 13646 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13646 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13646 1004 NT_STATUS_OK
ReadX 13646 8192 4096 4096 NT_STATUS_OK
ReadX 13646 12288 4096 4096 NT_STATUS_OK
ReadX 13646 16384 4096 4096 NT_STATUS_OK
ReadX 13646 20480 4096 4096 NT_STATUS_OK
ReadX 13646 24576 4096 4096 NT_STATUS_OK
ReadX 13646 28672 4096 4096 NT_STATUS_OK
ReadX 13646 32768 4096 4096 NT_STATUS_OK
ReadX 13646 36864 4096 4096 NT_STATUS_OK
ReadX 13646 40960 4096 4096 NT_STATUS_OK
ReadX 13646 45056 4096 4096 NT_STATUS_OK
ReadX 13646 49152 4096 4096 NT_STATUS_OK
ReadX 13646 53248 4096 4096 NT_STATUS_OK
ReadX 13646 57344 4096 4096 NT_STATUS_OK
ReadX 13646 61440 4096 4096 NT_STATUS_OK
ReadX 13646 65536 4096 4096 NT_STATUS_OK
ReadX 13646 69632 4096 4096 NT_STATUS_OK
ReadX 13646 73728 4096 4096 NT_STATUS_OK
ReadX 13646 77824 4096 4096 NT_STATUS_OK
ReadX 13646 81920 4096 4096 NT_STATUS_OK
ReadX 13646 86016 4096 4096 NT_STATUS_OK
ReadX 13646 90112 4096 4096 NT_STATUS_OK
ReadX 13646 94208 4096 4096 NT_STATUS_OK
ReadX 13646 98304 4096 4096 NT_STATUS_OK
ReadX 13646 102400 4096 4096 NT_STATUS_OK
ReadX 13646 106496 4096 4096 NT_STATUS_OK
ReadX 13646 110592 4096 4096 NT_STATUS_OK
ReadX 13646 114688 4096 4096 NT_STATUS_OK
ReadX 13646 118784 4096 4096 NT_STATUS_OK
ReadX 13646 122880 4096 4096 NT_STATUS_OK
ReadX 13646 126976 4096 4096 NT_STATUS_OK
ReadX 13646 131072 4096 4096 NT_STATUS_OK
ReadX 13646 135168 4096 4096 NT_STATUS_OK
ReadX 13646 139264 4096 4096 NT_STATUS_OK
ReadX 13646 143360 4096 4096 NT_STATUS_OK
ReadX 13646 147456 4096 4096 NT_STATUS_OK
ReadX 13646 151552 4096 4096 NT_STATUS_OK
ReadX 13646 155648 4096 4096 NT_STATUS_OK
ReadX 13646 159744 4096 4096 NT_STATUS_OK
ReadX 13646 163840 4096 4096 NT_STATUS_OK
ReadX 13646 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13646 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13647 NT_STATUS_OK
Close 13647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13645 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13649 NT_STATUS_OK
WriteX 13649 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13649 258 NT_STATUS_OK
Close 13646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13650 NT_STATUS_OK
SET_FILE_INFORMATION 13650 1004 NT_STATUS_OK
Close 13650 NT_STATUS_OK
WriteX 13649 0 42388 42388 NT_STATUS_OK
Close 13649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13651 NT_STATUS_OK
Close 13651 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13653 NT_STATUS_OK
ReadX 13653 0 4096 4096 NT_STATUS_OK
ReadX 13653 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13654 NT_STATUS_OK
WriteX 13654 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13654 258 NT_STATUS_OK
SET_FILE_INFORMATION 13654 1004 NT_STATUS_OK
WriteX 13654 0 42652 42652 NT_STATUS_OK
Close 13654 NT_STATUS_OK
Close 13653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13656 NT_STATUS_OK
Close 13656 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13658 NT_STATUS_OK
ReadX 13658 0 4096 4096 NT_STATUS_OK
ReadX 13658 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13660 NT_STATUS_OK
Close 13660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13663 NT_STATUS_OK
WriteX 13663 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13663 258 NT_STATUS_OK
WriteX 13663 0 65536 65536 NT_STATUS_OK
WriteX 13663 65536 49 49 NT_STATUS_OK
Close 13663 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13664 NT_STATUS_OK
ReadX 13664 0 61440 61440 NT_STATUS_OK
ReadX 13664 61440 4096 4096 NT_STATUS_OK
ReadX 13664 65536 61440 61440 NT_STATUS_OK
ReadX 13664 126976 4096 4096 NT_STATUS_OK
ReadX 13664 131072 61440 61440 NT_STATUS_OK
ReadX 13664 192512 4096 4096 NT_STATUS_OK
ReadX 13664 196608 61440 61440 NT_STATUS_OK
ReadX 13664 258048 4096 4096 NT_STATUS_OK
ReadX 13664 262144 61440 61440 NT_STATUS_OK
ReadX 13664 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13665 NT_STATUS_OK
ReadX 13665 0 61440 61440 NT_STATUS_OK
ReadX 13665 61440 4096 4096 NT_STATUS_OK
ReadX 13665 65536 61440 61440 NT_STATUS_OK
ReadX 13665 126976 4096 4096 NT_STATUS_OK
ReadX 13665 131072 61440 61440 NT_STATUS_OK
ReadX 13665 192512 4096 4096 NT_STATUS_OK
ReadX 13665 196608 61440 61440 NT_STATUS_OK
ReadX 13665 258048 4096 4096 NT_STATUS_OK
ReadX 13665 262144 61440 61440 NT_STATUS_OK
ReadX 13665 323584 4096 4096 NT_STATUS_OK
ReadX 13665 327680 61440 61440 NT_STATUS_OK
ReadX 13665 389120 4096 4096 NT_STATUS_OK
ReadX 13665 393216 61440 61440 NT_STATUS_OK
ReadX 13665 454656 4096 4096 NT_STATUS_OK
ReadX 13665 458752 61440 61440 NT_STATUS_OK
ReadX 13665 520192 4096 4096 NT_STATUS_OK
ReadX 13665 524288 61440 61440 NT_STATUS_OK
ReadX 13665 585728 4096 4096 NT_STATUS_OK
ReadX 13665 589824 61440 61440 NT_STATUS_OK
ReadX 13665 651264 4096 4096 NT_STATUS_OK
ReadX 13665 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13666 NT_STATUS_OK
ReadX 13666 0 61440 61440 NT_STATUS_OK
ReadX 13666 61440 4096 4096 NT_STATUS_OK
ReadX 13666 65536 61440 61440 NT_STATUS_OK
ReadX 13666 126976 4096 4096 NT_STATUS_OK
ReadX 13666 131072 61440 61440 NT_STATUS_OK
ReadX 13666 192512 4096 4096 NT_STATUS_OK
ReadX 13666 196608 61440 61440 NT_STATUS_OK
ReadX 13666 258048 4096 4096 NT_STATUS_OK
ReadX 13666 262144 61440 61440 NT_STATUS_OK
ReadX 13666 323584 4096 4096 NT_STATUS_OK
ReadX 13666 327680 61440 61440 NT_STATUS_OK
ReadX 13666 389120 4096 4096 NT_STATUS_OK
ReadX 13666 393216 61440 61440 NT_STATUS_OK
ReadX 13666 454656 4096 4096 NT_STATUS_OK
ReadX 13666 458752 61440 61440 NT_STATUS_OK
ReadX 13666 520192 4096 4096 NT_STATUS_OK
ReadX 13666 524288 61440 61440 NT_STATUS_OK
ReadX 13666 585728 4096 4096 NT_STATUS_OK
ReadX 13666 589824 61440 61440 NT_STATUS_OK
ReadX 13666 651264 4096 4096 NT_STATUS_OK
ReadX 13666 655360 61440 61440 NT_STATUS_OK
ReadX 13666 716800 4096 4096 NT_STATUS_OK
ReadX 13666 720896 61440 61440 NT_STATUS_OK
ReadX 13666 782336 4096 4096 NT_STATUS_OK
ReadX 13666 786432 61440 61440 NT_STATUS_OK
ReadX 13666 847872 4096 4096 NT_STATUS_OK
ReadX 13666 851968 61440 61440 NT_STATUS_OK
ReadX 13666 913408 4096 4096 NT_STATUS_OK
ReadX 13666 917504 61440 61440 NT_STATUS_OK
ReadX 13666 978944 4096 4096 NT_STATUS_OK
ReadX 13666 983040 61440 61440 NT_STATUS_OK
ReadX 13666 1044480 4096 4096 NT_STATUS_OK
ReadX 13666 1048576 61440 61440 NT_STATUS_OK
ReadX 13666 1110016 4096 4096 NT_STATUS_OK
ReadX 13666 1114112 61440 61440 NT_STATUS_OK
ReadX 13666 1175552 4096 4096 NT_STATUS_OK
ReadX 13666 1179648 61440 61440 NT_STATUS_OK
ReadX 13666 1241088 4096 4096 NT_STATUS_OK
ReadX 13666 1245184 61440 61440 NT_STATUS_OK
ReadX 13666 1306624 4096 4096 NT_STATUS_OK
ReadX 13666 1310720 61440 61440 NT_STATUS_OK
ReadX 13666 1372160 4096 4096 NT_STATUS_OK
ReadX 13666 1376256 61440 61440 NT_STATUS_OK
ReadX 13666 1437696 4096 4096 NT_STATUS_OK
ReadX 13666 1441792 61440 61440 NT_STATUS_OK
ReadX 13666 1503232 4096 4096 NT_STATUS_OK
ReadX 13666 1507328 61440 61440 NT_STATUS_OK
ReadX 13666 1568768 4096 4096 NT_STATUS_OK
ReadX 13666 1572864 61440 61440 NT_STATUS_OK
ReadX 13666 1634304 4096 4096 NT_STATUS_OK
ReadX 13666 1638400 61440 61440 NT_STATUS_OK
ReadX 13666 1699840 4096 4096 NT_STATUS_OK
ReadX 13666 1703936 61440 61440 NT_STATUS_OK
ReadX 13666 1765376 4096 4096 NT_STATUS_OK
ReadX 13666 1769472 61440 61440 NT_STATUS_OK
ReadX 13666 1830912 4096 4096 NT_STATUS_OK
ReadX 13666 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13668 NT_STATUS_OK
QUERY_FILE_INFORMATION 13668 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13668 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13668 1005 NT_STATUS_OK
ReadX 13668 2156 24 24 NT_STATUS_OK
ReadX 13668 2139 276 276 NT_STATUS_OK
ReadX 13668 2136 14 14 NT_STATUS_OK
ReadX 13668 2136 7 7 NT_STATUS_OK
ReadX 13668 2138 12 12 NT_STATUS_OK
ReadX 13668 2137 8 8 NT_STATUS_OK
ReadX 13668 2135 15 15 NT_STATUS_OK
ReadX 13668 0 16 16 NT_STATUS_OK
ReadX 13668 16 2048 2048 NT_STATUS_OK
ReadX 13668 2064 2048 2048 NT_STATUS_OK
ReadX 13668 257 2048 2048 NT_STATUS_OK
ReadX 13668 385 2048 2048 NT_STATUS_OK
ReadX 13668 513 2048 2048 NT_STATUS_OK
ReadX 13668 641 2048 2048 NT_STATUS_OK
ReadX 13668 769 2048 2048 NT_STATUS_OK
ReadX 13668 897 2048 2048 NT_STATUS_OK
ReadX 13668 1025 2048 2048 NT_STATUS_OK
ReadX 13668 1153 2048 2048 NT_STATUS_OK
ReadX 13668 1281 2048 2048 NT_STATUS_OK
ReadX 13668 1409 2048 2048 NT_STATUS_OK
ReadX 13668 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13670 NT_STATUS_OK
Close 13670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13664 NT_STATUS_OK
Close 13665 NT_STATUS_OK
Close 13666 NT_STATUS_OK
Close 13658 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13673 NT_STATUS_OK
WriteX 13673 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13673 258 NT_STATUS_OK
WriteX 13673 0 10575 10575 NT_STATUS_OK
Flush 13673 NT_STATUS_OK
Close 13673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13674 NT_STATUS_OK
Close 13674 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13676 NT_STATUS_OK
ReadX 13676 0 4096 4096 NT_STATUS_OK
Close 13668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13678 NT_STATUS_OK
LockX 13678 2147483538 1 NT_STATUS_OK
UnlockX 13678 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13678 1005 NT_STATUS_OK
ReadX 13678 0 512 512 NT_STATUS_OK
ReadX 13678 512 512 512 NT_STATUS_OK
ReadX 13678 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13678 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13678 1004 NT_STATUS_OK
Close 13678 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13679 NT_STATUS_OK
QUERY_FILE_INFORMATION 13679 1005 NT_STATUS_OK
ReadX 13679 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13680 NT_STATUS_OK
LockX 13680 2147483538 1 NT_STATUS_OK
UnlockX 13680 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13680 1005 NT_STATUS_OK
ReadX 13680 0 512 512 NT_STATUS_OK
ReadX 13680 512 512 512 NT_STATUS_OK
ReadX 13680 1024 512 512 NT_STATUS_OK
ReadX 13680 288 20 20 NT_STATUS_OK
ReadX 13680 308 2084 2084 NT_STATUS_OK
ReadX 13680 388 2084 2084 NT_STATUS_OK
ReadX 13680 388 2084 2084 NT_STATUS_OK
ReadX 13667 2157 1386 1386 NT_STATUS_OK
ReadX 13680 2472 399 399 NT_STATUS_OK
ReadX 13680 3072 1536 1536 NT_STATUS_OK
ReadX 13680 544 149 149 NT_STATUS_OK
ReadX 13680 693 485 485 NT_STATUS_OK
Close 13680 NT_STATUS_OK
ReadX 13667 2157 4096 4096 NT_STATUS_OK
ReadX 13667 6253 4096 4096 NT_STATUS_OK
ReadX 13667 10349 4096 4096 NT_STATUS_OK
ReadX 13667 14445 4096 4096 NT_STATUS_OK
ReadX 13667 18541 4096 4096 NT_STATUS_OK
ReadX 13667 22637 256 256 NT_STATUS_OK
ReadX 13667 22893 4096 4096 NT_STATUS_OK
ReadX 13667 26989 4096 4096 NT_STATUS_OK
ReadX 13667 31085 4096 4096 NT_STATUS_OK
ReadX 13667 35181 4096 4096 NT_STATUS_OK
ReadX 13667 39277 4096 4096 NT_STATUS_OK
ReadX 13667 43373 4096 4096 NT_STATUS_OK
ReadX 13667 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13667 2157 1024 1024 NT_STATUS_OK
ReadX 13667 1667 4688 4688 NT_STATUS_OK
ReadX 13667 6355 3516 3516 NT_STATUS_OK
ReadX 13667 9871 16384 16384 NT_STATUS_OK
ReadX 13667 26255 3771 3771 NT_STATUS_OK
ReadX 13667 30026 2048 2048 NT_STATUS_OK
ReadX 13667 32074 1024 1024 NT_STATUS_OK
ReadX 13667 33098 6652 6652 NT_STATUS_OK
ReadX 13667 39750 16384 16384 NT_STATUS_OK
ReadX 13667 56134 10496 10496 NT_STATUS_OK
ReadX 13667 66630 1784 1784 NT_STATUS_OK
ReadX 13667 68414 90 90 NT_STATUS_OK
ReadX 13667 68504 273 273 NT_STATUS_OK
ReadX 13667 68777 1600 1600 NT_STATUS_OK
ReadX 13667 70377 640 640 NT_STATUS_OK
ReadX 13667 71017 1280 1280 NT_STATUS_OK
ReadX 13667 72297 8464 8464 NT_STATUS_OK
ReadX 13667 80761 158 158 NT_STATUS_OK
ReadX 13667 80919 912 912 NT_STATUS_OK
ReadX 13667 81831 1980 1980 NT_STATUS_OK
ReadX 13667 83811 2256 2256 NT_STATUS_OK
ReadX 13667 86067 400 400 NT_STATUS_OK
ReadX 13667 86467 252 252 NT_STATUS_OK
ReadX 13667 86719 42 42 NT_STATUS_OK
ReadX 13667 86761 725 725 NT_STATUS_OK
ReadX 13667 2009 512 512 NT_STATUS_OK
ReadX 13667 3895 9 9 NT_STATUS_OK
ReadX 13667 3781 46 46 NT_STATUS_OK
ReadX 13667 4059 92 92 NT_STATUS_OK
ReadX 13667 3781 92 92 NT_STATUS_OK
ReadX 13667 3986 184 184 NT_STATUS_OK
ReadX 13667 3987 16384 16384 NT_STATUS_OK
ReadX 13667 3902 16384 16384 NT_STATUS_OK
ReadX 13667 3781 10240 10240 NT_STATUS_OK
ReadX 13667 3821 16384 16384 NT_STATUS_OK
ReadX 13667 3891 935 935 NT_STATUS_OK
ReadX 13667 4060 10240 10240 NT_STATUS_OK
ReadX 13667 4059 184 184 NT_STATUS_OK
ReadX 13667 256 184 184 NT_STATUS_OK
ReadX 13667 256 1026 1026 NT_STATUS_OK
ReadX 13667 3901 326 326 NT_STATUS_OK
ReadX 13667 3899 652 652 NT_STATUS_OK
ReadX 13667 256 2 2 NT_STATUS_OK
ReadX 13667 258 4948 4948 NT_STATUS_OK
Close 13667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13682 NT_STATUS_OK
Close 13682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13685 NT_STATUS_OK
WriteX 13685 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13685 258 NT_STATUS_OK
WriteX 13685 0 65536 65536 NT_STATUS_OK
WriteX 13685 65536 65536 65536 NT_STATUS_OK
WriteX 13685 131072 65536 65536 NT_STATUS_OK
WriteX 13685 196608 65536 65536 NT_STATUS_OK
WriteX 13685 262144 65536 65536 NT_STATUS_OK
WriteX 13685 327680 65536 65536 NT_STATUS_OK
WriteX 13685 393216 65536 65536 NT_STATUS_OK
WriteX 13685 458752 65536 65536 NT_STATUS_OK
WriteX 13685 524288 65536 65536 NT_STATUS_OK
WriteX 13685 589824 35257 35257 NT_STATUS_OK
Close 13685 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13687 NT_STATUS_OK
Close 13687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13690 NT_STATUS_OK
WriteX 13690 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13690 258 NT_STATUS_OK
WriteX 13690 0 65536 65536 NT_STATUS_OK
WriteX 13690 65536 65536 65536 NT_STATUS_OK
WriteX 13690 131072 65536 65536 NT_STATUS_OK
WriteX 13690 196608 65536 65536 NT_STATUS_OK
WriteX 13690 262144 65536 65536 NT_STATUS_OK
WriteX 13690 327680 65536 65536 NT_STATUS_OK
WriteX 13690 393216 65536 65536 NT_STATUS_OK
WriteX 13690 458752 65536 65536 NT_STATUS_OK
WriteX 13690 524288 65536 65536 NT_STATUS_OK
WriteX 13690 589824 57598 57598 NT_STATUS_OK
Close 13690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13692 NT_STATUS_OK
WriteX 13692 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13692 258 NT_STATUS_OK
WriteX 13692 0 12543 12543 NT_STATUS_OK
Flush 13692 NT_STATUS_OK
Close 13692 NT_STATUS_OK
Close 13676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13694 NT_STATUS_OK
Close 13694 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13696 NT_STATUS_OK
ReadX 13696 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13698 NT_STATUS_OK
QUERY_FILE_INFORMATION 13698 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13698 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13698 1005 NT_STATUS_OK
ReadX 13698 1938 24 24 NT_STATUS_OK
ReadX 13698 1920 276 276 NT_STATUS_OK
ReadX 13698 1918 14 14 NT_STATUS_OK
ReadX 13698 1918 7 7 NT_STATUS_OK
ReadX 13698 1919 12 12 NT_STATUS_OK
ReadX 13698 1919 8 8 NT_STATUS_OK
ReadX 13698 1917 15 15 NT_STATUS_OK
ReadX 13698 0 16 16 NT_STATUS_OK
ReadX 13698 16 2048 2048 NT_STATUS_OK
ReadX 13698 2064 2048 2048 NT_STATUS_OK
ReadX 13698 257 2048 2048 NT_STATUS_OK
ReadX 13698 385 2048 2048 NT_STATUS_OK
ReadX 13698 513 2048 2048 NT_STATUS_OK
ReadX 13698 641 2048 2048 NT_STATUS_OK
ReadX 13698 769 2048 2048 NT_STATUS_OK
ReadX 13698 897 2048 2048 NT_STATUS_OK
ReadX 13698 1025 2048 2048 NT_STATUS_OK
ReadX 13698 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13700 NT_STATUS_OK
Close 13700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13703 NT_STATUS_OK
WriteX 13703 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13703 258 NT_STATUS_OK
WriteX 13703 0 11588 11588 NT_STATUS_OK
Flush 13703 NT_STATUS_OK
Close 13703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13704 NT_STATUS_OK
Close 13704 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13706 NT_STATUS_OK
ReadX 13706 0 4096 4096 NT_STATUS_OK
Close 13698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13708 NT_STATUS_OK
WriteX 13708 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13708 258 NT_STATUS_OK
WriteX 13708 0 11615 11615 NT_STATUS_OK
Flush 13708 NT_STATUS_OK
Close 13708 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13710 NT_STATUS_OK
Close 13710 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13712 NT_STATUS_OK
ReadX 13712 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13714 NT_STATUS_OK
Close 13714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13717 NT_STATUS_OK
WriteX 13717 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13717 258 NT_STATUS_OK
WriteX 13717 0 65536 65536 NT_STATUS_OK
WriteX 13717 65536 16050 16050 NT_STATUS_OK
Close 13717 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13697 1939 64 64 NT_STATUS_OK
ReadX 13697 128 248 248 NT_STATUS_OK
ReadX 13697 128 568 568 NT_STATUS_OK
ReadX 13697 3872 1536 1536 NT_STATUS_OK
ReadX 13697 3456 2560 2560 NT_STATUS_OK
ReadX 13697 3136 512 512 NT_STATUS_OK
ReadX 13697 2880 4096 4096 NT_STATUS_OK
ReadX 13697 3264 3072 3072 NT_STATUS_OK
ReadX 13697 320 4096 4096 NT_STATUS_OK
ReadX 13697 1024 4096 4096 NT_STATUS_OK
ReadX 13697 3616 4096 4096 NT_STATUS_OK
ReadX 13697 1939 64 64 NT_STATUS_OK
ReadX 13697 128 248 248 NT_STATUS_OK
ReadX 13697 128 608 608 NT_STATUS_OK
ReadX 13697 2858 1024 1024 NT_STATUS_OK
ReadX 13697 2810 4096 4096 NT_STATUS_OK
ReadX 13697 2826 4096 4096 NT_STATUS_OK
ReadX 13697 2580 2048 2048 NT_STATUS_OK
ReadX 13697 2800 2560 2560 NT_STATUS_OK
ReadX 13697 2100 4096 4096 NT_STATUS_OK
ReadX 13697 2084 4096 4096 NT_STATUS_OK
ReadX 13697 868 4096 4096 NT_STATUS_OK
ReadX 13697 2324 4096 4096 NT_STATUS_OK
ReadX 13697 884 4096 4096 NT_STATUS_OK
ReadX 13697 2604 1024 1024 NT_STATUS_OK
ReadX 13697 580 4096 4096 NT_STATUS_OK
ReadX 13697 596 4096 4096 NT_STATUS_OK
ReadX 13697 2752 4096 4096 NT_STATUS_OK
ReadX 13697 2842 1024 1024 NT_STATUS_OK
ReadX 13697 660 4096 4096 NT_STATUS_OK
ReadX 13697 2720 4096 4096 NT_STATUS_OK
ReadX 13697 2736 4096 4096 NT_STATUS_OK
ReadX 13697 628 4096 4096 NT_STATUS_OK
ReadX 13697 2704 4096 4096 NT_STATUS_OK
ReadX 13697 1556 4096 4096 NT_STATUS_OK
ReadX 13697 576 4096 4096 NT_STATUS_OK
ReadX 13697 3168 1536 1536 NT_STATUS_OK
ReadX 13697 832 4096 4096 NT_STATUS_OK
ReadX 13697 1088 4096 4096 NT_STATUS_OK
ReadX 13697 1344 4096 4096 NT_STATUS_OK
ReadX 13697 1600 4096 4096 NT_STATUS_OK
ReadX 13697 1856 4096 4096 NT_STATUS_OK
ReadX 13697 2112 4096 4096 NT_STATUS_OK
ReadX 13697 1892 4096 4096 NT_STATUS_OK
ReadX 13697 820 4096 4096 NT_STATUS_OK
ReadX 13697 788 4096 4096 NT_STATUS_OK
ReadX 13697 1604 4096 4096 NT_STATUS_OK
ReadX 13697 3648 4096 4096 NT_STATUS_OK
ReadX 13697 2608 4096 4096 NT_STATUS_OK
ReadX 13697 548 4096 4096 NT_STATUS_OK
ReadX 13697 740 4096 4096 NT_STATUS_OK
ReadX 13697 1344 4096 4096 NT_STATUS_OK
ReadX 13697 3392 4096 4096 NT_STATUS_OK
ReadX 13697 3904 4096 4096 NT_STATUS_OK
ReadX 13697 644 4096 4096 NT_STATUS_OK
ReadX 13697 676 4096 4096 NT_STATUS_OK
ReadX 13697 2688 4096 4096 NT_STATUS_OK
ReadX 13697 320 4096 4096 NT_STATUS_OK
ReadX 13697 900 4096 4096 NT_STATUS_OK
ReadX 13697 1908 4096 4096 NT_STATUS_OK
ReadX 13697 852 4096 4096 NT_STATUS_OK
ReadX 13697 724 4096 4096 NT_STATUS_OK
ReadX 13697 2292 4096 4096 NT_STATUS_OK
ReadX 13697 612 4096 4096 NT_STATUS_OK
ReadX 13697 388 4096 4096 NT_STATUS_OK
ReadX 13697 2368 4096 4096 NT_STATUS_OK
ReadX 13697 2624 4096 4096 NT_STATUS_OK
ReadX 13697 500 4096 4096 NT_STATUS_OK
ReadX 13697 356 4096 4096 NT_STATUS_OK
ReadX 13697 1024 4096 4096 NT_STATUS_OK
ReadX 13697 576 4096 4096 NT_STATUS_OK
ReadX 13697 340 4096 4096 NT_STATUS_OK
ReadX 13697 420 4096 4096 NT_STATUS_OK
ReadX 13697 1600 4096 4096 NT_STATUS_OK
ReadX 13697 404 4096 4096 NT_STATUS_OK
ReadX 13697 1428 4096 4096 NT_STATUS_OK
ReadX 13697 2656 4096 4096 NT_STATUS_OK
ReadX 13697 2624 4096 4096 NT_STATUS_OK
ReadX 13697 452 4096 4096 NT_STATUS_OK
ReadX 13697 692 4096 4096 NT_STATUS_OK
ReadX 13697 564 4096 4096 NT_STATUS_OK
ReadX 13697 372 4096 4096 NT_STATUS_OK
ReadX 13697 468 4096 4096 NT_STATUS_OK
ReadX 13697 484 4096 4096 NT_STATUS_OK
ReadX 13697 1088 4096 4096 NT_STATUS_OK
ReadX 13697 1924 4096 4096 NT_STATUS_OK
ReadX 13697 2768 4096 4096 NT_STATUS_OK
ReadX 13697 832 4096 4096 NT_STATUS_OK
ReadX 13697 836 4096 4096 NT_STATUS_OK
ReadX 13697 1856 4096 4096 NT_STATUS_OK
ReadX 13697 2640 4096 4096 NT_STATUS_OK
ReadX 13697 436 4096 4096 NT_STATUS_OK
ReadX 13697 1828 4096 4096 NT_STATUS_OK
ReadX 13697 804 4096 4096 NT_STATUS_OK
ReadX 13697 1860 4096 4096 NT_STATUS_OK
ReadX 13697 1812 4096 4096 NT_STATUS_OK
ReadX 13697 756 4096 4096 NT_STATUS_OK
ReadX 13697 1636 4096 4096 NT_STATUS_OK
ReadX 13697 772 4096 4096 NT_STATUS_OK
ReadX 13697 2036 4096 4096 NT_STATUS_OK
ReadX 13697 1220 4096 4096 NT_STATUS_OK
ReadX 13697 1652 4096 4096 NT_STATUS_OK
ReadX 13697 2588 4096 4096 NT_STATUS_OK
ReadX 13697 916 4096 4096 NT_STATUS_OK
ReadX 13697 260 4096 4096 NT_STATUS_OK
ReadX 13697 932 4096 4096 NT_STATUS_OK
ReadX 13697 2624 4096 4096 NT_STATUS_OK
ReadX 13697 308 4096 4096 NT_STATUS_OK
ReadX 13697 292 4096 4096 NT_STATUS_OK
ReadX 13697 1140 4096 4096 NT_STATUS_OK
ReadX 13697 276 4096 4096 NT_STATUS_OK
ReadX 13697 2020 4096 4096 NT_STATUS_OK
ReadX 13697 2880 4096 4096 NT_STATUS_OK
ReadX 13697 516 4096 4096 NT_STATUS_OK
ReadX 13697 1844 4096 4096 NT_STATUS_OK
ReadX 13697 1124 4096 4096 NT_STATUS_OK
ReadX 13697 3136 4096 4096 NT_STATUS_OK
ReadX 13697 324 4096 4096 NT_STATUS_OK
ReadX 13697 1156 4096 4096 NT_STATUS_OK
ReadX 13697 1172 4096 4096 NT_STATUS_OK
ReadX 13697 2112 4096 4096 NT_STATUS_OK
ReadX 13697 2368 4096 4096 NT_STATUS_OK
ReadX 13697 964 4096 4096 NT_STATUS_OK
ReadX 13697 980 4096 4096 NT_STATUS_OK
ReadX 13697 1012 4096 4096 NT_STATUS_OK
ReadX 13697 532 4096 4096 NT_STATUS_OK
ReadX 13697 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13697 1620 4096 4096 NT_STATUS_OK
ReadX 13697 1604 4096 4096 NT_STATUS_OK
ReadX 13697 2116 4096 4096 NT_STATUS_OK
ReadX 13697 2132 4096 4096 NT_STATUS_OK
ReadX 13697 2148 4096 4096 NT_STATUS_OK
ReadX 13697 2276 4096 4096 NT_STATUS_OK
ReadX 13697 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13719 NT_STATUS_OK
Close 13719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13722 NT_STATUS_OK
QUERY_FILE_INFORMATION 13677 1004 NT_STATUS_OK
Close 13677 NT_STATUS_OK
WriteX 13722 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13722 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13679 1004 NT_STATUS_OK
Close 13679 NT_STATUS_OK
WriteX 13722 0 65536 65536 NT_STATUS_OK
WriteX 13722 65536 64850 64850 NT_STATUS_OK
Close 13722 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13724 NT_STATUS_OK
WriteX 13724 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13724 258 NT_STATUS_OK
ReadX 13697 2068 4096 4096 NT_STATUS_OK
ReadX 13697 1588 4096 4096 NT_STATUS_OK
ReadX 13697 1572 4096 4096 NT_STATUS_OK
WriteX 13724 0 18630 18630 NT_STATUS_OK
Flush 13724 NT_STATUS_OK
Close 13724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13726 NT_STATUS_OK
Close 13726 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13728 NT_STATUS_OK
ReadX 13728 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13697 612 4096 4096 NT_STATUS_OK
ReadX 13697 564 4096 4096 NT_STATUS_OK
ReadX 13697 1876 4096 4096 NT_STATUS_OK
ReadX 13697 628 4096 4096 NT_STATUS_OK
ReadX 13697 740 4096 4096 NT_STATUS_OK
ReadX 13697 724 4096 4096 NT_STATUS_OK
ReadX 13697 644 4096 4096 NT_STATUS_OK
ReadX 13697 2324 4096 4096 NT_STATUS_OK
ReadX 13697 660 4096 4096 NT_STATUS_OK
ReadX 13697 852 4096 4096 NT_STATUS_OK
ReadX 13697 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13697 2368 4096 4096 NT_STATUS_OK
ReadX 13697 1024 4096 4096 NT_STATUS_OK
ReadX 13697 320 4096 4096 NT_STATUS_OK
ReadX 13697 580 4096 4096 NT_STATUS_OK
ReadX 13697 3136 512 512 NT_STATUS_OK
ReadX 13697 2880 4096 4096 NT_STATUS_OK
Close 13697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13729 NT_STATUS_OK
ReadX 13729 61440 4096 4096 NT_STATUS_OK
ReadX 13729 126976 4096 4096 NT_STATUS_OK
WriteX 13729 0 65536 65536 NT_STATUS_OK
WriteX 13729 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13730 NT_STATUS_OK
ReadX 13730 61440 4096 4096 NT_STATUS_OK
ReadX 13730 126976 4096 4096 NT_STATUS_OK
ReadX 13730 192512 4096 4096 NT_STATUS_OK
ReadX 13730 258048 4096 4096 NT_STATUS_OK
WriteX 13730 0 65536 65536 NT_STATUS_OK
WriteX 13730 65536 65536 65536 NT_STATUS_OK
WriteX 13730 131072 65536 65536 NT_STATUS_OK
WriteX 13730 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13731 NT_STATUS_OK
ReadX 13731 61440 4096 4096 NT_STATUS_OK
ReadX 13731 126976 4096 4096 NT_STATUS_OK
ReadX 13731 192512 4096 4096 NT_STATUS_OK
ReadX 13731 258048 4096 4096 NT_STATUS_OK
ReadX 13731 323584 4096 4096 NT_STATUS_OK
ReadX 13731 389120 4096 4096 NT_STATUS_OK
ReadX 13731 454656 4096 4096 NT_STATUS_OK
ReadX 13731 520192 4096 4096 NT_STATUS_OK
WriteX 13731 0 65536 65536 NT_STATUS_OK
WriteX 13731 65536 65536 65536 NT_STATUS_OK
WriteX 13731 131072 65536 65536 NT_STATUS_OK
WriteX 13731 196608 65536 65536 NT_STATUS_OK
WriteX 13731 262144 65536 65536 NT_STATUS_OK
WriteX 13731 327680 65536 65536 NT_STATUS_OK
WriteX 13731 393216 65536 65536 NT_STATUS_OK
WriteX 13731 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13732 NT_STATUS_OK
ReadX 13732 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13733 NT_STATUS_OK
Close 13733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13734 NT_STATUS_OK
WriteX 13734 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13734 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13732 0 8192 8192 NT_STATUS_OK
Flush 13732 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13732 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13732 0 8192 8192 NT_STATUS_OK
Flush 13732 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13732 0 8192 8192 NT_STATUS_OK
Flush 13732 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13732 0 8192 8192 NT_STATUS_OK
Flush 13732 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13736 NT_STATUS_OK
Close 13736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13728 NT_STATUS_OK
Close 13696 NT_STATUS_OK
Close 13729 NT_STATUS_OK
Close 13730 NT_STATUS_OK
Close 13731 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13739 NT_STATUS_OK
WriteX 13739 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13739 258 NT_STATUS_OK
WriteX 13739 0 62591 62591 NT_STATUS_OK
Close 13739 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13741 NT_STATUS_OK
Close 13741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13744 NT_STATUS_OK
WriteX 13744 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13744 258 NT_STATUS_OK
WriteX 13744 0 10845 10845 NT_STATUS_OK
Close 13744 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13746 NT_STATUS_OK
Close 13746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13749 NT_STATUS_OK
WriteX 13749 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13749 258 NT_STATUS_OK
WriteX 13749 0 30118 30118 NT_STATUS_OK
Close 13749 NT_STATUS_OK
WriteX 13732 0 4096 4096 NT_STATUS_OK
WriteX 13734 0 64 64 NT_STATUS_OK
Close 13734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13732 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13751 NT_STATUS_OK
ReadX 13751 0 61440 61440 NT_STATUS_OK
ReadX 13751 61440 4096 4096 NT_STATUS_OK
ReadX 13751 65536 61440 61440 NT_STATUS_OK
ReadX 13751 126976 4096 4096 NT_STATUS_OK
ReadX 13751 131072 61440 61440 NT_STATUS_OK
ReadX 13751 192512 4096 4096 NT_STATUS_OK
ReadX 13751 196608 61440 61440 NT_STATUS_OK
ReadX 13751 258048 4096 4096 NT_STATUS_OK
ReadX 13751 262144 61440 61440 NT_STATUS_OK
ReadX 13751 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13752 NT_STATUS_OK
ReadX 13752 0 61440 61440 NT_STATUS_OK
ReadX 13752 61440 4096 4096 NT_STATUS_OK
ReadX 13752 65536 61440 61440 NT_STATUS_OK
ReadX 13752 126976 4096 4096 NT_STATUS_OK
ReadX 13752 131072 61440 61440 NT_STATUS_OK
ReadX 13752 192512 4096 4096 NT_STATUS_OK
ReadX 13752 196608 61440 61440 NT_STATUS_OK
ReadX 13752 258048 4096 4096 NT_STATUS_OK
ReadX 13752 262144 61440 61440 NT_STATUS_OK
ReadX 13752 323584 4096 4096 NT_STATUS_OK
ReadX 13752 327680 61440 61440 NT_STATUS_OK
ReadX 13752 389120 4096 4096 NT_STATUS_OK
ReadX 13752 393216 61440 61440 NT_STATUS_OK
ReadX 13752 454656 4096 4096 NT_STATUS_OK
ReadX 13752 458752 61440 61440 NT_STATUS_OK
ReadX 13752 520192 4096 4096 NT_STATUS_OK
ReadX 13752 524288 61440 61440 NT_STATUS_OK
ReadX 13752 585728 4096 4096 NT_STATUS_OK
ReadX 13752 589824 61440 61440 NT_STATUS_OK
ReadX 13752 651264 4096 4096 NT_STATUS_OK
ReadX 13752 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13753 NT_STATUS_OK
ReadX 13753 0 61440 61440 NT_STATUS_OK
ReadX 13753 61440 4096 4096 NT_STATUS_OK
ReadX 13753 65536 61440 61440 NT_STATUS_OK
ReadX 13753 126976 4096 4096 NT_STATUS_OK
ReadX 13753 131072 61440 61440 NT_STATUS_OK
ReadX 13753 192512 4096 4096 NT_STATUS_OK
ReadX 13753 196608 61440 61440 NT_STATUS_OK
ReadX 13753 258048 4096 4096 NT_STATUS_OK
ReadX 13753 262144 61440 61440 NT_STATUS_OK
ReadX 13753 323584 4096 4096 NT_STATUS_OK
ReadX 13753 327680 61440 61440 NT_STATUS_OK
ReadX 13753 389120 4096 4096 NT_STATUS_OK
ReadX 13753 393216 61440 61440 NT_STATUS_OK
ReadX 13753 454656 4096 4096 NT_STATUS_OK
ReadX 13753 458752 61440 61440 NT_STATUS_OK
ReadX 13753 520192 4096 4096 NT_STATUS_OK
ReadX 13753 524288 61440 61440 NT_STATUS_OK
ReadX 13753 585728 4096 4096 NT_STATUS_OK
ReadX 13753 589824 61440 61440 NT_STATUS_OK
ReadX 13753 651264 4096 4096 NT_STATUS_OK
ReadX 13753 655360 61440 61440 NT_STATUS_OK
ReadX 13753 716800 4096 4096 NT_STATUS_OK
ReadX 13753 720896 61440 61440 NT_STATUS_OK
ReadX 13753 782336 4096 4096 NT_STATUS_OK
ReadX 13753 786432 61440 61440 NT_STATUS_OK
ReadX 13753 847872 4096 4096 NT_STATUS_OK
ReadX 13753 851968 61440 61440 NT_STATUS_OK
ReadX 13753 913408 4096 4096 NT_STATUS_OK
ReadX 13753 917504 61440 61440 NT_STATUS_OK
ReadX 13753 978944 4096 4096 NT_STATUS_OK
ReadX 13753 983040 61440 61440 NT_STATUS_OK
ReadX 13753 1044480 4096 4096 NT_STATUS_OK
ReadX 13753 1048576 61440 61440 NT_STATUS_OK
ReadX 13753 1110016 4096 4096 NT_STATUS_OK
ReadX 13753 1114112 61440 61440 NT_STATUS_OK
ReadX 13753 1175552 4096 4096 NT_STATUS_OK
ReadX 13753 1179648 61440 61440 NT_STATUS_OK
ReadX 13753 1241088 4096 4096 NT_STATUS_OK
ReadX 13753 1245184 61440 61440 NT_STATUS_OK
ReadX 13753 1306624 4096 4096 NT_STATUS_OK
ReadX 13753 1310720 61440 61440 NT_STATUS_OK
ReadX 13753 1372160 4096 4096 NT_STATUS_OK
ReadX 13753 1376256 61440 61440 NT_STATUS_OK
ReadX 13753 1437696 4096 4096 NT_STATUS_OK
ReadX 13753 1441792 61440 61440 NT_STATUS_OK
ReadX 13753 1503232 4096 4096 NT_STATUS_OK
ReadX 13753 1507328 61440 61440 NT_STATUS_OK
ReadX 13753 1568768 4096 4096 NT_STATUS_OK
ReadX 13753 1572864 61440 61440 NT_STATUS_OK
ReadX 13753 1634304 4096 4096 NT_STATUS_OK
ReadX 13753 1638400 61440 61440 NT_STATUS_OK
ReadX 13753 1699840 4096 4096 NT_STATUS_OK
ReadX 13753 1703936 61440 61440 NT_STATUS_OK
ReadX 13753 1765376 4096 4096 NT_STATUS_OK
ReadX 13753 1769472 61440 61440 NT_STATUS_OK
ReadX 13753 1830912 4096 4096 NT_STATUS_OK
ReadX 13753 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13754 NT_STATUS_OK
Close 13754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13751 NT_STATUS_OK
Close 13752 NT_STATUS_OK
Close 13753 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13756 NT_STATUS_OK
ReadX 13756 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13757 NT_STATUS_OK
ReadX 13757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13758 NT_STATUS_OK
ReadX 13758 0 4096 4096 NT_STATUS_OK
ReadX 13758 4096 4096 4096 NT_STATUS_OK
ReadX 13758 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13759 NT_STATUS_OK
Close 13759 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13756 NT_STATUS_OK
Close 13757 NT_STATUS_OK
Close 13758 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13761 NT_STATUS_OK
ReadX 13761 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13762 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13762 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13763 NT_STATUS_OK
Close 13763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13761 NT_STATUS_OK
Close 13762 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13765 NT_STATUS_OK
ReadX 13765 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13766 NT_STATUS_OK
ReadX 13766 0 8192 8192 NT_STATUS_OK
ReadX 13766 8192 8192 8192 NT_STATUS_OK
ReadX 13766 16384 8192 8192 NT_STATUS_OK
ReadX 13766 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13768 NT_STATUS_OK
Close 13768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13766 NT_STATUS_OK
Close 13765 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13771 NT_STATUS_OK
WriteX 13771 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13771 258 NT_STATUS_OK
WriteX 13771 0 10438 10438 NT_STATUS_OK
Close 13771 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13772 NT_STATUS_OK
Close 13772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13773 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13774 NT_STATUS_OK
Close 13774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13775 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13776 NT_STATUS_OK
Close 13776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13777 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13778 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13779 NT_STATUS_OK
Close 13779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13780 NT_STATUS_OK
ReadX 13780 0 4096 4096 NT_STATUS_OK
ReadX 13780 4096 4096 4096 NT_STATUS_OK
ReadX 13780 8192 4096 4096 NT_STATUS_OK
ReadX 13780 12288 8192 8192 NT_STATUS_OK
ReadX 13780 20480 8192 8192 NT_STATUS_OK
ReadX 13780 28672 8192 8192 NT_STATUS_OK
ReadX 13780 36864 8192 8192 NT_STATUS_OK
ReadX 13780 45056 8192 8192 NT_STATUS_OK
ReadX 13780 53248 8192 8192 NT_STATUS_OK
ReadX 13780 61440 8192 8192 NT_STATUS_OK
ReadX 13780 69632 8192 8192 NT_STATUS_OK
ReadX 13780 77824 8192 8192 NT_STATUS_OK
ReadX 13780 86016 8192 8192 NT_STATUS_OK
ReadX 13780 94208 8192 8192 NT_STATUS_OK
ReadX 13780 102400 8192 8192 NT_STATUS_OK
ReadX 13780 110592 8192 8192 NT_STATUS_OK
ReadX 13780 118784 8192 8192 NT_STATUS_OK
ReadX 13780 126976 8192 8192 NT_STATUS_OK
ReadX 13780 135168 8192 8192 NT_STATUS_OK
ReadX 13780 143360 8192 8192 NT_STATUS_OK
ReadX 13780 151552 8192 8192 NT_STATUS_OK
ReadX 13780 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13780 NT_STATUS_OK
Close 13773 NT_STATUS_OK
Close 13775 NT_STATUS_OK
Close 13777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13782 NT_STATUS_OK
Close 13782 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13785 NT_STATUS_OK
WriteX 13785 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13785 258 NT_STATUS_OK
WriteX 13785 0 28489 28489 NT_STATUS_OK
Close 13785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13786 NT_STATUS_OK
Close 13786 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13788 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13788 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13789 NT_STATUS_OK
Close 13789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13788 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13791 NT_STATUS_OK
ReadX 13791 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 8192 8192 NT_STATUS_OK
ReadX 13792 8192 8192 8192 NT_STATUS_OK
ReadX 13792 16384 8192 8192 NT_STATUS_OK
ReadX 13792 24576 8192 8192 NT_STATUS_OK
ReadX 13792 32768 16384 16384 NT_STATUS_OK
ReadX 13792 49152 8192 8192 NT_STATUS_OK
ReadX 13792 57344 8192 8192 NT_STATUS_OK
ReadX 13792 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13794 NT_STATUS_OK
Close 13794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13792 NT_STATUS_OK
Close 13791 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13797 NT_STATUS_OK
WriteX 13797 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13797 258 NT_STATUS_OK
WriteX 13797 0 29253 29253 NT_STATUS_OK
Close 13797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13798 NT_STATUS_OK
Close 13798 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13799 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13801 NT_STATUS_OK
Close 13801 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13804 NT_STATUS_OK
WriteX 13804 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13804 258 NT_STATUS_OK
WriteX 13804 0 30183 30183 NT_STATUS_OK
Close 13804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13805 NT_STATUS_OK
Close 13805 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13807 NT_STATUS_OK
WriteX 13807 0 510 510 NT_STATUS_OK
WriteX 13807 510 512 512 NT_STATUS_OK
WriteX 13807 1022 510 510 NT_STATUS_OK
WriteX 13807 1532 510 510 NT_STATUS_OK
WriteX 13807 2042 168 168 NT_STATUS_OK
Close 13807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13808 NT_STATUS_OK
Close 13808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13810 NT_STATUS_OK
ReadX 13810 0 4096 4096 NT_STATUS_OK
WriteX 13810 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13811 NT_STATUS_OK
ReadX 13811 61440 4096 4096 NT_STATUS_OK
ReadX 13811 126976 4096 4096 NT_STATUS_OK
WriteX 13811 0 65536 65536 NT_STATUS_OK
WriteX 13811 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13812 NT_STATUS_OK
ReadX 13812 61440 4096 4096 NT_STATUS_OK
ReadX 13812 126976 4096 4096 NT_STATUS_OK
ReadX 13812 192512 4096 4096 NT_STATUS_OK
ReadX 13812 258048 4096 4096 NT_STATUS_OK
WriteX 13812 0 65536 65536 NT_STATUS_OK
WriteX 13812 65536 65536 65536 NT_STATUS_OK
WriteX 13812 131072 65536 65536 NT_STATUS_OK
WriteX 13812 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13813 NT_STATUS_OK
ReadX 13813 61440 4096 4096 NT_STATUS_OK
ReadX 13813 126976 4096 4096 NT_STATUS_OK
ReadX 13813 192512 4096 4096 NT_STATUS_OK
ReadX 13813 258048 4096 4096 NT_STATUS_OK
ReadX 13813 323584 4096 4096 NT_STATUS_OK
ReadX 13813 389120 4096 4096 NT_STATUS_OK
ReadX 13813 454656 4096 4096 NT_STATUS_OK
ReadX 13813 520192 4096 4096 NT_STATUS_OK
WriteX 13813 0 65536 65536 NT_STATUS_OK
WriteX 13813 65536 65536 65536 NT_STATUS_OK
WriteX 13813 131072 65536 65536 NT_STATUS_OK
WriteX 13813 196608 65536 65536 NT_STATUS_OK
WriteX 13813 262144 65536 65536 NT_STATUS_OK
WriteX 13813 327680 65536 65536 NT_STATUS_OK
WriteX 13813 393216 65536 65536 NT_STATUS_OK
WriteX 13813 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13814 NT_STATUS_OK
Close 13814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13810 NT_STATUS_OK
Close 13811 NT_STATUS_OK
Close 13812 NT_STATUS_OK
Close 13813 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13816 NT_STATUS_OK
Close 13816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13820 NT_STATUS_OK
Close 13820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13823 NT_STATUS_OK
Close 13823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13825 NT_STATUS_OK
Close 13825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13829 NT_STATUS_OK
Close 13829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13832 NT_STATUS_OK
Close 13832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13834 NT_STATUS_OK
Close 13834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13838 NT_STATUS_OK
Close 13838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13843 NT_STATUS_OK
Close 13843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13848 NT_STATUS_OK
Close 13848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13853 NT_STATUS_OK
Close 13853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13858 NT_STATUS_OK
Close 13858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13863 NT_STATUS_OK
Close 13863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13868 NT_STATUS_OK
Close 13868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13873 NT_STATUS_OK
Close 13873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13876 NT_STATUS_OK
Close 13876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13879 NT_STATUS_OK
Close 13879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13882 NT_STATUS_OK
WriteX 13882 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13882 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13882 0 65536 65536 NT_STATUS_OK
WriteX 13882 65536 65536 65536 NT_STATUS_OK
WriteX 13882 131072 65536 65536 NT_STATUS_OK
WriteX 13882 196608 65536 65536 NT_STATUS_OK
WriteX 13882 262144 26634 26634 NT_STATUS_OK
Close 13882 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13887 NT_STATUS_OK
Close 13887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13888 NT_STATUS_OK
Close 13888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13889 NT_STATUS_OK
ReadX 13889 0 4096 4096 NT_STATUS_OK
Close 13889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13890 NT_STATUS_OK
ReadX 13890 0 4096 4096 NT_STATUS_OK
ReadX 13890 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13891 NT_STATUS_OK
Close 13891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13890 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13895 NT_STATUS_OK
Close 13895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13898 NT_STATUS_OK
Close 13898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13900 NT_STATUS_OK
Close 13900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13904 NT_STATUS_OK
Close 13904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13907 NT_STATUS_OK
Close 13907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13909 NT_STATUS_OK
Close 13909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13913 NT_STATUS_OK
Close 13913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13918 NT_STATUS_OK
Close 13918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13923 NT_STATUS_OK
Close 13923 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13928 NT_STATUS_OK
Close 13928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13933 NT_STATUS_OK
Close 13933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13938 NT_STATUS_OK
Close 13938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13942 NT_STATUS_OK
Close 13942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13947 NT_STATUS_OK
Close 13947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13952 NT_STATUS_OK
Close 13952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13955 NT_STATUS_OK
Close 13955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13957 NT_STATUS_OK
Close 13957 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13967 NT_STATUS_OK
Close 13967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13968 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13969 NT_STATUS_OK
ReadX 13969 0 4096 4096 NT_STATUS_OK
Close 13969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13970 NT_STATUS_OK
ReadX 13970 0 4096 4096 NT_STATUS_OK
Close 13970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13971 NT_STATUS_OK
ReadX 13971 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13981 NT_STATUS_OK
Close 13981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13982 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13983 NT_STATUS_OK
ReadX 13983 0 4096 4096 NT_STATUS_OK
Close 13983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13984 NT_STATUS_OK
ReadX 13984 0 4096 4096 NT_STATUS_OK
Close 13984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13985 NT_STATUS_OK
ReadX 13985 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13971 NT_STATUS_OK
Close 13985 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14014 0 4096 4096 NT_STATUS_OK
Close 14014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14015 NT_STATUS_OK
ReadX 14015 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 14015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14016 NT_STATUS_OK
ReadX 14016 0 4096 4096 NT_STATUS_OK
ReadX 14016 4096 4096 4096 NT_STATUS_OK
ReadX 14016 8192 4096 4096 NT_STATUS_OK
ReadX 14016 12288 4096 4096 NT_STATUS_OK
ReadX 14016 16384 4096 4096 NT_STATUS_OK
ReadX 14016 20480 4096 4096 NT_STATUS_OK
ReadX 14016 24576 4096 4096 NT_STATUS_OK
ReadX 14016 28672 4096 4096 NT_STATUS_OK
ReadX 14016 32768 4096 4096 NT_STATUS_OK
ReadX 14016 36864 4096 4096 NT_STATUS_OK
ReadX 14016 40960 4096 4096 NT_STATUS_OK
ReadX 14016 45056 4096 4096 NT_STATUS_OK
ReadX 14016 49152 4096 4096 NT_STATUS_OK
ReadX 14016 53248 4096 4096 NT_STATUS_OK
ReadX 14016 57344 4096 4096 NT_STATUS_OK
ReadX 14016 61440 4096 4096 NT_STATUS_OK
ReadX 14016 65536 4096 4096 NT_STATUS_OK
ReadX 14016 69632 4096 4096 NT_STATUS_OK
ReadX 14016 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14016 1004 NT_STATUS_OK
WriteX 14016 0 4096 4096 NT_STATUS_OK
Close 14016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14017 NT_STATUS_OK
SET_FILE_INFORMATION 14017 1004 NT_STATUS_OK
Close 14017 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14018 NT_STATUS_OK
ReadX 14018 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14019 NT_STATUS_OK
Close 14019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14022 NT_STATUS_OK
WriteX 14022 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14022 258 NT_STATUS_OK
WriteX 14022 0 65536 65536 NT_STATUS_OK
WriteX 14022 65536 19979 19979 NT_STATUS_OK
Close 14022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14023 NT_STATUS_OK
ReadX 14023 0 4096 4096 NT_STATUS_OK
WriteX 14023 0 4096 4096 NT_STATUS_OK
Flush 14023 NT_STATUS_OK
WriteX 14023 0 4096 4096 NT_STATUS_OK
Flush 14023 NT_STATUS_OK
QUERY_FILE_INFORMATION 14023 1004 NT_STATUS_OK
WriteX 14023 0 4096 4096 NT_STATUS_OK
Flush 14023 NT_STATUS_OK
WriteX 14023 0 4096 4096 NT_STATUS_OK
Flush 14023 NT_STATUS_OK
WriteX 14023 0 4096 4096 NT_STATUS_OK
Flush 14023 NT_STATUS_OK
SET_FILE_INFORMATION 14023 1004 NT_STATUS_OK
WriteX 14023 0 4096 4096 NT_STATUS_OK
Flush 14023 NT_STATUS_OK
Close 14023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14024 NT_STATUS_OK
ReadX 14024 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 14025 NT_STATUS_OK
ReadX 14025 0 4096 4096 NT_STATUS_OK
Close 14024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14026 NT_STATUS_OK
ReadX 14026 0 4096 4096 NT_STATUS_OK
Close 14026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14027 NT_STATUS_OK
ReadX 14027 0 4096 4096 NT_STATUS_OK
Close 14027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14028 NT_STATUS_OK
ReadX 14028 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14028 1004 NT_STATUS_OK
WriteX 14028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 14029 NT_STATUS_OK
Close 14029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 14025 NT_STATUS_OK
Close 14028 NT_STATUS_OK
Close 14018 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 14031 NT_STATUS_OK
Close 14031 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14034 NT_STATUS_OK
WriteX 14034 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14034 258 NT_STATUS_OK
WriteX 14034 0 65536 65536 NT_STATUS_OK
WriteX 14034 65536 17654 17654 NT_STATUS_OK
Close 14034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14035 NT_STATUS_OK
ReadX 14035 0 4096 4096 NT_STATUS_OK
WriteX 14035 0 4096 4096 NT_STATUS_OK
Flush 14035 NT_STATUS_OK
WriteX 14035 0 4096 4096 NT_STATUS_OK
Flush 14035 NT_STATUS_OK
QUERY_FILE_INFORMATION 14035 1004 NT_STATUS_OK
WriteX 14035 0 4096 4096 NT_STATUS_OK
Flush 14035 NT_STATUS_OK
WriteX 14035 0 4096 4096 NT_STATUS_OK
Flush 14035 NT_STATUS_OK
WriteX 14035 0 4096 4096 NT_STATUS_OK
Flush 14035 NT_STATUS_OK
SET_FILE_INFORMATION 14035 1004 NT_STATUS_OK
WriteX 14035 0 4096 4096 NT_STATUS_OK
Flush 14035 NT_STATUS_OK
Close 14035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14036 NT_STATUS_OK
SET_FILE_INFORMATION 14036 1004 NT_STATUS_OK
Close 14036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14037 NT_STATUS_OK
ReadX 14037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 14038 NT_STATUS_OK
Close 14038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 4096 4096 NT_STATUS_OK
ReadX 14040 4096 4096 4096 NT_STATUS_OK
ReadX 14040 8192 4096 4096 NT_STATUS_OK
ReadX 14040 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 14040 16384 4096 4096 NT_STATUS_OK
ReadX 14040 20480 4096 4096 NT_STATUS_OK
ReadX 14040 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 14037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14041 NT_STATUS_OK
ReadX 14041 0 4096 4096 NT_STATUS_OK
Close 14041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14042 NT_STATUS_OK
ReadX 14042 0 4096 4096 NT_STATUS_OK
Close 14042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14043 NT_STATUS_OK
ReadX 14043 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14043 1004 NT_STATUS_OK
WriteX 14043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 14044 NT_STATUS_OK
Close 14044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 14043 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 14046 NT_STATUS_OK
Close 14046 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14049 NT_STATUS_OK
WriteX 14049 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14049 258 NT_STATUS_OK
WriteX 14049 0 65536 65536 NT_STATUS_OK
WriteX 14049 65536 19490 19490 NT_STATUS_OK
Close 14049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14050 NT_STATUS_OK
ReadX 14050 0 4096 4096 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
QUERY_FILE_INFORMATION 14050 1004 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
SET_FILE_INFORMATION 14050 1004 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
Close 14050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14051 NT_STATUS_OK
SET_FILE_INFORMATION 14051 1004 NT_STATUS_OK
Close 14051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14052 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 14053 NT_STATUS_OK
Close 14053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14055 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14055 0 4096 4096 NT_STATUS_OK
Close 14055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14056 NT_STATUS_OK
ReadX 14056 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 14056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14057 NT_STATUS_OK
ReadX 14057 0 4096 4096 NT_STATUS_OK
ReadX 14057 4096 4096 4096 NT_STATUS_OK
ReadX 14057 8192 4096 4096 NT_STATUS_OK
ReadX 14057 12288 4096 4096 NT_STATUS_OK
ReadX 14057 16384 4096 4096 NT_STATUS_OK
ReadX 14057 20480 4096 4096 NT_STATUS_OK
ReadX 14057 24576 4096 4096 NT_STATUS_OK
ReadX 14057 28672 4096 4096 NT_STATUS_OK
ReadX 14057 32768 4096 4096 NT_STATUS_OK
ReadX 14057 36864 4096 4096 NT_STATUS_OK
ReadX 14057 40960 4096 4096 NT_STATUS_OK
ReadX 14057 45056 4096 4096 NT_STATUS_OK
ReadX 14057 49152 4096 4096 NT_STATUS_OK
ReadX 14057 53248 4096 4096 NT_STATUS_OK
ReadX 14057 57344 4096 4096 NT_STATUS_OK
ReadX 14057 61440 4096 4096 NT_STATUS_OK
ReadX 14057 65536 4096 4096 NT_STATUS_OK
ReadX 14057 69632 4096 4096 NT_STATUS_OK
ReadX 14057 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14057 1004 NT_STATUS_OK
WriteX 14057 0 4096 4096 NT_STATUS_OK
Close 14057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14058 NT_STATUS_OK
SET_FILE_INFORMATION 14058 1004 NT_STATUS_OK
Close 14058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14059 NT_STATUS_OK
ReadX 14059 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14060 NT_STATUS_OK
Close 14060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 14052 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14063 NT_STATUS_OK
WriteX 14063 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14063 258 NT_STATUS_OK
WriteX 14063 0 65536 65536 NT_STATUS_OK
WriteX 14063 65536 8866 8866 NT_STATUS_OK
Close 14063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14064 NT_STATUS_OK
ReadX 14064 0 4096 4096 NT_STATUS_OK
WriteX 14064 0 4096 4096 NT_STATUS_OK
Flush 14064 NT_STATUS_OK
SET_FILE_INFORMATION 14064 1004 NT_STATUS_OK
WriteX 14064 0 4096 4096 NT_STATUS_OK
Flush 14064 NT_STATUS_OK
Close 14064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14065 NT_STATUS_OK
ReadX 14065 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 14065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14066 NT_STATUS_OK
ReadX 14066 0 4096 4096 NT_STATUS_OK
Close 14066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 4096 4096 NT_STATUS_OK
Close 14067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14068 NT_STATUS_OK
ReadX 14068 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14068 1004 NT_STATUS_OK
WriteX 14068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 14069 NT_STATUS_OK
Close 14069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 14068 NT_STATUS_OK
Close 14059 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 14071 NT_STATUS_OK
Close 14071 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14074 NT_STATUS_OK
WriteX 14074 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14074 258 NT_STATUS_OK
WriteX 14074 0 65536 65536 NT_STATUS_OK
WriteX 14074 65536 9298 9298 NT_STATUS_OK
Close 14074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14075 NT_STATUS_OK
ReadX 14075 0 4096 4096 NT_STATUS_OK
WriteX 14075 0 4096 4096 NT_STATUS_OK
Flush 14075 NT_STATUS_OK
SET_FILE_INFORMATION 14075 1004 NT_STATUS_OK
WriteX 14075 0 4096 4096 NT_STATUS_OK
Flush 14075 NT_STATUS_OK
Close 14075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14076 NT_STATUS_OK
SET_FILE_INFORMATION 14076 1004 NT_STATUS_OK
Close 14076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14077 NT_STATUS_OK
ReadX 14077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 14078 NT_STATUS_OK
Close 14078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 14081 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14081 0 4096 4096 NT_STATUS_OK
Close 14081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 14082 NT_STATUS_OK
ReadX 14082 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14082 4096 4096 4096 NT_STATUS_OK
ReadX 14082 8192 4096 4096 NT_STATUS_OK
ReadX 14082 12288 4096 4096 NT_STATUS_OK
ReadX 14082 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 14077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14083 NT_STATUS_OK
ReadX 14083 0 4096 4096 NT_STATUS_OK
Close 14083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14084 NT_STATUS_OK
ReadX 14084 0 4096 4096 NT_STATUS_OK
Close 14084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14085 NT_STATUS_OK
ReadX 14085 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14085 1004 NT_STATUS_OK
WriteX 14085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 14086 NT_STATUS_OK
Close 14086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 14082 NT_STATUS_OK
Close 14085 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 14088 NT_STATUS_OK
Close 14088 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14091 NT_STATUS_OK
WriteX 14091 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14091 258 NT_STATUS_OK
WriteX 14091 0 65536 65536 NT_STATUS_OK
WriteX 14091 65536 11540 11540 NT_STATUS_OK
Close 14091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14092 NT_STATUS_OK
ReadX 14092 0 4096 4096 NT_STATUS_OK
WriteX 14092 0 4096 4096 NT_STATUS_OK
Flush 14092 NT_STATUS_OK
SET_FILE_INFORMATION 14092 1004 NT_STATUS_OK
WriteX 14092 0 4096 4096 NT_STATUS_OK
Flush 14092 NT_STATUS_OK
Close 14092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14093 NT_STATUS_OK
SET_FILE_INFORMATION 14093 1004 NT_STATUS_OK
Close 14093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14094 NT_STATUS_OK
ReadX 14094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 14095 NT_STATUS_OK
Close 14095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9815 NT_STATUS_OK
ReadX 9815 61440 4096 4096 NT_STATUS_OK
ReadX 9815 126976 4096 4096 NT_STATUS_OK
WriteX 9815 0 65536 65536 NT_STATUS_OK
WriteX 9815 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9816 NT_STATUS_OK
ReadX 9816 61440 4096 4096 NT_STATUS_OK
ReadX 9816 126976 4096 4096 NT_STATUS_OK
ReadX 9816 192512 4096 4096 NT_STATUS_OK
ReadX 9816 258048 4096 4096 NT_STATUS_OK
WriteX 9816 0 65536 65536 NT_STATUS_OK
WriteX 9816 65536 65536 65536 NT_STATUS_OK
WriteX 9816 131072 65536 65536 NT_STATUS_OK
WriteX 9816 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9817 NT_STATUS_OK
ReadX 9817 61440 4096 4096 NT_STATUS_OK
ReadX 9817 126976 4096 4096 NT_STATUS_OK
ReadX 9817 192512 4096 4096 NT_STATUS_OK
ReadX 9817 258048 4096 4096 NT_STATUS_OK
ReadX 9817 323584 4096 4096 NT_STATUS_OK
ReadX 9817 389120 4096 4096 NT_STATUS_OK
ReadX 9817 454656 4096 4096 NT_STATUS_OK
ReadX 9817 520192 4096 4096 NT_STATUS_OK
WriteX 9817 0 65536 65536 NT_STATUS_OK
WriteX 9817 65536 65536 65536 NT_STATUS_OK
WriteX 9817 131072 65536 65536 NT_STATUS_OK
WriteX 9817 196608 65536 65536 NT_STATUS_OK
WriteX 9817 262144 65536 65536 NT_STATUS_OK
WriteX 9817 327680 65536 65536 NT_STATUS_OK
WriteX 9817 393216 65536 65536 NT_STATUS_OK
WriteX 9817 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 9818 NT_STATUS_OK
ReadX 9818 0 4096 4096 NT_STATUS_OK
ReadX 9818 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 9819 NT_STATUS_OK
WriteX 9819 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9819 258 NT_STATUS_OK
WriteX 9819 0 53 53 NT_STATUS_OK
Close 9819 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 9820 NT_STATUS_OK
Close 9820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 14094 NT_STATUS_OK
Close 14040 NT_STATUS_OK
Close 9815 NT_STATUS_OK
Close 9816 NT_STATUS_OK
Close 9817 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 9822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9818 8192 4096 4096 NT_STATUS_OK
ReadX 9818 12288 4096 4096 NT_STATUS_OK
WriteX 9822 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9822 258 NT_STATUS_OK
ReadX 9818 16384 4096 4096 NT_STATUS_OK
ReadX 9818 20480 4096 4096 NT_STATUS_OK
WriteX 9822 0 15360 15360 NT_STATUS_OK
Close 9822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 9823 NT_STATUS_OK
ReadX 9823 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9823 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9823 1004 NT_STATUS_OK
WriteX 9823 0 4096 4096 NT_STATUS_OK
Close 9823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 9824 NT_STATUS_OK
Close 9824 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 9826 NT_STATUS_OK
ReadX 9826 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 9827 NT_STATUS_OK
Close 9827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 9826 4096 4096 4096 NT_STATUS_OK
ReadX 9826 8192 4096 4096 NT_STATUS_OK
ReadX 9826 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 9829 NT_STATUS_OK
ReadX 9829 0 4096 4096 NT_STATUS_OK
ReadX 9829 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 9830 NT_STATUS_OK
ReadX 9830 0 4096 4096 NT_STATUS_OK
ReadX 9830 4096 4096 4096 NT_STATUS_OK
ReadX 9830 8192 4096 4096 NT_STATUS_OK
Close 9829 NT_STATUS_OK
Close 9830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 9831 NT_STATUS_OK
WriteX 9831 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9831 258 NT_STATUS_OK
WriteX 9831 0 15360 15360 NT_STATUS_OK
Close 9831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 9832 NT_STATUS_OK
ReadX 9832 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9832 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9832 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 9833 NT_STATUS_OK
Close 9833 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 9835 NT_STATUS_OK
ReadX 9835 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 9836 NT_STATUS_OK
SET_FILE_INFORMATION 9836 1004 NT_STATUS_OK
Close 9836 NT_STATUS_OK
WriteX 9832 0 4096 4096 NT_STATUS_OK
Close 9832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 9837 NT_STATUS_OK
Close 9837 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 9839 NT_STATUS_OK
ReadX 9839 0 4096 4096 NT_STATUS_OK
ReadX 9839 4096 4096 4096 NT_STATUS_OK
ReadX 9839 8192 4096 4096 NT_STATUS_OK
ReadX 9839 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 9839 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9839 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 9840 NT_STATUS_OK
ReadX 9840 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 9841 NT_STATUS_OK
WriteX 9841 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9841 258 NT_STATUS_OK
WriteX 9841 0 53 53 NT_STATUS_OK
Close 9841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 9842 NT_STATUS_OK
Close 9842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 9844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9840 4096 4096 4096 NT_STATUS_OK
ReadX 9840 8192 4096 4096 NT_STATUS_OK
ReadX 9840 12288 4096 4096 NT_STATUS_OK
WriteX 9844 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9844 258 NT_STATUS_OK
WriteX 9844 0 12006 12006 NT_STATUS_OK
Close 9844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 9845 NT_STATUS_OK
ReadX 9845 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9845 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9845 1004 NT_STATUS_OK
WriteX 9845 0 4096 4096 NT_STATUS_OK
Close 9845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 9846 NT_STATUS_OK
Close 9846 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 9848 NT_STATUS_OK
ReadX 9848 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 9849 NT_STATUS_OK
Close 9849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 9848 4096 4096 4096 NT_STATUS_OK
ReadX 9848 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 9851 NT_STATUS_OK
WriteX 9851 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9851 258 NT_STATUS_OK
WriteX 9851 0 11991 11991 NT_STATUS_OK
Close 9851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 9852 NT_STATUS_OK
ReadX 9852 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9852 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9852 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 9840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 9853 NT_STATUS_OK
Close 9853 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 9855 NT_STATUS_OK
ReadX 9855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 9856 NT_STATUS_OK
SET_FILE_INFORMATION 9856 1004 NT_STATUS_OK
Close 9856 NT_STATUS_OK
WriteX 9852 0 4096 4096 NT_STATUS_OK
Close 9852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 9857 NT_STATUS_OK
Close 9857 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 9859 NT_STATUS_OK
ReadX 9859 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 9860 NT_STATUS_OK
Close 9860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 9859 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9859 1004 NT_STATUS_OK
ReadX 9859 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 9859 1004 NT_STATUS_OK
WriteX 9859 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 9859 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9859 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9859 1004 NT_STATUS_OK
Close 9835 NT_STATUS_OK
WriteX 9839 0 19054 19054 NT_STATUS_OK
WriteX 9859 0 12288 12288 NT_STATUS_OK
Close 9855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 9862 NT_STATUS_OK
Close 9862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 9839 NT_STATUS_OK
Close 9859 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 9864 NT_STATUS_OK
Close 9864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9866 NT_STATUS_OK
ReadX 9866 0 61440 61440 NT_STATUS_OK
ReadX 9866 61440 4096 4096 NT_STATUS_OK
ReadX 9866 65536 61440 61440 NT_STATUS_OK
ReadX 9866 126976 4096 4096 NT_STATUS_OK
ReadX 9866 131072 61440 61440 NT_STATUS_OK
ReadX 9866 192512 4096 4096 NT_STATUS_OK
ReadX 9866 196608 61440 61440 NT_STATUS_OK
ReadX 9866 258048 4096 4096 NT_STATUS_OK
ReadX 9866 262144 61440 61440 NT_STATUS_OK
ReadX 9866 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9867 NT_STATUS_OK
ReadX 9867 0 61440 61440 NT_STATUS_OK
ReadX 9867 61440 4096 4096 NT_STATUS_OK
ReadX 9867 65536 61440 61440 NT_STATUS_OK
ReadX 9867 126976 4096 4096 NT_STATUS_OK
ReadX 9867 131072 61440 61440 NT_STATUS_OK
ReadX 9867 192512 4096 4096 NT_STATUS_OK
ReadX 9867 196608 61440 61440 NT_STATUS_OK
ReadX 9867 258048 4096 4096 NT_STATUS_OK
ReadX 9867 262144 61440 61440 NT_STATUS_OK
ReadX 9867 323584 4096 4096 NT_STATUS_OK
ReadX 9867 327680 61440 61440 NT_STATUS_OK
ReadX 9867 389120 4096 4096 NT_STATUS_OK
ReadX 9867 393216 61440 61440 NT_STATUS_OK
ReadX 9867 454656 4096 4096 NT_STATUS_OK
ReadX 9867 458752 61440 61440 NT_STATUS_OK
ReadX 9867 520192 4096 4096 NT_STATUS_OK
ReadX 9867 524288 61440 61440 NT_STATUS_OK
ReadX 9867 585728 4096 4096 NT_STATUS_OK
ReadX 9867 589824 61440 61440 NT_STATUS_OK
ReadX 9867 651264 4096 4096 NT_STATUS_OK
ReadX 9867 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9868 NT_STATUS_OK
ReadX 9868 0 61440 61440 NT_STATUS_OK
ReadX 9868 61440 4096 4096 NT_STATUS_OK
ReadX 9868 65536 61440 61440 NT_STATUS_OK
ReadX 9868 126976 4096 4096 NT_STATUS_OK
ReadX 9868 131072 61440 61440 NT_STATUS_OK
ReadX 9868 192512 4096 4096 NT_STATUS_OK
ReadX 9868 196608 61440 61440 NT_STATUS_OK
ReadX 9868 258048 4096 4096 NT_STATUS_OK
ReadX 9868 262144 61440 61440 NT_STATUS_OK
ReadX 9868 323584 4096 4096 NT_STATUS_OK
ReadX 9868 327680 61440 61440 NT_STATUS_OK
ReadX 9868 389120 4096 4096 NT_STATUS_OK
ReadX 9868 393216 61440 61440 NT_STATUS_OK
ReadX 9868 454656 4096 4096 NT_STATUS_OK
ReadX 9868 458752 61440 61440 NT_STATUS_OK
ReadX 9868 520192 4096 4096 NT_STATUS_OK
ReadX 9868 524288 61440 61440 NT_STATUS_OK
ReadX 9868 585728 4096 4096 NT_STATUS_OK
ReadX 9868 589824 61440 61440 NT_STATUS_OK
ReadX 9868 651264 4096 4096 NT_STATUS_OK
ReadX 9868 655360 61440 61440 NT_STATUS_OK
ReadX 9868 716800 4096 4096 NT_STATUS_OK
ReadX 9868 720896 61440 61440 NT_STATUS_OK
ReadX 9868 782336 4096 4096 NT_STATUS_OK
ReadX 9868 786432 61440 61440 NT_STATUS_OK
ReadX 9868 847872 4096 4096 NT_STATUS_OK
ReadX 9868 851968 61440 61440 NT_STATUS_OK
ReadX 9868 913408 4096 4096 NT_STATUS_OK
ReadX 9868 917504 61440 61440 NT_STATUS_OK
ReadX 9868 978944 4096 4096 NT_STATUS_OK
ReadX 9868 983040 61440 61440 NT_STATUS_OK
ReadX 9868 1044480 4096 4096 NT_STATUS_OK
ReadX 9868 1048576 61440 61440 NT_STATUS_OK
ReadX 9868 1110016 4096 4096 NT_STATUS_OK
ReadX 9868 1114112 61440 61440 NT_STATUS_OK
ReadX 9868 1175552 4096 4096 NT_STATUS_OK
ReadX 9868 1179648 61440 61440 NT_STATUS_OK
ReadX 9868 1241088 4096 4096 NT_STATUS_OK
ReadX 9868 1245184 61440 61440 NT_STATUS_OK
ReadX 9868 1306624 4096 4096 NT_STATUS_OK
ReadX 9868 1310720 61440 61440 NT_STATUS_OK
ReadX 9868 1372160 4096 4096 NT_STATUS_OK
ReadX 9868 1376256 61440 61440 NT_STATUS_OK
ReadX 9868 1437696 4096 4096 NT_STATUS_OK
ReadX 9868 1441792 61440 61440 NT_STATUS_OK
ReadX 9868 1503232 4096 4096 NT_STATUS_OK
ReadX 9868 1507328 61440 61440 NT_STATUS_OK
ReadX 9868 1568768 4096 4096 NT_STATUS_OK
ReadX 9868 1572864 61440 61440 NT_STATUS_OK
ReadX 9868 1634304 4096 4096 NT_STATUS_OK
ReadX 9868 1638400 61440 61440 NT_STATUS_OK
ReadX 9868 1699840 4096 4096 NT_STATUS_OK
ReadX 9868 1703936 61440 61440 NT_STATUS_OK
ReadX 9868 1765376 4096 4096 NT_STATUS_OK
ReadX 9868 1769472 61440 61440 NT_STATUS_OK
ReadX 9868 1830912 4096 4096 NT_STATUS_OK
ReadX 9868 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9869 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9870 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9870 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9871 NT_STATUS_OK
ReadX 9871 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9872 NT_STATUS_OK
ReadX 9872 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9873 NT_STATUS_OK
ReadX 9873 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 9874 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 9875 NT_STATUS_OK
QUERY_FILE_INFORMATION 9875 1004 NT_STATUS_OK
WriteX 9875 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9875 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 9876 NT_STATUS_OK
Close 9876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 9877 NT_STATUS_OK
WriteX 9877 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9877 258 NT_STATUS_OK
WriteX 9877 0 491 491 NT_STATUS_OK
Close 9877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 9878 NT_STATUS_OK
ReadX 9878 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 9875 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 9880 NT_STATUS_OK
Close 9880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9881 NT_STATUS_OK
WriteX 9881 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9881 258 NT_STATUS_OK
WriteX 9881 0 543 543 NT_STATUS_OK
Close 9881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9882 NT_STATUS_OK
ReadX 9882 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 9866 NT_STATUS_OK
Close 9867 NT_STATUS_OK
Close 9868 NT_STATUS_OK
Close 9882 NT_STATUS_OK
Close 9870 NT_STATUS_OK
Close 9871 NT_STATUS_OK
Close 9872 NT_STATUS_OK
Close 9873 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 9875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9885 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9886 NT_STATUS_OK
ReadX 9886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9887 NT_STATUS_OK
ReadX 9887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9888 NT_STATUS_OK
ReadX 9888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9889 NT_STATUS_OK
ReadX 9889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9890 NT_STATUS_OK
ReadX 9890 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 9894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9895 NT_STATUS_OK
QUERY_FILE_INFORMATION 9895 1004 NT_STATUS_OK
WriteX 9895 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9895 258 NT_STATUS_OK
WriteX 9895 0 2048 2048 NT_STATUS_OK
Close 9895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9896 NT_STATUS_OK
ReadX 9896 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 9896 0 4096 4096 NT_STATUS_OK
Flush 9896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 9896 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 9900 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 9901 NT_STATUS_OK
WriteX 9901 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9901 258 NT_STATUS_OK
WriteX 9901 0 2048 2048 NT_STATUS_OK
Close 9901 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 9902 NT_STATUS_OK
ReadX 9902 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 9906 NT_STATUS_OK
Close 9906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 9907 NT_STATUS_OK
WriteX 9907 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9907 258 NT_STATUS_OK
WriteX 9907 0 2048 2048 NT_STATUS_OK
Close 9907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 9908 NT_STATUS_OK
ReadX 9908 0 2048 2048 NT_STATUS_OK
ReadX 9886 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 9890 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 9902 0 4096 4096 NT_STATUS_OK
WriteX 9886 0 8192 8192 NT_STATUS_OK
WriteX 9887 0 4096 4096 NT_STATUS_OK
WriteX 9888 0 4096 4096 NT_STATUS_OK
ReadX 9902 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9911 NT_STATUS_OK
ReadX 9911 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 9896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9912 NT_STATUS_OK
QUERY_FILE_INFORMATION 9912 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 9912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 9911 NT_STATUS_OK
Close 9887 NT_STATUS_OK
Close 9888 NT_STATUS_OK
Close 9889 NT_STATUS_OK
Close 9902 NT_STATUS_OK
Close 9886 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9914 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9915 NT_STATUS_OK
ReadX 9915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9916 NT_STATUS_OK
ReadX 9916 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9917 NT_STATUS_OK
ReadX 9917 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9918 NT_STATUS_OK
ReadX 9918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9919 NT_STATUS_OK
ReadX 9919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9920 NT_STATUS_OK
ReadX 9920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9921 NT_STATUS_OK
ReadX 9921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9922 NT_STATUS_OK
ReadX 9922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9923 NT_STATUS_OK
ReadX 9923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9924 NT_STATUS_OK
ReadX 9924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9925 NT_STATUS_OK
ReadX 9925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9926 NT_STATUS_OK
ReadX 9926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9927 NT_STATUS_OK
ReadX 9927 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 9931 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9932 NT_STATUS_OK
QUERY_FILE_INFORMATION 9932 1004 NT_STATUS_OK
WriteX 9932 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9932 258 NT_STATUS_OK
WriteX 9932 0 2048 2048 NT_STATUS_OK
Close 9932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9933 NT_STATUS_OK
ReadX 9933 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9935 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9935 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 9939 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9940 NT_STATUS_OK
QUERY_FILE_INFORMATION 9940 1004 NT_STATUS_OK
WriteX 9940 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9940 258 NT_STATUS_OK
WriteX 9940 0 2048 2048 NT_STATUS_OK
Close 9940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9941 NT_STATUS_OK
ReadX 9941 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 9933 0 4096 4096 NT_STATUS_OK
Flush 9933 NT_STATUS_OK
WriteX 9941 0 4096 4096 NT_STATUS_OK
Flush 9941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 9933 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 9941 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9935 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 9942 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 9943 NT_STATUS_OK
WriteX 9943 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9943 258 NT_STATUS_OK
WriteX 9943 0 4096 4096 NT_STATUS_OK
Close 9943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 9944 NT_STATUS_OK
ReadX 9944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 9945 NT_STATUS_OK
Close 9945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 9946 NT_STATUS_OK
WriteX 9946 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9946 258 NT_STATUS_OK
WriteX 9946 0 4096 4096 NT_STATUS_OK
Close 9946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 9947 NT_STATUS_OK
ReadX 9947 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 9947 0 4096 4096 NT_STATUS_OK
Close 9944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 9927 NT_STATUS_OK
Close 9921 NT_STATUS_OK
Close 9935 NT_STATUS_OK
Close 9924 NT_STATUS_OK
Close 9925 NT_STATUS_OK
Close 9926 NT_STATUS_OK
Close 9922 NT_STATUS_OK
Close 9915 NT_STATUS_OK
Close 9916 NT_STATUS_OK
Close 9919 NT_STATUS_OK
Close 9920 NT_STATUS_OK
Close 9917 NT_STATUS_OK
Close 9918 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 9947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 9950 NT_STATUS_OK
Close 9950 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 9952 NT_STATUS_OK
ReadX 9952 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 9953 NT_STATUS_OK
Close 9953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9954 NT_STATUS_OK
WriteX 9954 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9954 258 NT_STATUS_OK
WriteX 9954 0 2048 2048 NT_STATUS_OK
Close 9954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9955 NT_STATUS_OK
ReadX 9955 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9956 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9957 NT_STATUS_OK
ReadX 9957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9958 NT_STATUS_OK
ReadX 9958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9959 NT_STATUS_OK
ReadX 9959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9960 NT_STATUS_OK
ReadX 9960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9961 NT_STATUS_OK
ReadX 9961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9962 NT_STATUS_OK
ReadX 9962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9963 NT_STATUS_OK
ReadX 9963 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9964 NT_STATUS_OK
ReadX 9964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9965 NT_STATUS_OK
ReadX 9965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9966 NT_STATUS_OK
ReadX 9966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9967 NT_STATUS_OK
ReadX 9967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9968 NT_STATUS_OK
ReadX 9968 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 9933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9969 NT_STATUS_OK
QUERY_FILE_INFORMATION 9969 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 9969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 9952 NT_STATUS_OK
Close 9955 NT_STATUS_OK
Close 9967 NT_STATUS_OK
Close 9962 NT_STATUS_OK
Close 9963 NT_STATUS_OK
Close 9964 NT_STATUS_OK
Close 9965 NT_STATUS_OK
Close 9966 NT_STATUS_OK
Close 9968 NT_STATUS_OK
Close 9956 NT_STATUS_OK
Close 9957 NT_STATUS_OK
Close 9960 NT_STATUS_OK
Close 9961 NT_STATUS_OK
Close 9958 NT_STATUS_OK
Close 9959 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 9941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9971 NT_STATUS_OK
QUERY_FILE_INFORMATION 9971 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 9971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9973 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9974 NT_STATUS_OK
ReadX 9974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9975 NT_STATUS_OK
ReadX 9975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9976 NT_STATUS_OK
ReadX 9976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9977 NT_STATUS_OK
ReadX 9977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9978 NT_STATUS_OK
ReadX 9978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9979 NT_STATUS_OK
ReadX 9979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9980 NT_STATUS_OK
ReadX 9980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9981 NT_STATUS_OK
ReadX 9981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9982 NT_STATUS_OK
ReadX 9982 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9983 NT_STATUS_OK
ReadX 9983 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9984 NT_STATUS_OK
ReadX 9984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9985 NT_STATUS_OK
ReadX 9985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9986 NT_STATUS_OK
ReadX 9986 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 9990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9991 NT_STATUS_OK
QUERY_FILE_INFORMATION 9991 1004 NT_STATUS_OK
WriteX 9991 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9991 258 NT_STATUS_OK
WriteX 9991 0 2048 2048 NT_STATUS_OK
Close 9991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9992 NT_STATUS_OK
ReadX 9992 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9993 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9994 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9995 NT_STATUS_OK
ReadX 9995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9996 NT_STATUS_OK
ReadX 9996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9997 NT_STATUS_OK
ReadX 9997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9998 NT_STATUS_OK
ReadX 9998 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10002 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10003 NT_STATUS_OK
QUERY_FILE_INFORMATION 10003 1004 NT_STATUS_OK
WriteX 10003 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10003 258 NT_STATUS_OK
WriteX 10003 0 2048 2048 NT_STATUS_OK
Close 10003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10004 NT_STATUS_OK
ReadX 10004 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10005 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10006 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10006 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10011 NT_STATUS_OK
QUERY_FILE_INFORMATION 10011 1004 NT_STATUS_OK
WriteX 10011 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10011 258 NT_STATUS_OK
WriteX 10011 0 2048 2048 NT_STATUS_OK
Close 10011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10012 NT_STATUS_OK
ReadX 10012 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 9992 0 4096 4096 NT_STATUS_OK
Flush 9992 NT_STATUS_OK
WriteX 10004 0 4096 4096 NT_STATUS_OK
Flush 10004 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 9992 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10004 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9994 4096 16384 16384 NT_STATUS_OK
ReadX 9974 4096 16384 16384 NT_STATUS_OK
ReadX 10006 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10014 NT_STATUS_OK
ReadX 10014 0 2048 2048 NT_STATUS_OK
WriteX 10014 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 9992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10015 NT_STATUS_OK
QUERY_FILE_INFORMATION 10015 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10014 NT_STATUS_OK
Close 9998 NT_STATUS_OK
Close 9986 NT_STATUS_OK
Close 9978 NT_STATUS_OK
Close 9994 NT_STATUS_OK
Close 9995 NT_STATUS_OK
Close 9996 NT_STATUS_OK
Close 9997 NT_STATUS_OK
Close 9985 NT_STATUS_OK
Close 10006 NT_STATUS_OK
Close 9980 NT_STATUS_OK
Close 9983 NT_STATUS_OK
Close 9984 NT_STATUS_OK
Close 9981 NT_STATUS_OK
Close 9982 NT_STATUS_OK
Close 9974 NT_STATUS_OK
Close 9975 NT_STATUS_OK
Close 9976 NT_STATUS_OK
Close 9977 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10017 NT_STATUS_OK
QUERY_FILE_INFORMATION 10017 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10019 NT_STATUS_OK
QUERY_FILE_INFORMATION 10019 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10021 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10022 NT_STATUS_OK
ReadX 10022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10023 NT_STATUS_OK
ReadX 10023 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10024 NT_STATUS_OK
ReadX 10024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10025 NT_STATUS_OK
ReadX 10025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10026 NT_STATUS_OK
ReadX 10026 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10022 4096 16384 16384 NT_STATUS_OK
WriteX 10022 0 4096 4096 NT_STATUS_OK
WriteX 10023 0 4096 4096 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
WriteX 10025 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10027 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10028 NT_STATUS_OK
ReadX 10028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10029 NT_STATUS_OK
ReadX 10029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10030 NT_STATUS_OK
ReadX 10030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10031 NT_STATUS_OK
ReadX 10031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10032 NT_STATUS_OK
ReadX 10032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10033 NT_STATUS_OK
ReadX 10033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10034 NT_STATUS_OK
ReadX 10034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10035 NT_STATUS_OK
ReadX 10035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10036 NT_STATUS_OK
ReadX 10036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10037 NT_STATUS_OK
ReadX 10037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10038 NT_STATUS_OK
ReadX 10038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10039 NT_STATUS_OK
ReadX 10039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10040 NT_STATUS_OK
ReadX 10040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10041 NT_STATUS_OK
ReadX 10041 0 8192 8192 NT_STATUS_OK
ReadX 10028 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10042 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10042 0 4096 4096 NT_STATUS_OK
ReadX 10042 4096 4096 4096 NT_STATUS_OK
ReadX 10042 8192 4096 4096 NT_STATUS_OK
WriteX 10028 0 4096 4096 NT_STATUS_OK
WriteX 10029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10043 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10043 0 4096 4096 NT_STATUS_OK
ReadX 10043 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10022 0 4096 4096 NT_STATUS_OK
WriteX 10023 0 4096 4096 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
WriteX 10025 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10047 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10048 NT_STATUS_OK
QUERY_FILE_INFORMATION 10048 1004 NT_STATUS_OK
WriteX 10048 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10048 258 NT_STATUS_OK
WriteX 10048 0 2048 2048 NT_STATUS_OK
Close 10048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10049 NT_STATUS_OK
ReadX 10049 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10049 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10049 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10050 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10051 NT_STATUS_OK
ReadX 10051 0 4096 4096 NT_STATUS_OK
ReadX 10051 4096 4096 4096 NT_STATUS_OK
WriteX 10051 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10049 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10052 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10053 NT_STATUS_OK
ReadX 10053 0 4096 4096 NT_STATUS_OK
ReadX 10053 4096 4096 4096 NT_STATUS_OK
WriteX 10053 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10054 NT_STATUS_OK
QUERY_FILE_INFORMATION 10054 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10041 NT_STATUS_OK
Close 10026 NT_STATUS_OK
Close 10022 NT_STATUS_OK
Close 10023 NT_STATUS_OK
Close 10024 NT_STATUS_OK
Close 10025 NT_STATUS_OK
Close 10034 NT_STATUS_OK
Close 10039 NT_STATUS_OK
Close 10035 NT_STATUS_OK
Close 10036 NT_STATUS_OK
Close 10037 NT_STATUS_OK
Close 10038 NT_STATUS_OK
Close 10040 NT_STATUS_OK
Close 10028 NT_STATUS_OK
Close 10029 NT_STATUS_OK
Close 10032 NT_STATUS_OK
Close 10033 NT_STATUS_OK
Close 10030 NT_STATUS_OK
Close 10031 NT_STATUS_OK
Close 10053 NT_STATUS_OK
Close 10042 NT_STATUS_OK
Close 10043 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10056 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10056 0 4096 4096 NT_STATUS_OK
ReadX 10056 4096 4096 4096 NT_STATUS_OK
ReadX 10056 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10057 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10058 NT_STATUS_OK
ReadX 10058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10059 NT_STATUS_OK
ReadX 10059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10060 NT_STATUS_OK
ReadX 10060 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10061 NT_STATUS_OK
ReadX 10061 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10062 NT_STATUS_OK
ReadX 10062 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10063 NT_STATUS_OK
ReadX 10063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10064 NT_STATUS_OK
ReadX 10064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10065 NT_STATUS_OK
ReadX 10065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10066 NT_STATUS_OK
ReadX 10066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10067 NT_STATUS_OK
ReadX 10067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10068 NT_STATUS_OK
ReadX 10068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10069 NT_STATUS_OK
ReadX 10069 0 4096 4096 NT_STATUS_OK
ReadX 10057 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10073 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10074 NT_STATUS_OK
QUERY_FILE_INFORMATION 10074 1004 NT_STATUS_OK
WriteX 10074 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10074 258 NT_STATUS_OK
WriteX 10074 0 2048 2048 NT_STATUS_OK
Close 10074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10075 NT_STATUS_OK
ReadX 10075 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10075 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10079 NT_STATUS_OK
Close 10079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10080 NT_STATUS_OK
QUERY_FILE_INFORMATION 10080 1004 NT_STATUS_OK
WriteX 10080 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10080 258 NT_STATUS_OK
WriteX 10080 0 2048 2048 NT_STATUS_OK
Close 10080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10081 NT_STATUS_OK
ReadX 10081 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10081 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10064 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10082 NT_STATUS_OK
QUERY_FILE_INFORMATION 10082 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10068 NT_STATUS_OK
Close 10063 NT_STATUS_OK
Close 10069 NT_STATUS_OK
Close 10057 NT_STATUS_OK
Close 10058 NT_STATUS_OK
Close 10061 NT_STATUS_OK
Close 10062 NT_STATUS_OK
Close 10059 NT_STATUS_OK
Close 10060 NT_STATUS_OK
Close 10064 NT_STATUS_OK
Close 10065 NT_STATUS_OK
Close 10066 NT_STATUS_OK
Close 10067 NT_STATUS_OK
Close 10056 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10084 NT_STATUS_OK
QUERY_FILE_INFORMATION 10084 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10086 NT_STATUS_OK
ReadX 10086 61440 4096 4096 NT_STATUS_OK
ReadX 10086 126976 4096 4096 NT_STATUS_OK
WriteX 10086 0 65536 65536 NT_STATUS_OK
WriteX 10086 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10087 NT_STATUS_OK
ReadX 10087 61440 4096 4096 NT_STATUS_OK
ReadX 10087 126976 4096 4096 NT_STATUS_OK
ReadX 10087 192512 4096 4096 NT_STATUS_OK
ReadX 10087 258048 4096 4096 NT_STATUS_OK
WriteX 10087 0 65536 65536 NT_STATUS_OK
WriteX 10087 65536 65536 65536 NT_STATUS_OK
WriteX 10087 131072 65536 65536 NT_STATUS_OK
WriteX 10087 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10088 NT_STATUS_OK
ReadX 10088 61440 4096 4096 NT_STATUS_OK
ReadX 10088 126976 4096 4096 NT_STATUS_OK
ReadX 10088 192512 4096 4096 NT_STATUS_OK
ReadX 10088 258048 4096 4096 NT_STATUS_OK
ReadX 10088 323584 4096 4096 NT_STATUS_OK
ReadX 10088 389120 4096 4096 NT_STATUS_OK
ReadX 10088 454656 4096 4096 NT_STATUS_OK
ReadX 10088 520192 4096 4096 NT_STATUS_OK
WriteX 10088 0 65536 65536 NT_STATUS_OK
WriteX 10088 65536 65536 65536 NT_STATUS_OK
WriteX 10088 131072 65536 65536 NT_STATUS_OK
WriteX 10088 196608 65536 65536 NT_STATUS_OK
WriteX 10088 262144 65536 65536 NT_STATUS_OK
WriteX 10088 327680 65536 65536 NT_STATUS_OK
WriteX 10088 393216 65536 65536 NT_STATUS_OK
WriteX 10088 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10089 NT_STATUS_OK
ReadX 10089 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10089 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10089 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10089 8192 4096 4096 NT_STATUS_OK
ReadX 10089 12288 4096 4096 NT_STATUS_OK
ReadX 10089 16384 4096 4096 NT_STATUS_OK
ReadX 10089 20480 4096 4096 NT_STATUS_OK
ReadX 10089 24576 4096 4096 NT_STATUS_OK
ReadX 10089 28672 4096 4096 NT_STATUS_OK
ReadX 10089 32768 4096 4096 NT_STATUS_OK
ReadX 10089 36864 4096 4096 NT_STATUS_OK
ReadX 10089 40960 4096 4096 NT_STATUS_OK
ReadX 10089 45056 4096 4096 NT_STATUS_OK
ReadX 10089 49152 4096 4096 NT_STATUS_OK
ReadX 10089 53248 4096 4096 NT_STATUS_OK
ReadX 10089 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10089 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10090 NT_STATUS_OK
Close 10090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10086 NT_STATUS_OK
Close 10087 NT_STATUS_OK
Close 10088 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10092 NT_STATUS_OK
WriteX 10092 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10092 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10092 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10092 1004 NT_STATUS_OK
WriteX 10092 0 57088 57088 NT_STATUS_OK
WriteX 10092 0 4096 4096 NT_STATUS_OK
Flush 10092 NT_STATUS_OK
Close 10089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10093 NT_STATUS_OK
SET_FILE_INFORMATION 10093 1004 NT_STATUS_OK
Close 10093 NT_STATUS_OK
SET_FILE_INFORMATION 10092 1004 NT_STATUS_OK
WriteX 10092 0 4096 4096 NT_STATUS_OK
Close 10092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10094 NT_STATUS_OK
Close 10094 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10096 NT_STATUS_OK
ReadX 10096 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10096 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10097 NT_STATUS_OK
WriteX 10097 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10097 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10097 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10097 1004 NT_STATUS_OK
WriteX 10097 0 51456 51456 NT_STATUS_OK
WriteX 10097 0 4096 4096 NT_STATUS_OK
Flush 10097 NT_STATUS_OK
SET_FILE_INFORMATION 10097 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10097 1004 NT_STATUS_OK
WriteX 10097 0 4096 4096 NT_STATUS_OK
Close 10097 NT_STATUS_OK
Close 10096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10099 NT_STATUS_OK
Close 10099 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10101 NT_STATUS_OK
ReadX 10101 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10101 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10103 NT_STATUS_OK
Close 10103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10106 NT_STATUS_OK
WriteX 10106 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10106 258 NT_STATUS_OK
WriteX 10106 0 53077 53077 NT_STATUS_OK
Close 10106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10107 NT_STATUS_OK
WriteX 10107 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10107 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10107 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10107 1004 NT_STATUS_OK
WriteX 10107 0 65536 65536 NT_STATUS_OK
WriteX 10107 65536 1856 1856 NT_STATUS_OK
WriteX 10107 0 4096 4096 NT_STATUS_OK
Flush 10107 NT_STATUS_OK
SET_FILE_INFORMATION 10107 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10107 1004 NT_STATUS_OK
WriteX 10107 0 4096 4096 NT_STATUS_OK
Close 10107 NT_STATUS_OK
Close 10101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10109 NT_STATUS_OK
Close 10109 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10111 NT_STATUS_OK
ReadX 10111 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10113 NT_STATUS_OK
Close 10113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10116 NT_STATUS_OK
WriteX 10116 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10116 258 NT_STATUS_OK
WriteX 10116 0 7983 7983 NT_STATUS_OK
Close 10116 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10118 NT_STATUS_OK
Close 10118 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10121 NT_STATUS_OK
WriteX 10121 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10121 258 NT_STATUS_OK
WriteX 10121 0 65536 65536 NT_STATUS_OK
WriteX 10121 65536 65536 65536 NT_STATUS_OK
WriteX 10121 131072 65536 65536 NT_STATUS_OK
WriteX 10121 196608 65536 65536 NT_STATUS_OK
WriteX 10121 262144 65536 65536 NT_STATUS_OK
WriteX 10121 327680 65536 65536 NT_STATUS_OK
WriteX 10121 393216 65536 65536 NT_STATUS_OK
WriteX 10121 458752 46731 46731 NT_STATUS_OK
Close 10121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10122 NT_STATUS_OK
WriteX 10122 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10122 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10111 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10122 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10122 1004 NT_STATUS_OK
WriteX 10122 0 65536 65536 NT_STATUS_OK
WriteX 10122 65536 22848 22848 NT_STATUS_OK
WriteX 10122 0 4096 4096 NT_STATUS_OK
Flush 10122 NT_STATUS_OK
SET_FILE_INFORMATION 10122 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10122 1004 NT_STATUS_OK
WriteX 10122 0 4096 4096 NT_STATUS_OK
Close 10122 NT_STATUS_OK
Close 10111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10124 NT_STATUS_OK
Close 10124 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10126 NT_STATUS_OK
ReadX 10126 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10126 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10127 NT_STATUS_OK
ReadX 10127 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10127 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10127 1004 NT_STATUS_OK
ReadX 10127 8192 4096 4096 NT_STATUS_OK
ReadX 10127 12288 4096 4096 NT_STATUS_OK
ReadX 10127 16384 4096 4096 NT_STATUS_OK
ReadX 10127 20480 4096 4096 NT_STATUS_OK
ReadX 10127 24576 4096 4096 NT_STATUS_OK
ReadX 10127 28672 4096 4096 NT_STATUS_OK
ReadX 10127 32768 4096 4096 NT_STATUS_OK
ReadX 10127 36864 4096 4096 NT_STATUS_OK
ReadX 10127 40960 4096 4096 NT_STATUS_OK
ReadX 10127 45056 4096 4096 NT_STATUS_OK
ReadX 10127 49152 4096 4096 NT_STATUS_OK
ReadX 10127 53248 4096 4096 NT_STATUS_OK
ReadX 10127 57344 4096 4096 NT_STATUS_OK
ReadX 10127 61440 4096 4096 NT_STATUS_OK
ReadX 10127 65536 4096 4096 NT_STATUS_OK
ReadX 10127 69632 4096 4096 NT_STATUS_OK
ReadX 10127 73728 4096 4096 NT_STATUS_OK
ReadX 10127 77824 4096 4096 NT_STATUS_OK
ReadX 10127 81920 4096 4096 NT_STATUS_OK
ReadX 10127 86016 4096 4096 NT_STATUS_OK
ReadX 10127 90112 4096 4096 NT_STATUS_OK
ReadX 10127 94208 4096 4096 NT_STATUS_OK
ReadX 10127 98304 4096 4096 NT_STATUS_OK
ReadX 10127 102400 4096 4096 NT_STATUS_OK
ReadX 10127 106496 4096 4096 NT_STATUS_OK
ReadX 10127 110592 4096 4096 NT_STATUS_OK
ReadX 10127 114688 4096 4096 NT_STATUS_OK
ReadX 10127 118784 4096 4096 NT_STATUS_OK
ReadX 10127 122880 4096 4096 NT_STATUS_OK
ReadX 10127 126976 4096 4096 NT_STATUS_OK
ReadX 10127 131072 4096 4096 NT_STATUS_OK
ReadX 10127 135168 4096 4096 NT_STATUS_OK
ReadX 10127 139264 4096 4096 NT_STATUS_OK
ReadX 10127 143360 4096 4096 NT_STATUS_OK
ReadX 10127 147456 4096 4096 NT_STATUS_OK
ReadX 10127 151552 4096 4096 NT_STATUS_OK
ReadX 10127 155648 4096 4096 NT_STATUS_OK
Close 10126 NT_STATUS_OK
ReadX 10127 159744 4096 4096 NT_STATUS_OK
ReadX 10127 163840 4096 4096 NT_STATUS_OK
ReadX 10127 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10127 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10128 NT_STATUS_OK
Close 10128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10130 NT_STATUS_OK
WriteX 10130 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10130 258 NT_STATUS_OK
Close 10127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10131 NT_STATUS_OK
SET_FILE_INFORMATION 10131 1004 NT_STATUS_OK
Close 10131 NT_STATUS_OK
WriteX 10130 0 42388 42388 NT_STATUS_OK
Close 10130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10132 NT_STATUS_OK
Close 10132 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10134 NT_STATUS_OK
ReadX 10134 0 4096 4096 NT_STATUS_OK
ReadX 10134 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10135 NT_STATUS_OK
WriteX 10135 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10135 258 NT_STATUS_OK
SET_FILE_INFORMATION 10135 1004 NT_STATUS_OK
WriteX 10135 0 42652 42652 NT_STATUS_OK
Close 10135 NT_STATUS_OK
Close 10134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10137 NT_STATUS_OK
Close 10137 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10139 NT_STATUS_OK
ReadX 10139 0 4096 4096 NT_STATUS_OK
ReadX 10139 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10141 NT_STATUS_OK
Close 10141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10144 NT_STATUS_OK
WriteX 10144 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10144 258 NT_STATUS_OK
WriteX 10144 0 65536 65536 NT_STATUS_OK
WriteX 10144 65536 49 49 NT_STATUS_OK
Close 10144 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10145 NT_STATUS_OK
ReadX 10145 0 61440 61440 NT_STATUS_OK
ReadX 10145 61440 4096 4096 NT_STATUS_OK
ReadX 10145 65536 61440 61440 NT_STATUS_OK
ReadX 10145 126976 4096 4096 NT_STATUS_OK
ReadX 10145 131072 61440 61440 NT_STATUS_OK
ReadX 10145 192512 4096 4096 NT_STATUS_OK
ReadX 10145 196608 61440 61440 NT_STATUS_OK
ReadX 10145 258048 4096 4096 NT_STATUS_OK
ReadX 10145 262144 61440 61440 NT_STATUS_OK
ReadX 10145 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10146 NT_STATUS_OK
ReadX 10146 0 61440 61440 NT_STATUS_OK
ReadX 10146 61440 4096 4096 NT_STATUS_OK
ReadX 10146 65536 61440 61440 NT_STATUS_OK
ReadX 10146 126976 4096 4096 NT_STATUS_OK
ReadX 10146 131072 61440 61440 NT_STATUS_OK
ReadX 10146 192512 4096 4096 NT_STATUS_OK
ReadX 10146 196608 61440 61440 NT_STATUS_OK
ReadX 10146 258048 4096 4096 NT_STATUS_OK
ReadX 10146 262144 61440 61440 NT_STATUS_OK
ReadX 10146 323584 4096 4096 NT_STATUS_OK
ReadX 10146 327680 61440 61440 NT_STATUS_OK
ReadX 10146 389120 4096 4096 NT_STATUS_OK
ReadX 10146 393216 61440 61440 NT_STATUS_OK
ReadX 10146 454656 4096 4096 NT_STATUS_OK
ReadX 10146 458752 61440 61440 NT_STATUS_OK
ReadX 10146 520192 4096 4096 NT_STATUS_OK
ReadX 10146 524288 61440 61440 NT_STATUS_OK
ReadX 10146 585728 4096 4096 NT_STATUS_OK
ReadX 10146 589824 61440 61440 NT_STATUS_OK
ReadX 10146 651264 4096 4096 NT_STATUS_OK
ReadX 10146 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10147 NT_STATUS_OK
ReadX 10147 0 61440 61440 NT_STATUS_OK
ReadX 10147 61440 4096 4096 NT_STATUS_OK
ReadX 10147 65536 61440 61440 NT_STATUS_OK
ReadX 10147 126976 4096 4096 NT_STATUS_OK
ReadX 10147 131072 61440 61440 NT_STATUS_OK
ReadX 10147 192512 4096 4096 NT_STATUS_OK
ReadX 10147 196608 61440 61440 NT_STATUS_OK
ReadX 10147 258048 4096 4096 NT_STATUS_OK
ReadX 10147 262144 61440 61440 NT_STATUS_OK
ReadX 10147 323584 4096 4096 NT_STATUS_OK
ReadX 10147 327680 61440 61440 NT_STATUS_OK
ReadX 10147 389120 4096 4096 NT_STATUS_OK
ReadX 10147 393216 61440 61440 NT_STATUS_OK
ReadX 10147 454656 4096 4096 NT_STATUS_OK
ReadX 10147 458752 61440 61440 NT_STATUS_OK
ReadX 10147 520192 4096 4096 NT_STATUS_OK
ReadX 10147 524288 61440 61440 NT_STATUS_OK
ReadX 10147 585728 4096 4096 NT_STATUS_OK
ReadX 10147 589824 61440 61440 NT_STATUS_OK
ReadX 10147 651264 4096 4096 NT_STATUS_OK
ReadX 10147 655360 61440 61440 NT_STATUS_OK
ReadX 10147 716800 4096 4096 NT_STATUS_OK
ReadX 10147 720896 61440 61440 NT_STATUS_OK
ReadX 10147 782336 4096 4096 NT_STATUS_OK
ReadX 10147 786432 61440 61440 NT_STATUS_OK
ReadX 10147 847872 4096 4096 NT_STATUS_OK
ReadX 10147 851968 61440 61440 NT_STATUS_OK
ReadX 10147 913408 4096 4096 NT_STATUS_OK
ReadX 10147 917504 61440 61440 NT_STATUS_OK
ReadX 10147 978944 4096 4096 NT_STATUS_OK
ReadX 10147 983040 61440 61440 NT_STATUS_OK
ReadX 10147 1044480 4096 4096 NT_STATUS_OK
ReadX 10147 1048576 61440 61440 NT_STATUS_OK
ReadX 10147 1110016 4096 4096 NT_STATUS_OK
ReadX 10147 1114112 61440 61440 NT_STATUS_OK
ReadX 10147 1175552 4096 4096 NT_STATUS_OK
ReadX 10147 1179648 61440 61440 NT_STATUS_OK
ReadX 10147 1241088 4096 4096 NT_STATUS_OK
ReadX 10147 1245184 61440 61440 NT_STATUS_OK
ReadX 10147 1306624 4096 4096 NT_STATUS_OK
ReadX 10147 1310720 61440 61440 NT_STATUS_OK
ReadX 10147 1372160 4096 4096 NT_STATUS_OK
ReadX 10147 1376256 61440 61440 NT_STATUS_OK
ReadX 10147 1437696 4096 4096 NT_STATUS_OK
ReadX 10147 1441792 61440 61440 NT_STATUS_OK
ReadX 10147 1503232 4096 4096 NT_STATUS_OK
ReadX 10147 1507328 61440 61440 NT_STATUS_OK
ReadX 10147 1568768 4096 4096 NT_STATUS_OK
ReadX 10147 1572864 61440 61440 NT_STATUS_OK
ReadX 10147 1634304 4096 4096 NT_STATUS_OK
ReadX 10147 1638400 61440 61440 NT_STATUS_OK
ReadX 10147 1699840 4096 4096 NT_STATUS_OK
ReadX 10147 1703936 61440 61440 NT_STATUS_OK
ReadX 10147 1765376 4096 4096 NT_STATUS_OK
ReadX 10147 1769472 61440 61440 NT_STATUS_OK
ReadX 10147 1830912 4096 4096 NT_STATUS_OK
ReadX 10147 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10148 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10149 NT_STATUS_OK
QUERY_FILE_INFORMATION 10149 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10149 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10149 1005 NT_STATUS_OK
ReadX 10149 2156 24 24 NT_STATUS_OK
ReadX 10149 2139 276 276 NT_STATUS_OK
ReadX 10149 2136 14 14 NT_STATUS_OK
ReadX 10149 2136 7 7 NT_STATUS_OK
ReadX 10149 2138 12 12 NT_STATUS_OK
ReadX 10149 2137 8 8 NT_STATUS_OK
ReadX 10149 2135 15 15 NT_STATUS_OK
ReadX 10149 0 16 16 NT_STATUS_OK
ReadX 10149 16 2048 2048 NT_STATUS_OK
ReadX 10149 2064 2048 2048 NT_STATUS_OK
ReadX 10149 257 2048 2048 NT_STATUS_OK
ReadX 10149 385 2048 2048 NT_STATUS_OK
ReadX 10149 513 2048 2048 NT_STATUS_OK
ReadX 10149 641 2048 2048 NT_STATUS_OK
ReadX 10149 769 2048 2048 NT_STATUS_OK
ReadX 10149 897 2048 2048 NT_STATUS_OK
ReadX 10149 1025 2048 2048 NT_STATUS_OK
ReadX 10149 1153 2048 2048 NT_STATUS_OK
ReadX 10149 1281 2048 2048 NT_STATUS_OK
ReadX 10149 1409 2048 2048 NT_STATUS_OK
ReadX 10149 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10151 NT_STATUS_OK
Close 10151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10145 NT_STATUS_OK
Close 10146 NT_STATUS_OK
Close 10147 NT_STATUS_OK
Close 10139 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10154 NT_STATUS_OK
WriteX 10154 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10154 258 NT_STATUS_OK
WriteX 10154 0 10575 10575 NT_STATUS_OK
Flush 10154 NT_STATUS_OK
Close 10154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10155 NT_STATUS_OK
Close 10155 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
Close 10149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10159 NT_STATUS_OK
LockX 10159 2147483538 1 NT_STATUS_OK
UnlockX 10159 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10159 1005 NT_STATUS_OK
ReadX 10159 0 512 512 NT_STATUS_OK
ReadX 10159 512 512 512 NT_STATUS_OK
ReadX 10159 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10159 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10159 1004 NT_STATUS_OK
Close 10159 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10160 NT_STATUS_OK
QUERY_FILE_INFORMATION 10160 1005 NT_STATUS_OK
ReadX 10160 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10161 NT_STATUS_OK
LockX 10161 2147483538 1 NT_STATUS_OK
UnlockX 10161 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10161 1005 NT_STATUS_OK
ReadX 10161 0 512 512 NT_STATUS_OK
ReadX 10161 512 512 512 NT_STATUS_OK
ReadX 10161 1024 512 512 NT_STATUS_OK
ReadX 10161 288 20 20 NT_STATUS_OK
ReadX 10161 308 2084 2084 NT_STATUS_OK
ReadX 10161 388 2084 2084 NT_STATUS_OK
ReadX 10161 388 2084 2084 NT_STATUS_OK
ReadX 10148 2157 1386 1386 NT_STATUS_OK
ReadX 10161 2472 399 399 NT_STATUS_OK
ReadX 10161 3072 1536 1536 NT_STATUS_OK
ReadX 10161 544 149 149 NT_STATUS_OK
ReadX 10161 693 485 485 NT_STATUS_OK
Close 10161 NT_STATUS_OK
ReadX 10148 2157 4096 4096 NT_STATUS_OK
ReadX 10148 6253 4096 4096 NT_STATUS_OK
ReadX 10148 10349 4096 4096 NT_STATUS_OK
ReadX 10148 14445 4096 4096 NT_STATUS_OK
ReadX 10148 18541 4096 4096 NT_STATUS_OK
ReadX 10148 22637 256 256 NT_STATUS_OK
ReadX 10148 22893 4096 4096 NT_STATUS_OK
ReadX 10148 26989 4096 4096 NT_STATUS_OK
ReadX 10148 31085 4096 4096 NT_STATUS_OK
ReadX 10148 35181 4096 4096 NT_STATUS_OK
ReadX 10148 39277 4096 4096 NT_STATUS_OK
ReadX 10148 43373 4096 4096 NT_STATUS_OK
ReadX 10148 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10148 2157 1024 1024 NT_STATUS_OK
ReadX 10148 1667 4688 4688 NT_STATUS_OK
ReadX 10148 6355 3516 3516 NT_STATUS_OK
ReadX 10148 9871 16384 16384 NT_STATUS_OK
ReadX 10148 26255 3771 3771 NT_STATUS_OK
ReadX 10148 30026 2048 2048 NT_STATUS_OK
ReadX 10148 32074 1024 1024 NT_STATUS_OK
ReadX 10148 33098 6652 6652 NT_STATUS_OK
ReadX 10148 39750 16384 16384 NT_STATUS_OK
ReadX 10148 56134 10496 10496 NT_STATUS_OK
ReadX 10148 66630 1784 1784 NT_STATUS_OK
ReadX 10148 68414 90 90 NT_STATUS_OK
ReadX 10148 68504 273 273 NT_STATUS_OK
ReadX 10148 68777 1600 1600 NT_STATUS_OK
ReadX 10148 70377 640 640 NT_STATUS_OK
ReadX 10148 71017 1280 1280 NT_STATUS_OK
ReadX 10148 72297 8464 8464 NT_STATUS_OK
ReadX 10148 80761 158 158 NT_STATUS_OK
ReadX 10148 80919 912 912 NT_STATUS_OK
ReadX 10148 81831 1980 1980 NT_STATUS_OK
ReadX 10148 83811 2256 2256 NT_STATUS_OK
ReadX 10148 86067 400 400 NT_STATUS_OK
ReadX 10148 86467 252 252 NT_STATUS_OK
ReadX 10148 86719 42 42 NT_STATUS_OK
ReadX 10148 86761 725 725 NT_STATUS_OK
ReadX 10148 2009 512 512 NT_STATUS_OK
ReadX 10148 3895 9 9 NT_STATUS_OK
ReadX 10148 3781 46 46 NT_STATUS_OK
ReadX 10148 4059 92 92 NT_STATUS_OK
ReadX 10148 3781 92 92 NT_STATUS_OK
ReadX 10148 3986 184 184 NT_STATUS_OK
ReadX 10148 3987 16384 16384 NT_STATUS_OK
ReadX 10148 3902 16384 16384 NT_STATUS_OK
ReadX 10148 3781 10240 10240 NT_STATUS_OK
ReadX 10148 3821 16384 16384 NT_STATUS_OK
ReadX 10148 3891 935 935 NT_STATUS_OK
ReadX 10148 4060 10240 10240 NT_STATUS_OK
ReadX 10148 4059 184 184 NT_STATUS_OK
ReadX 10148 256 184 184 NT_STATUS_OK
ReadX 10148 256 1026 1026 NT_STATUS_OK
ReadX 10148 3901 326 326 NT_STATUS_OK
ReadX 10148 3899 652 652 NT_STATUS_OK
ReadX 10148 256 2 2 NT_STATUS_OK
ReadX 10148 258 4948 4948 NT_STATUS_OK
Close 10148 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10163 NT_STATUS_OK
Close 10163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10166 NT_STATUS_OK
WriteX 10166 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10166 258 NT_STATUS_OK
WriteX 10166 0 65536 65536 NT_STATUS_OK
WriteX 10166 65536 65536 65536 NT_STATUS_OK
WriteX 10166 131072 65536 65536 NT_STATUS_OK
WriteX 10166 196608 65536 65536 NT_STATUS_OK
WriteX 10166 262144 65536 65536 NT_STATUS_OK
WriteX 10166 327680 65536 65536 NT_STATUS_OK
WriteX 10166 393216 65536 65536 NT_STATUS_OK
WriteX 10166 458752 65536 65536 NT_STATUS_OK
WriteX 10166 524288 65536 65536 NT_STATUS_OK
WriteX 10166 589824 35257 35257 NT_STATUS_OK
Close 10166 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10168 NT_STATUS_OK
Close 10168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10171 NT_STATUS_OK
WriteX 10171 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10171 258 NT_STATUS_OK
WriteX 10171 0 65536 65536 NT_STATUS_OK
WriteX 10171 65536 65536 65536 NT_STATUS_OK
WriteX 10171 131072 65536 65536 NT_STATUS_OK
WriteX 10171 196608 65536 65536 NT_STATUS_OK
WriteX 10171 262144 65536 65536 NT_STATUS_OK
WriteX 10171 327680 65536 65536 NT_STATUS_OK
WriteX 10171 393216 65536 65536 NT_STATUS_OK
WriteX 10171 458752 65536 65536 NT_STATUS_OK
WriteX 10171 524288 65536 65536 NT_STATUS_OK
WriteX 10171 589824 57598 57598 NT_STATUS_OK
Close 10171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10173 NT_STATUS_OK
WriteX 10173 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10173 258 NT_STATUS_OK
WriteX 10173 0 12543 12543 NT_STATUS_OK
Flush 10173 NT_STATUS_OK
Close 10173 NT_STATUS_OK
Close 10157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10175 NT_STATUS_OK
Close 10175 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10177 NT_STATUS_OK
ReadX 10177 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10179 NT_STATUS_OK
QUERY_FILE_INFORMATION 10179 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10179 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10179 1005 NT_STATUS_OK
ReadX 10179 1938 24 24 NT_STATUS_OK
ReadX 10179 1920 276 276 NT_STATUS_OK
ReadX 10179 1918 14 14 NT_STATUS_OK
ReadX 10179 1918 7 7 NT_STATUS_OK
ReadX 10179 1919 12 12 NT_STATUS_OK
ReadX 10179 1919 8 8 NT_STATUS_OK
ReadX 10179 1917 15 15 NT_STATUS_OK
ReadX 10179 0 16 16 NT_STATUS_OK
ReadX 10179 16 2048 2048 NT_STATUS_OK
ReadX 10179 2064 2048 2048 NT_STATUS_OK
ReadX 10179 257 2048 2048 NT_STATUS_OK
ReadX 10179 385 2048 2048 NT_STATUS_OK
ReadX 10179 513 2048 2048 NT_STATUS_OK
ReadX 10179 641 2048 2048 NT_STATUS_OK
ReadX 10179 769 2048 2048 NT_STATUS_OK
ReadX 10179 897 2048 2048 NT_STATUS_OK
ReadX 10179 1025 2048 2048 NT_STATUS_OK
ReadX 10179 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10181 NT_STATUS_OK
Close 10181 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10184 NT_STATUS_OK
WriteX 10184 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10184 258 NT_STATUS_OK
WriteX 10184 0 11588 11588 NT_STATUS_OK
Flush 10184 NT_STATUS_OK
Close 10184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10185 NT_STATUS_OK
Close 10185 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10187 NT_STATUS_OK
ReadX 10187 0 4096 4096 NT_STATUS_OK
Close 10179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10189 NT_STATUS_OK
WriteX 10189 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10189 258 NT_STATUS_OK
WriteX 10189 0 11615 11615 NT_STATUS_OK
Flush 10189 NT_STATUS_OK
Close 10189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10191 NT_STATUS_OK
Close 10191 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10193 NT_STATUS_OK
ReadX 10193 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10195 NT_STATUS_OK
Close 10195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10198 NT_STATUS_OK
WriteX 10198 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10198 258 NT_STATUS_OK
WriteX 10198 0 65536 65536 NT_STATUS_OK
WriteX 10198 65536 16050 16050 NT_STATUS_OK
Close 10198 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10178 1939 64 64 NT_STATUS_OK
ReadX 10178 128 248 248 NT_STATUS_OK
ReadX 10178 128 568 568 NT_STATUS_OK
ReadX 10178 3872 1536 1536 NT_STATUS_OK
ReadX 10178 3456 2560 2560 NT_STATUS_OK
ReadX 10178 3136 512 512 NT_STATUS_OK
ReadX 10178 2880 4096 4096 NT_STATUS_OK
ReadX 10178 3264 3072 3072 NT_STATUS_OK
ReadX 10178 320 4096 4096 NT_STATUS_OK
ReadX 10178 1024 4096 4096 NT_STATUS_OK
ReadX 10178 3616 4096 4096 NT_STATUS_OK
ReadX 10178 1939 64 64 NT_STATUS_OK
ReadX 10178 128 248 248 NT_STATUS_OK
ReadX 10178 128 608 608 NT_STATUS_OK
ReadX 10178 2858 1024 1024 NT_STATUS_OK
ReadX 10178 2810 4096 4096 NT_STATUS_OK
ReadX 10178 2826 4096 4096 NT_STATUS_OK
ReadX 10178 2580 2048 2048 NT_STATUS_OK
ReadX 10178 2800 2560 2560 NT_STATUS_OK
ReadX 10178 2100 4096 4096 NT_STATUS_OK
ReadX 10178 2084 4096 4096 NT_STATUS_OK
ReadX 10178 868 4096 4096 NT_STATUS_OK
ReadX 10178 2324 4096 4096 NT_STATUS_OK
ReadX 10178 884 4096 4096 NT_STATUS_OK
ReadX 10178 2604 1024 1024 NT_STATUS_OK
ReadX 10178 580 4096 4096 NT_STATUS_OK
ReadX 10178 596 4096 4096 NT_STATUS_OK
ReadX 10178 2752 4096 4096 NT_STATUS_OK
ReadX 10178 2842 1024 1024 NT_STATUS_OK
ReadX 10178 660 4096 4096 NT_STATUS_OK
ReadX 10178 2720 4096 4096 NT_STATUS_OK
ReadX 10178 2736 4096 4096 NT_STATUS_OK
ReadX 10178 628 4096 4096 NT_STATUS_OK
ReadX 10178 2704 4096 4096 NT_STATUS_OK
ReadX 10178 1556 4096 4096 NT_STATUS_OK
ReadX 10178 576 4096 4096 NT_STATUS_OK
ReadX 10178 3168 1536 1536 NT_STATUS_OK
ReadX 10178 832 4096 4096 NT_STATUS_OK
ReadX 10178 1088 4096 4096 NT_STATUS_OK
ReadX 10178 1344 4096 4096 NT_STATUS_OK
ReadX 10178 1600 4096 4096 NT_STATUS_OK
ReadX 10178 1856 4096 4096 NT_STATUS_OK
ReadX 10178 2112 4096 4096 NT_STATUS_OK
ReadX 10178 1892 4096 4096 NT_STATUS_OK
ReadX 10178 820 4096 4096 NT_STATUS_OK
ReadX 10178 788 4096 4096 NT_STATUS_OK
ReadX 10178 1604 4096 4096 NT_STATUS_OK
ReadX 10178 3648 4096 4096 NT_STATUS_OK
ReadX 10178 2608 4096 4096 NT_STATUS_OK
ReadX 10178 548 4096 4096 NT_STATUS_OK
ReadX 10178 740 4096 4096 NT_STATUS_OK
ReadX 10178 1344 4096 4096 NT_STATUS_OK
ReadX 10178 3392 4096 4096 NT_STATUS_OK
ReadX 10178 3904 4096 4096 NT_STATUS_OK
ReadX 10178 644 4096 4096 NT_STATUS_OK
ReadX 10178 676 4096 4096 NT_STATUS_OK
ReadX 10178 2688 4096 4096 NT_STATUS_OK
ReadX 10178 320 4096 4096 NT_STATUS_OK
ReadX 10178 900 4096 4096 NT_STATUS_OK
ReadX 10178 1908 4096 4096 NT_STATUS_OK
ReadX 10178 852 4096 4096 NT_STATUS_OK
ReadX 10178 724 4096 4096 NT_STATUS_OK
ReadX 10178 2292 4096 4096 NT_STATUS_OK
ReadX 10178 612 4096 4096 NT_STATUS_OK
ReadX 10178 388 4096 4096 NT_STATUS_OK
ReadX 10178 2368 4096 4096 NT_STATUS_OK
ReadX 10178 2624 4096 4096 NT_STATUS_OK
ReadX 10178 500 4096 4096 NT_STATUS_OK
ReadX 10178 356 4096 4096 NT_STATUS_OK
ReadX 10178 1024 4096 4096 NT_STATUS_OK
ReadX 10178 576 4096 4096 NT_STATUS_OK
ReadX 10178 340 4096 4096 NT_STATUS_OK
ReadX 10178 420 4096 4096 NT_STATUS_OK
ReadX 10178 1600 4096 4096 NT_STATUS_OK
ReadX 10178 404 4096 4096 NT_STATUS_OK
ReadX 10178 1428 4096 4096 NT_STATUS_OK
ReadX 10178 2656 4096 4096 NT_STATUS_OK
ReadX 10178 2624 4096 4096 NT_STATUS_OK
ReadX 10178 452 4096 4096 NT_STATUS_OK
ReadX 10178 692 4096 4096 NT_STATUS_OK
ReadX 10178 564 4096 4096 NT_STATUS_OK
ReadX 10178 372 4096 4096 NT_STATUS_OK
ReadX 10178 468 4096 4096 NT_STATUS_OK
ReadX 10178 484 4096 4096 NT_STATUS_OK
ReadX 10178 1088 4096 4096 NT_STATUS_OK
ReadX 10178 1924 4096 4096 NT_STATUS_OK
ReadX 10178 2768 4096 4096 NT_STATUS_OK
ReadX 10178 832 4096 4096 NT_STATUS_OK
ReadX 10178 836 4096 4096 NT_STATUS_OK
ReadX 10178 1856 4096 4096 NT_STATUS_OK
ReadX 10178 2640 4096 4096 NT_STATUS_OK
ReadX 10178 436 4096 4096 NT_STATUS_OK
ReadX 10178 1828 4096 4096 NT_STATUS_OK
ReadX 10178 804 4096 4096 NT_STATUS_OK
ReadX 10178 1860 4096 4096 NT_STATUS_OK
ReadX 10178 1812 4096 4096 NT_STATUS_OK
ReadX 10178 756 4096 4096 NT_STATUS_OK
ReadX 10178 1636 4096 4096 NT_STATUS_OK
ReadX 10178 772 4096 4096 NT_STATUS_OK
ReadX 10178 2036 4096 4096 NT_STATUS_OK
ReadX 10178 1220 4096 4096 NT_STATUS_OK
ReadX 10178 1652 4096 4096 NT_STATUS_OK
ReadX 10178 2588 4096 4096 NT_STATUS_OK
ReadX 10178 916 4096 4096 NT_STATUS_OK
ReadX 10178 260 4096 4096 NT_STATUS_OK
ReadX 10178 932 4096 4096 NT_STATUS_OK
ReadX 10178 2624 4096 4096 NT_STATUS_OK
ReadX 10178 308 4096 4096 NT_STATUS_OK
ReadX 10178 292 4096 4096 NT_STATUS_OK
ReadX 10178 1140 4096 4096 NT_STATUS_OK
ReadX 10178 276 4096 4096 NT_STATUS_OK
ReadX 10178 2020 4096 4096 NT_STATUS_OK
ReadX 10178 2880 4096 4096 NT_STATUS_OK
ReadX 10178 516 4096 4096 NT_STATUS_OK
ReadX 10178 1844 4096 4096 NT_STATUS_OK
ReadX 10178 1124 4096 4096 NT_STATUS_OK
ReadX 10178 3136 4096 4096 NT_STATUS_OK
ReadX 10178 324 4096 4096 NT_STATUS_OK
ReadX 10178 1156 4096 4096 NT_STATUS_OK
ReadX 10178 1172 4096 4096 NT_STATUS_OK
ReadX 10178 2112 4096 4096 NT_STATUS_OK
ReadX 10178 2368 4096 4096 NT_STATUS_OK
ReadX 10178 964 4096 4096 NT_STATUS_OK
ReadX 10178 980 4096 4096 NT_STATUS_OK
ReadX 10178 1012 4096 4096 NT_STATUS_OK
ReadX 10178 532 4096 4096 NT_STATUS_OK
ReadX 10178 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10178 1620 4096 4096 NT_STATUS_OK
ReadX 10178 1604 4096 4096 NT_STATUS_OK
ReadX 10178 2116 4096 4096 NT_STATUS_OK
ReadX 10178 2132 4096 4096 NT_STATUS_OK
ReadX 10178 2148 4096 4096 NT_STATUS_OK
ReadX 10178 2276 4096 4096 NT_STATUS_OK
ReadX 10178 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10200 NT_STATUS_OK
Close 10200 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10203 NT_STATUS_OK
QUERY_FILE_INFORMATION 10158 1004 NT_STATUS_OK
Close 10158 NT_STATUS_OK
WriteX 10203 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10203 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10160 1004 NT_STATUS_OK
Close 10160 NT_STATUS_OK
WriteX 10203 0 65536 65536 NT_STATUS_OK
WriteX 10203 65536 64850 64850 NT_STATUS_OK
Close 10203 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10205 NT_STATUS_OK
WriteX 10205 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10205 258 NT_STATUS_OK
ReadX 10178 2068 4096 4096 NT_STATUS_OK
ReadX 10178 1588 4096 4096 NT_STATUS_OK
ReadX 10178 1572 4096 4096 NT_STATUS_OK
WriteX 10205 0 18630 18630 NT_STATUS_OK
Flush 10205 NT_STATUS_OK
Close 10205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10207 NT_STATUS_OK
Close 10207 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10209 NT_STATUS_OK
ReadX 10209 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10178 612 4096 4096 NT_STATUS_OK
ReadX 10178 564 4096 4096 NT_STATUS_OK
ReadX 10178 1876 4096 4096 NT_STATUS_OK
ReadX 10178 628 4096 4096 NT_STATUS_OK
ReadX 10178 740 4096 4096 NT_STATUS_OK
ReadX 10178 724 4096 4096 NT_STATUS_OK
ReadX 10178 644 4096 4096 NT_STATUS_OK
ReadX 10178 2324 4096 4096 NT_STATUS_OK
ReadX 10178 660 4096 4096 NT_STATUS_OK
ReadX 10178 852 4096 4096 NT_STATUS_OK
ReadX 10178 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10178 2368 4096 4096 NT_STATUS_OK
ReadX 10178 1024 4096 4096 NT_STATUS_OK
ReadX 10178 320 4096 4096 NT_STATUS_OK
ReadX 10178 580 4096 4096 NT_STATUS_OK
ReadX 10178 3136 512 512 NT_STATUS_OK
ReadX 10178 2880 4096 4096 NT_STATUS_OK
Close 10178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10210 NT_STATUS_OK
ReadX 10210 61440 4096 4096 NT_STATUS_OK
ReadX 10210 126976 4096 4096 NT_STATUS_OK
WriteX 10210 0 65536 65536 NT_STATUS_OK
WriteX 10210 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10211 NT_STATUS_OK
ReadX 10211 61440 4096 4096 NT_STATUS_OK
ReadX 10211 126976 4096 4096 NT_STATUS_OK
ReadX 10211 192512 4096 4096 NT_STATUS_OK
ReadX 10211 258048 4096 4096 NT_STATUS_OK
WriteX 10211 0 65536 65536 NT_STATUS_OK
WriteX 10211 65536 65536 65536 NT_STATUS_OK
WriteX 10211 131072 65536 65536 NT_STATUS_OK
WriteX 10211 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10212 NT_STATUS_OK
ReadX 10212 61440 4096 4096 NT_STATUS_OK
ReadX 10212 126976 4096 4096 NT_STATUS_OK
ReadX 10212 192512 4096 4096 NT_STATUS_OK
ReadX 10212 258048 4096 4096 NT_STATUS_OK
ReadX 10212 323584 4096 4096 NT_STATUS_OK
ReadX 10212 389120 4096 4096 NT_STATUS_OK
ReadX 10212 454656 4096 4096 NT_STATUS_OK
ReadX 10212 520192 4096 4096 NT_STATUS_OK
WriteX 10212 0 65536 65536 NT_STATUS_OK
WriteX 10212 65536 65536 65536 NT_STATUS_OK
WriteX 10212 131072 65536 65536 NT_STATUS_OK
WriteX 10212 196608 65536 65536 NT_STATUS_OK
WriteX 10212 262144 65536 65536 NT_STATUS_OK
WriteX 10212 327680 65536 65536 NT_STATUS_OK
WriteX 10212 393216 65536 65536 NT_STATUS_OK
WriteX 10212 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10213 NT_STATUS_OK
ReadX 10213 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10214 NT_STATUS_OK
Close 10214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10215 NT_STATUS_OK
WriteX 10215 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10215 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10213 0 8192 8192 NT_STATUS_OK
Flush 10213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10213 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10213 0 8192 8192 NT_STATUS_OK
Flush 10213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10213 0 8192 8192 NT_STATUS_OK
Flush 10213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10213 0 8192 8192 NT_STATUS_OK
Flush 10213 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10217 NT_STATUS_OK
Close 10217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10209 NT_STATUS_OK
Close 10177 NT_STATUS_OK
Close 10210 NT_STATUS_OK
Close 10211 NT_STATUS_OK
Close 10212 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10220 NT_STATUS_OK
WriteX 10220 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10220 258 NT_STATUS_OK
WriteX 10220 0 62591 62591 NT_STATUS_OK
Close 10220 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10222 NT_STATUS_OK
Close 10222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10225 NT_STATUS_OK
WriteX 10225 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10225 258 NT_STATUS_OK
WriteX 10225 0 10845 10845 NT_STATUS_OK
Close 10225 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10227 NT_STATUS_OK
Close 10227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10230 NT_STATUS_OK
WriteX 10230 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10230 258 NT_STATUS_OK
WriteX 10230 0 30118 30118 NT_STATUS_OK
Close 10230 NT_STATUS_OK
WriteX 10213 0 4096 4096 NT_STATUS_OK
WriteX 10215 0 64 64 NT_STATUS_OK
Close 10215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10213 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10232 NT_STATUS_OK
ReadX 10232 0 61440 61440 NT_STATUS_OK
ReadX 10232 61440 4096 4096 NT_STATUS_OK
ReadX 10232 65536 61440 61440 NT_STATUS_OK
ReadX 10232 126976 4096 4096 NT_STATUS_OK
ReadX 10232 131072 61440 61440 NT_STATUS_OK
ReadX 10232 192512 4096 4096 NT_STATUS_OK
ReadX 10232 196608 61440 61440 NT_STATUS_OK
ReadX 10232 258048 4096 4096 NT_STATUS_OK
ReadX 10232 262144 61440 61440 NT_STATUS_OK
ReadX 10232 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 61440 61440 NT_STATUS_OK
ReadX 10233 61440 4096 4096 NT_STATUS_OK
ReadX 10233 65536 61440 61440 NT_STATUS_OK
ReadX 10233 126976 4096 4096 NT_STATUS_OK
ReadX 10233 131072 61440 61440 NT_STATUS_OK
ReadX 10233 192512 4096 4096 NT_STATUS_OK
ReadX 10233 196608 61440 61440 NT_STATUS_OK
ReadX 10233 258048 4096 4096 NT_STATUS_OK
ReadX 10233 262144 61440 61440 NT_STATUS_OK
ReadX 10233 323584 4096 4096 NT_STATUS_OK
ReadX 10233 327680 61440 61440 NT_STATUS_OK
ReadX 10233 389120 4096 4096 NT_STATUS_OK
ReadX 10233 393216 61440 61440 NT_STATUS_OK
ReadX 10233 454656 4096 4096 NT_STATUS_OK
ReadX 10233 458752 61440 61440 NT_STATUS_OK
ReadX 10233 520192 4096 4096 NT_STATUS_OK
ReadX 10233 524288 61440 61440 NT_STATUS_OK
ReadX 10233 585728 4096 4096 NT_STATUS_OK
ReadX 10233 589824 61440 61440 NT_STATUS_OK
ReadX 10233 651264 4096 4096 NT_STATUS_OK
ReadX 10233 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10234 NT_STATUS_OK
ReadX 10234 0 61440 61440 NT_STATUS_OK
ReadX 10234 61440 4096 4096 NT_STATUS_OK
ReadX 10234 65536 61440 61440 NT_STATUS_OK
ReadX 10234 126976 4096 4096 NT_STATUS_OK
ReadX 10234 131072 61440 61440 NT_STATUS_OK
ReadX 10234 192512 4096 4096 NT_STATUS_OK
ReadX 10234 196608 61440 61440 NT_STATUS_OK
ReadX 10234 258048 4096 4096 NT_STATUS_OK
ReadX 10234 262144 61440 61440 NT_STATUS_OK
ReadX 10234 323584 4096 4096 NT_STATUS_OK
ReadX 10234 327680 61440 61440 NT_STATUS_OK
ReadX 10234 389120 4096 4096 NT_STATUS_OK
ReadX 10234 393216 61440 61440 NT_STATUS_OK
ReadX 10234 454656 4096 4096 NT_STATUS_OK
ReadX 10234 458752 61440 61440 NT_STATUS_OK
ReadX 10234 520192 4096 4096 NT_STATUS_OK
ReadX 10234 524288 61440 61440 NT_STATUS_OK
ReadX 10234 585728 4096 4096 NT_STATUS_OK
ReadX 10234 589824 61440 61440 NT_STATUS_OK
ReadX 10234 651264 4096 4096 NT_STATUS_OK
ReadX 10234 655360 61440 61440 NT_STATUS_OK
ReadX 10234 716800 4096 4096 NT_STATUS_OK
ReadX 10234 720896 61440 61440 NT_STATUS_OK
ReadX 10234 782336 4096 4096 NT_STATUS_OK
ReadX 10234 786432 61440 61440 NT_STATUS_OK
ReadX 10234 847872 4096 4096 NT_STATUS_OK
ReadX 10234 851968 61440 61440 NT_STATUS_OK
ReadX 10234 913408 4096 4096 NT_STATUS_OK
ReadX 10234 917504 61440 61440 NT_STATUS_OK
ReadX 10234 978944 4096 4096 NT_STATUS_OK
ReadX 10234 983040 61440 61440 NT_STATUS_OK
ReadX 10234 1044480 4096 4096 NT_STATUS_OK
ReadX 10234 1048576 61440 61440 NT_STATUS_OK
ReadX 10234 1110016 4096 4096 NT_STATUS_OK
ReadX 10234 1114112 61440 61440 NT_STATUS_OK
ReadX 10234 1175552 4096 4096 NT_STATUS_OK
ReadX 10234 1179648 61440 61440 NT_STATUS_OK
ReadX 10234 1241088 4096 4096 NT_STATUS_OK
ReadX 10234 1245184 61440 61440 NT_STATUS_OK
ReadX 10234 1306624 4096 4096 NT_STATUS_OK
ReadX 10234 1310720 61440 61440 NT_STATUS_OK
ReadX 10234 1372160 4096 4096 NT_STATUS_OK
ReadX 10234 1376256 61440 61440 NT_STATUS_OK
ReadX 10234 1437696 4096 4096 NT_STATUS_OK
ReadX 10234 1441792 61440 61440 NT_STATUS_OK
ReadX 10234 1503232 4096 4096 NT_STATUS_OK
ReadX 10234 1507328 61440 61440 NT_STATUS_OK
ReadX 10234 1568768 4096 4096 NT_STATUS_OK
ReadX 10234 1572864 61440 61440 NT_STATUS_OK
ReadX 10234 1634304 4096 4096 NT_STATUS_OK
ReadX 10234 1638400 61440 61440 NT_STATUS_OK
ReadX 10234 1699840 4096 4096 NT_STATUS_OK
ReadX 10234 1703936 61440 61440 NT_STATUS_OK
ReadX 10234 1765376 4096 4096 NT_STATUS_OK
ReadX 10234 1769472 61440 61440 NT_STATUS_OK
ReadX 10234 1830912 4096 4096 NT_STATUS_OK
ReadX 10234 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10235 NT_STATUS_OK
Close 10235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10232 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Close 10234 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10237 NT_STATUS_OK
ReadX 10237 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10238 NT_STATUS_OK
ReadX 10238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10239 NT_STATUS_OK
ReadX 10239 0 4096 4096 NT_STATUS_OK
ReadX 10239 4096 4096 4096 NT_STATUS_OK
ReadX 10239 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10240 NT_STATUS_OK
Close 10240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10237 NT_STATUS_OK
Close 10238 NT_STATUS_OK
Close 10239 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10242 NT_STATUS_OK
ReadX 10242 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10243 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10243 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10244 NT_STATUS_OK
Close 10244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10242 NT_STATUS_OK
Close 10243 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10246 NT_STATUS_OK
ReadX 10246 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10247 NT_STATUS_OK
ReadX 10247 0 8192 8192 NT_STATUS_OK
ReadX 10247 8192 8192 8192 NT_STATUS_OK
ReadX 10247 16384 8192 8192 NT_STATUS_OK
ReadX 10247 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10249 NT_STATUS_OK
Close 10249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10247 NT_STATUS_OK
Close 10246 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10252 NT_STATUS_OK
WriteX 10252 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10252 258 NT_STATUS_OK
WriteX 10252 0 10438 10438 NT_STATUS_OK
Close 10252 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10253 NT_STATUS_OK
Close 10253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10254 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10255 NT_STATUS_OK
Close 10255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10256 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10257 NT_STATUS_OK
Close 10257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10260 NT_STATUS_OK
Close 10260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10261 NT_STATUS_OK
ReadX 10261 0 4096 4096 NT_STATUS_OK
ReadX 10261 4096 4096 4096 NT_STATUS_OK
ReadX 10261 8192 4096 4096 NT_STATUS_OK
ReadX 10261 12288 8192 8192 NT_STATUS_OK
ReadX 10261 20480 8192 8192 NT_STATUS_OK
ReadX 10261 28672 8192 8192 NT_STATUS_OK
ReadX 10261 36864 8192 8192 NT_STATUS_OK
ReadX 10261 45056 8192 8192 NT_STATUS_OK
ReadX 10261 53248 8192 8192 NT_STATUS_OK
ReadX 10261 61440 8192 8192 NT_STATUS_OK
ReadX 10261 69632 8192 8192 NT_STATUS_OK
ReadX 10261 77824 8192 8192 NT_STATUS_OK
ReadX 10261 86016 8192 8192 NT_STATUS_OK
ReadX 10261 94208 8192 8192 NT_STATUS_OK
ReadX 10261 102400 8192 8192 NT_STATUS_OK
ReadX 10261 110592 8192 8192 NT_STATUS_OK
ReadX 10261 118784 8192 8192 NT_STATUS_OK
ReadX 10261 126976 8192 8192 NT_STATUS_OK
ReadX 10261 135168 8192 8192 NT_STATUS_OK
ReadX 10261 143360 8192 8192 NT_STATUS_OK
ReadX 10261 151552 8192 8192 NT_STATUS_OK
ReadX 10261 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10261 NT_STATUS_OK
Close 10254 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10263 NT_STATUS_OK
Close 10263 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10266 NT_STATUS_OK
WriteX 10266 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10266 258 NT_STATUS_OK
WriteX 10266 0 28489 28489 NT_STATUS_OK
Close 10266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10267 NT_STATUS_OK
Close 10267 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10269 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10269 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10270 NT_STATUS_OK
Close 10270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10269 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10272 NT_STATUS_OK
ReadX 10272 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10273 NT_STATUS_OK
ReadX 10273 0 8192 8192 NT_STATUS_OK
ReadX 10273 8192 8192 8192 NT_STATUS_OK
ReadX 10273 16384 8192 8192 NT_STATUS_OK
ReadX 10273 24576 8192 8192 NT_STATUS_OK
ReadX 10273 32768 16384 16384 NT_STATUS_OK
ReadX 10273 49152 8192 8192 NT_STATUS_OK
ReadX 10273 57344 8192 8192 NT_STATUS_OK
ReadX 10273 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10275 NT_STATUS_OK
Close 10275 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10273 NT_STATUS_OK
Close 10272 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10278 NT_STATUS_OK
WriteX 10278 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10278 258 NT_STATUS_OK
WriteX 10278 0 29253 29253 NT_STATUS_OK
Close 10278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10279 NT_STATUS_OK
Close 10279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10280 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10282 NT_STATUS_OK
Close 10282 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10285 NT_STATUS_OK
WriteX 10285 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10285 258 NT_STATUS_OK
WriteX 10285 0 30183 30183 NT_STATUS_OK
Close 10285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10286 NT_STATUS_OK
Close 10286 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10288 NT_STATUS_OK
WriteX 10288 0 510 510 NT_STATUS_OK
WriteX 10288 510 512 512 NT_STATUS_OK
WriteX 10288 1022 510 510 NT_STATUS_OK
WriteX 10288 1532 510 510 NT_STATUS_OK
WriteX 10288 2042 168 168 NT_STATUS_OK
Close 10288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10289 NT_STATUS_OK
Close 10289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10291 NT_STATUS_OK
ReadX 10291 0 4096 4096 NT_STATUS_OK
WriteX 10291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10292 NT_STATUS_OK
ReadX 10292 61440 4096 4096 NT_STATUS_OK
ReadX 10292 126976 4096 4096 NT_STATUS_OK
WriteX 10292 0 65536 65536 NT_STATUS_OK
WriteX 10292 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10293 NT_STATUS_OK
ReadX 10293 61440 4096 4096 NT_STATUS_OK
ReadX 10293 126976 4096 4096 NT_STATUS_OK
ReadX 10293 192512 4096 4096 NT_STATUS_OK
ReadX 10293 258048 4096 4096 NT_STATUS_OK
WriteX 10293 0 65536 65536 NT_STATUS_OK
WriteX 10293 65536 65536 65536 NT_STATUS_OK
WriteX 10293 131072 65536 65536 NT_STATUS_OK
WriteX 10293 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10294 NT_STATUS_OK
ReadX 10294 61440 4096 4096 NT_STATUS_OK
ReadX 10294 126976 4096 4096 NT_STATUS_OK
ReadX 10294 192512 4096 4096 NT_STATUS_OK
ReadX 10294 258048 4096 4096 NT_STATUS_OK
ReadX 10294 323584 4096 4096 NT_STATUS_OK
ReadX 10294 389120 4096 4096 NT_STATUS_OK
ReadX 10294 454656 4096 4096 NT_STATUS_OK
ReadX 10294 520192 4096 4096 NT_STATUS_OK
WriteX 10294 0 65536 65536 NT_STATUS_OK
WriteX 10294 65536 65536 65536 NT_STATUS_OK
WriteX 10294 131072 65536 65536 NT_STATUS_OK
WriteX 10294 196608 65536 65536 NT_STATUS_OK
WriteX 10294 262144 65536 65536 NT_STATUS_OK
WriteX 10294 327680 65536 65536 NT_STATUS_OK
WriteX 10294 393216 65536 65536 NT_STATUS_OK
WriteX 10294 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10295 NT_STATUS_OK
Close 10295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10291 NT_STATUS_OK
Close 10292 NT_STATUS_OK
Close 10293 NT_STATUS_OK
Close 10294 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10297 NT_STATUS_OK
Close 10297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10301 NT_STATUS_OK
Close 10301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10304 NT_STATUS_OK
Close 10304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10306 NT_STATUS_OK
Close 10306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10310 NT_STATUS_OK
Close 10310 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10313 NT_STATUS_OK
Close 10313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10315 NT_STATUS_OK
Close 10315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10319 NT_STATUS_OK
Close 10319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10324 NT_STATUS_OK
Close 10324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10329 NT_STATUS_OK
Close 10329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10334 NT_STATUS_OK
Close 10334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10339 NT_STATUS_OK
Close 10339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10344 NT_STATUS_OK
Close 10344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10349 NT_STATUS_OK
Close 10349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10354 NT_STATUS_OK
Close 10354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10357 NT_STATUS_OK
Close 10357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10360 NT_STATUS_OK
Close 10360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10363 NT_STATUS_OK
WriteX 10363 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10363 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10363 0 65536 65536 NT_STATUS_OK
WriteX 10363 65536 65536 65536 NT_STATUS_OK
WriteX 10363 131072 65536 65536 NT_STATUS_OK
WriteX 10363 196608 65536 65536 NT_STATUS_OK
WriteX 10363 262144 26634 26634 NT_STATUS_OK
Close 10363 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10368 NT_STATUS_OK
Close 10368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10369 NT_STATUS_OK
Close 10369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10370 NT_STATUS_OK
ReadX 10370 0 4096 4096 NT_STATUS_OK
Close 10370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10371 NT_STATUS_OK
ReadX 10371 0 4096 4096 NT_STATUS_OK
ReadX 10371 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10372 NT_STATUS_OK
Close 10372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10371 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10376 NT_STATUS_OK
Close 10376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10379 NT_STATUS_OK
Close 10379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10381 NT_STATUS_OK
Close 10381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10385 NT_STATUS_OK
Close 10385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10388 NT_STATUS_OK
Close 10388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10390 NT_STATUS_OK
Close 10390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10394 NT_STATUS_OK
Close 10394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10399 NT_STATUS_OK
Close 10399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10404 NT_STATUS_OK
Close 10404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10409 NT_STATUS_OK
Close 10409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10414 NT_STATUS_OK
Close 10414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10419 NT_STATUS_OK
Close 10419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10423 NT_STATUS_OK
Close 10423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10428 NT_STATUS_OK
Close 10428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10433 NT_STATUS_OK
Close 10433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10436 NT_STATUS_OK
Close 10436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10438 NT_STATUS_OK
Close 10438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10448 NT_STATUS_OK
Close 10448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10449 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10450 NT_STATUS_OK
ReadX 10450 0 4096 4096 NT_STATUS_OK
Close 10450 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10451 NT_STATUS_OK
ReadX 10451 0 4096 4096 NT_STATUS_OK
Close 10451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10452 NT_STATUS_OK
ReadX 10452 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10462 NT_STATUS_OK
Close 10462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10463 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10464 NT_STATUS_OK
ReadX 10464 0 4096 4096 NT_STATUS_OK
Close 10464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10465 NT_STATUS_OK
ReadX 10465 0 4096 4096 NT_STATUS_OK
Close 10465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10466 NT_STATUS_OK
ReadX 10466 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10452 NT_STATUS_OK
Close 10466 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10495 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10495 0 4096 4096 NT_STATUS_OK
Close 10495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10496 NT_STATUS_OK
ReadX 10496 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10497 NT_STATUS_OK
ReadX 10497 0 4096 4096 NT_STATUS_OK
ReadX 10497 4096 4096 4096 NT_STATUS_OK
ReadX 10497 8192 4096 4096 NT_STATUS_OK
ReadX 10497 12288 4096 4096 NT_STATUS_OK
ReadX 10497 16384 4096 4096 NT_STATUS_OK
ReadX 10497 20480 4096 4096 NT_STATUS_OK
ReadX 10497 24576 4096 4096 NT_STATUS_OK
ReadX 10497 28672 4096 4096 NT_STATUS_OK
ReadX 10497 32768 4096 4096 NT_STATUS_OK
ReadX 10497 36864 4096 4096 NT_STATUS_OK
ReadX 10497 40960 4096 4096 NT_STATUS_OK
ReadX 10497 45056 4096 4096 NT_STATUS_OK
ReadX 10497 49152 4096 4096 NT_STATUS_OK
ReadX 10497 53248 4096 4096 NT_STATUS_OK
ReadX 10497 57344 4096 4096 NT_STATUS_OK
ReadX 10497 61440 4096 4096 NT_STATUS_OK
ReadX 10497 65536 4096 4096 NT_STATUS_OK
ReadX 10497 69632 4096 4096 NT_STATUS_OK
ReadX 10497 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10497 1004 NT_STATUS_OK
WriteX 10497 0 4096 4096 NT_STATUS_OK
Close 10497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10498 NT_STATUS_OK
SET_FILE_INFORMATION 10498 1004 NT_STATUS_OK
Close 10498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10499 NT_STATUS_OK
ReadX 10499 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10500 NT_STATUS_OK
Close 10500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10503 NT_STATUS_OK
WriteX 10503 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10503 258 NT_STATUS_OK
WriteX 10503 0 65536 65536 NT_STATUS_OK
WriteX 10503 65536 19979 19979 NT_STATUS_OK
Close 10503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10504 NT_STATUS_OK
ReadX 10504 0 4096 4096 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Flush 10504 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Flush 10504 NT_STATUS_OK
QUERY_FILE_INFORMATION 10504 1004 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Flush 10504 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Flush 10504 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Flush 10504 NT_STATUS_OK
SET_FILE_INFORMATION 10504 1004 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Flush 10504 NT_STATUS_OK
Close 10504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10505 NT_STATUS_OK
ReadX 10505 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10506 NT_STATUS_OK
ReadX 10506 0 4096 4096 NT_STATUS_OK
Close 10505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10507 NT_STATUS_OK
ReadX 10507 0 4096 4096 NT_STATUS_OK
Close 10507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10508 NT_STATUS_OK
ReadX 10508 0 4096 4096 NT_STATUS_OK
Close 10508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10509 NT_STATUS_OK
ReadX 10509 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10509 1004 NT_STATUS_OK
WriteX 10509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10510 NT_STATUS_OK
Close 10510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10506 NT_STATUS_OK
Close 10509 NT_STATUS_OK
Close 10499 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10512 NT_STATUS_OK
Close 10512 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10515 NT_STATUS_OK
WriteX 10515 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10515 258 NT_STATUS_OK
WriteX 10515 0 65536 65536 NT_STATUS_OK
WriteX 10515 65536 17654 17654 NT_STATUS_OK
Close 10515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10516 NT_STATUS_OK
ReadX 10516 0 4096 4096 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
QUERY_FILE_INFORMATION 10516 1004 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
SET_FILE_INFORMATION 10516 1004 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
Close 10516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10517 NT_STATUS_OK
SET_FILE_INFORMATION 10517 1004 NT_STATUS_OK
Close 10517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10518 NT_STATUS_OK
ReadX 10518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10519 NT_STATUS_OK
Close 10519 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10521 NT_STATUS_OK
ReadX 10521 0 4096 4096 NT_STATUS_OK
ReadX 10521 4096 4096 4096 NT_STATUS_OK
ReadX 10521 8192 4096 4096 NT_STATUS_OK
ReadX 10521 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10521 16384 4096 4096 NT_STATUS_OK
ReadX 10521 20480 4096 4096 NT_STATUS_OK
ReadX 10521 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10522 NT_STATUS_OK
ReadX 10522 0 4096 4096 NT_STATUS_OK
Close 10522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10523 NT_STATUS_OK
ReadX 10523 0 4096 4096 NT_STATUS_OK
Close 10523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10524 NT_STATUS_OK
ReadX 10524 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10524 1004 NT_STATUS_OK
WriteX 10524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10525 NT_STATUS_OK
Close 10525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10524 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10527 NT_STATUS_OK
Close 10527 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10530 NT_STATUS_OK
WriteX 10530 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10530 258 NT_STATUS_OK
WriteX 10530 0 65536 65536 NT_STATUS_OK
WriteX 10530 65536 19490 19490 NT_STATUS_OK
Close 10530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10531 NT_STATUS_OK
ReadX 10531 0 4096 4096 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
Flush 10531 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
Flush 10531 NT_STATUS_OK
QUERY_FILE_INFORMATION 10531 1004 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
Flush 10531 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
Flush 10531 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
Flush 10531 NT_STATUS_OK
SET_FILE_INFORMATION 10531 1004 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
Flush 10531 NT_STATUS_OK
Close 10531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10532 NT_STATUS_OK
SET_FILE_INFORMATION 10532 1004 NT_STATUS_OK
Close 10532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10533 NT_STATUS_OK
ReadX 10533 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10534 NT_STATUS_OK
Close 10534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10536 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10536 0 4096 4096 NT_STATUS_OK
Close 10536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10537 NT_STATUS_OK
ReadX 10537 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10538 NT_STATUS_OK
ReadX 10538 0 4096 4096 NT_STATUS_OK
ReadX 10538 4096 4096 4096 NT_STATUS_OK
ReadX 10538 8192 4096 4096 NT_STATUS_OK
ReadX 10538 12288 4096 4096 NT_STATUS_OK
ReadX 10538 16384 4096 4096 NT_STATUS_OK
ReadX 10538 20480 4096 4096 NT_STATUS_OK
ReadX 10538 24576 4096 4096 NT_STATUS_OK
ReadX 10538 28672 4096 4096 NT_STATUS_OK
ReadX 10538 32768 4096 4096 NT_STATUS_OK
ReadX 10538 36864 4096 4096 NT_STATUS_OK
ReadX 10538 40960 4096 4096 NT_STATUS_OK
ReadX 10538 45056 4096 4096 NT_STATUS_OK
ReadX 10538 49152 4096 4096 NT_STATUS_OK
ReadX 10538 53248 4096 4096 NT_STATUS_OK
ReadX 10538 57344 4096 4096 NT_STATUS_OK
ReadX 10538 61440 4096 4096 NT_STATUS_OK
ReadX 10538 65536 4096 4096 NT_STATUS_OK
ReadX 10538 69632 4096 4096 NT_STATUS_OK
ReadX 10538 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10538 1004 NT_STATUS_OK
WriteX 10538 0 4096 4096 NT_STATUS_OK
Close 10538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10539 NT_STATUS_OK
SET_FILE_INFORMATION 10539 1004 NT_STATUS_OK
Close 10539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10540 NT_STATUS_OK
ReadX 10540 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10541 NT_STATUS_OK
Close 10541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10533 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10544 NT_STATUS_OK
WriteX 10544 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10544 258 NT_STATUS_OK
WriteX 10544 0 65536 65536 NT_STATUS_OK
WriteX 10544 65536 8866 8866 NT_STATUS_OK
Close 10544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10545 NT_STATUS_OK
ReadX 10545 0 4096 4096 NT_STATUS_OK
WriteX 10545 0 4096 4096 NT_STATUS_OK
Flush 10545 NT_STATUS_OK
SET_FILE_INFORMATION 10545 1004 NT_STATUS_OK
WriteX 10545 0 4096 4096 NT_STATUS_OK
Flush 10545 NT_STATUS_OK
Close 10545 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10546 NT_STATUS_OK
ReadX 10546 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10547 NT_STATUS_OK
ReadX 10547 0 4096 4096 NT_STATUS_OK
Close 10547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10548 NT_STATUS_OK
ReadX 10548 0 4096 4096 NT_STATUS_OK
Close 10548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10549 NT_STATUS_OK
ReadX 10549 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10549 1004 NT_STATUS_OK
WriteX 10549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10550 NT_STATUS_OK
Close 10550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10549 NT_STATUS_OK
Close 10540 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10552 NT_STATUS_OK
Close 10552 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10555 NT_STATUS_OK
WriteX 10555 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10555 258 NT_STATUS_OK
WriteX 10555 0 65536 65536 NT_STATUS_OK
WriteX 10555 65536 9298 9298 NT_STATUS_OK
Close 10555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10556 NT_STATUS_OK
ReadX 10556 0 4096 4096 NT_STATUS_OK
WriteX 10556 0 4096 4096 NT_STATUS_OK
Flush 10556 NT_STATUS_OK
SET_FILE_INFORMATION 10556 1004 NT_STATUS_OK
WriteX 10556 0 4096 4096 NT_STATUS_OK
Flush 10556 NT_STATUS_OK
Close 10556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10557 NT_STATUS_OK
SET_FILE_INFORMATION 10557 1004 NT_STATUS_OK
Close 10557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10558 NT_STATUS_OK
ReadX 10558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10559 NT_STATUS_OK
Close 10559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10562 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10562 0 4096 4096 NT_STATUS_OK
Close 10562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10563 NT_STATUS_OK
ReadX 10563 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10563 4096 4096 4096 NT_STATUS_OK
ReadX 10563 8192 4096 4096 NT_STATUS_OK
ReadX 10563 12288 4096 4096 NT_STATUS_OK
ReadX 10563 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10564 NT_STATUS_OK
ReadX 10564 0 4096 4096 NT_STATUS_OK
Close 10564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10565 NT_STATUS_OK
ReadX 10565 0 4096 4096 NT_STATUS_OK
Close 10565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10566 NT_STATUS_OK
ReadX 10566 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10566 1004 NT_STATUS_OK
WriteX 10566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10567 NT_STATUS_OK
Close 10567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10563 NT_STATUS_OK
Close 10566 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10569 NT_STATUS_OK
Close 10569 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10572 NT_STATUS_OK
WriteX 10572 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10572 258 NT_STATUS_OK
WriteX 10572 0 65536 65536 NT_STATUS_OK
WriteX 10572 65536 11540 11540 NT_STATUS_OK
Close 10572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10573 NT_STATUS_OK
ReadX 10573 0 4096 4096 NT_STATUS_OK
WriteX 10573 0 4096 4096 NT_STATUS_OK
Flush 10573 NT_STATUS_OK
SET_FILE_INFORMATION 10573 1004 NT_STATUS_OK
WriteX 10573 0 4096 4096 NT_STATUS_OK
Flush 10573 NT_STATUS_OK
Close 10573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10574 NT_STATUS_OK
SET_FILE_INFORMATION 10574 1004 NT_STATUS_OK
Close 10574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10575 NT_STATUS_OK
ReadX 10575 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10576 NT_STATUS_OK
Close 10576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10578 NT_STATUS_OK
ReadX 10578 61440 4096 4096 NT_STATUS_OK
ReadX 10578 126976 4096 4096 NT_STATUS_OK
WriteX 10578 0 65536 65536 NT_STATUS_OK
WriteX 10578 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10579 NT_STATUS_OK
ReadX 10579 61440 4096 4096 NT_STATUS_OK
ReadX 10579 126976 4096 4096 NT_STATUS_OK
ReadX 10579 192512 4096 4096 NT_STATUS_OK
ReadX 10579 258048 4096 4096 NT_STATUS_OK
WriteX 10579 0 65536 65536 NT_STATUS_OK
WriteX 10579 65536 65536 65536 NT_STATUS_OK
WriteX 10579 131072 65536 65536 NT_STATUS_OK
WriteX 10579 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10580 NT_STATUS_OK
ReadX 10580 61440 4096 4096 NT_STATUS_OK
ReadX 10580 126976 4096 4096 NT_STATUS_OK
ReadX 10580 192512 4096 4096 NT_STATUS_OK
ReadX 10580 258048 4096 4096 NT_STATUS_OK
ReadX 10580 323584 4096 4096 NT_STATUS_OK
ReadX 10580 389120 4096 4096 NT_STATUS_OK
ReadX 10580 454656 4096 4096 NT_STATUS_OK
ReadX 10580 520192 4096 4096 NT_STATUS_OK
WriteX 10580 0 65536 65536 NT_STATUS_OK
WriteX 10580 65536 65536 65536 NT_STATUS_OK
WriteX 10580 131072 65536 65536 NT_STATUS_OK
WriteX 10580 196608 65536 65536 NT_STATUS_OK
WriteX 10580 262144 65536 65536 NT_STATUS_OK
WriteX 10580 327680 65536 65536 NT_STATUS_OK
WriteX 10580 393216 65536 65536 NT_STATUS_OK
WriteX 10580 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10581 NT_STATUS_OK
ReadX 10581 0 4096 4096 NT_STATUS_OK
ReadX 10581 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10582 NT_STATUS_OK
WriteX 10582 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10582 258 NT_STATUS_OK
WriteX 10582 0 53 53 NT_STATUS_OK
Close 10582 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10583 NT_STATUS_OK
Close 10583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10575 NT_STATUS_OK
Close 10521 NT_STATUS_OK
Close 10578 NT_STATUS_OK
Close 10579 NT_STATUS_OK
Close 10580 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10585 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10581 8192 4096 4096 NT_STATUS_OK
ReadX 10581 12288 4096 4096 NT_STATUS_OK
WriteX 10585 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10585 258 NT_STATUS_OK
ReadX 10581 16384 4096 4096 NT_STATUS_OK
ReadX 10581 20480 4096 4096 NT_STATUS_OK
WriteX 10585 0 15360 15360 NT_STATUS_OK
Close 10585 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10586 NT_STATUS_OK
ReadX 10586 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10586 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10586 1004 NT_STATUS_OK
WriteX 10586 0 4096 4096 NT_STATUS_OK
Close 10586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10587 NT_STATUS_OK
Close 10587 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10589 NT_STATUS_OK
ReadX 10589 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10590 NT_STATUS_OK
Close 10590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10589 4096 4096 4096 NT_STATUS_OK
ReadX 10589 8192 4096 4096 NT_STATUS_OK
ReadX 10589 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10592 NT_STATUS_OK
ReadX 10592 0 4096 4096 NT_STATUS_OK
ReadX 10592 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10593 NT_STATUS_OK
ReadX 10593 0 4096 4096 NT_STATUS_OK
ReadX 10593 4096 4096 4096 NT_STATUS_OK
ReadX 10593 8192 4096 4096 NT_STATUS_OK
Close 10592 NT_STATUS_OK
Close 10593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10594 NT_STATUS_OK
WriteX 10594 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10594 258 NT_STATUS_OK
WriteX 10594 0 15360 15360 NT_STATUS_OK
Close 10594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10595 NT_STATUS_OK
ReadX 10595 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10595 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10595 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10581 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10596 NT_STATUS_OK
Close 10596 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10598 NT_STATUS_OK
ReadX 10598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10599 NT_STATUS_OK
SET_FILE_INFORMATION 10599 1004 NT_STATUS_OK
Close 10599 NT_STATUS_OK
WriteX 10595 0 4096 4096 NT_STATUS_OK
Close 10595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10600 NT_STATUS_OK
Close 10600 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10602 NT_STATUS_OK
ReadX 10602 0 4096 4096 NT_STATUS_OK
ReadX 10602 4096 4096 4096 NT_STATUS_OK
ReadX 10602 8192 4096 4096 NT_STATUS_OK
ReadX 10602 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10602 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10602 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10603 NT_STATUS_OK
ReadX 10603 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10604 NT_STATUS_OK
WriteX 10604 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10604 258 NT_STATUS_OK
WriteX 10604 0 53 53 NT_STATUS_OK
Close 10604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10605 NT_STATUS_OK
Close 10605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10603 4096 4096 4096 NT_STATUS_OK
ReadX 10603 8192 4096 4096 NT_STATUS_OK
ReadX 10603 12288 4096 4096 NT_STATUS_OK
WriteX 10607 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10607 258 NT_STATUS_OK
WriteX 10607 0 12006 12006 NT_STATUS_OK
Close 10607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10608 NT_STATUS_OK
ReadX 10608 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10608 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10608 1004 NT_STATUS_OK
WriteX 10608 0 4096 4096 NT_STATUS_OK
Close 10608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10609 NT_STATUS_OK
Close 10609 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10611 NT_STATUS_OK
ReadX 10611 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10612 NT_STATUS_OK
Close 10612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10611 4096 4096 4096 NT_STATUS_OK
ReadX 10611 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10614 NT_STATUS_OK
WriteX 10614 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10614 258 NT_STATUS_OK
WriteX 10614 0 11991 11991 NT_STATUS_OK
Close 10614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10615 NT_STATUS_OK
ReadX 10615 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10615 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10615 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10616 NT_STATUS_OK
Close 10616 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10618 NT_STATUS_OK
ReadX 10618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10619 NT_STATUS_OK
SET_FILE_INFORMATION 10619 1004 NT_STATUS_OK
Close 10619 NT_STATUS_OK
WriteX 10615 0 4096 4096 NT_STATUS_OK
Close 10615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10620 NT_STATUS_OK
Close 10620 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10622 NT_STATUS_OK
ReadX 10622 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10623 NT_STATUS_OK
Close 10623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10622 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10622 1004 NT_STATUS_OK
ReadX 10622 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10622 1004 NT_STATUS_OK
WriteX 10622 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10622 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10622 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10622 1004 NT_STATUS_OK
Close 10598 NT_STATUS_OK
WriteX 10602 0 19054 19054 NT_STATUS_OK
WriteX 10622 0 12288 12288 NT_STATUS_OK
Close 10618 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10625 NT_STATUS_OK
Close 10625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10602 NT_STATUS_OK
Close 10622 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10627 NT_STATUS_OK
Close 10627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10629 NT_STATUS_OK
ReadX 10629 0 61440 61440 NT_STATUS_OK
ReadX 10629 61440 4096 4096 NT_STATUS_OK
ReadX 10629 65536 61440 61440 NT_STATUS_OK
ReadX 10629 126976 4096 4096 NT_STATUS_OK
ReadX 10629 131072 61440 61440 NT_STATUS_OK
ReadX 10629 192512 4096 4096 NT_STATUS_OK
ReadX 10629 196608 61440 61440 NT_STATUS_OK
ReadX 10629 258048 4096 4096 NT_STATUS_OK
ReadX 10629 262144 61440 61440 NT_STATUS_OK
ReadX 10629 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10630 NT_STATUS_OK
ReadX 10630 0 61440 61440 NT_STATUS_OK
ReadX 10630 61440 4096 4096 NT_STATUS_OK
ReadX 10630 65536 61440 61440 NT_STATUS_OK
ReadX 10630 126976 4096 4096 NT_STATUS_OK
ReadX 10630 131072 61440 61440 NT_STATUS_OK
ReadX 10630 192512 4096 4096 NT_STATUS_OK
ReadX 10630 196608 61440 61440 NT_STATUS_OK
ReadX 10630 258048 4096 4096 NT_STATUS_OK
ReadX 10630 262144 61440 61440 NT_STATUS_OK
ReadX 10630 323584 4096 4096 NT_STATUS_OK
ReadX 10630 327680 61440 61440 NT_STATUS_OK
ReadX 10630 389120 4096 4096 NT_STATUS_OK
ReadX 10630 393216 61440 61440 NT_STATUS_OK
ReadX 10630 454656 4096 4096 NT_STATUS_OK
ReadX 10630 458752 61440 61440 NT_STATUS_OK
ReadX 10630 520192 4096 4096 NT_STATUS_OK
ReadX 10630 524288 61440 61440 NT_STATUS_OK
ReadX 10630 585728 4096 4096 NT_STATUS_OK
ReadX 10630 589824 61440 61440 NT_STATUS_OK
ReadX 10630 651264 4096 4096 NT_STATUS_OK
ReadX 10630 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10631 NT_STATUS_OK
ReadX 10631 0 61440 61440 NT_STATUS_OK
ReadX 10631 61440 4096 4096 NT_STATUS_OK
ReadX 10631 65536 61440 61440 NT_STATUS_OK
ReadX 10631 126976 4096 4096 NT_STATUS_OK
ReadX 10631 131072 61440 61440 NT_STATUS_OK
ReadX 10631 192512 4096 4096 NT_STATUS_OK
ReadX 10631 196608 61440 61440 NT_STATUS_OK
ReadX 10631 258048 4096 4096 NT_STATUS_OK
ReadX 10631 262144 61440 61440 NT_STATUS_OK
ReadX 10631 323584 4096 4096 NT_STATUS_OK
ReadX 10631 327680 61440 61440 NT_STATUS_OK
ReadX 10631 389120 4096 4096 NT_STATUS_OK
ReadX 10631 393216 61440 61440 NT_STATUS_OK
ReadX 10631 454656 4096 4096 NT_STATUS_OK
ReadX 10631 458752 61440 61440 NT_STATUS_OK
ReadX 10631 520192 4096 4096 NT_STATUS_OK
ReadX 10631 524288 61440 61440 NT_STATUS_OK
ReadX 10631 585728 4096 4096 NT_STATUS_OK
ReadX 10631 589824 61440 61440 NT_STATUS_OK
ReadX 10631 651264 4096 4096 NT_STATUS_OK
ReadX 10631 655360 61440 61440 NT_STATUS_OK
ReadX 10631 716800 4096 4096 NT_STATUS_OK
ReadX 10631 720896 61440 61440 NT_STATUS_OK
ReadX 10631 782336 4096 4096 NT_STATUS_OK
ReadX 10631 786432 61440 61440 NT_STATUS_OK
ReadX 10631 847872 4096 4096 NT_STATUS_OK
ReadX 10631 851968 61440 61440 NT_STATUS_OK
ReadX 10631 913408 4096 4096 NT_STATUS_OK
ReadX 10631 917504 61440 61440 NT_STATUS_OK
ReadX 10631 978944 4096 4096 NT_STATUS_OK
ReadX 10631 983040 61440 61440 NT_STATUS_OK
ReadX 10631 1044480 4096 4096 NT_STATUS_OK
ReadX 10631 1048576 61440 61440 NT_STATUS_OK
ReadX 10631 1110016 4096 4096 NT_STATUS_OK
ReadX 10631 1114112 61440 61440 NT_STATUS_OK
ReadX 10631 1175552 4096 4096 NT_STATUS_OK
ReadX 10631 1179648 61440 61440 NT_STATUS_OK
ReadX 10631 1241088 4096 4096 NT_STATUS_OK
ReadX 10631 1245184 61440 61440 NT_STATUS_OK
ReadX 10631 1306624 4096 4096 NT_STATUS_OK
ReadX 10631 1310720 61440 61440 NT_STATUS_OK
ReadX 10631 1372160 4096 4096 NT_STATUS_OK
ReadX 10631 1376256 61440 61440 NT_STATUS_OK
ReadX 10631 1437696 4096 4096 NT_STATUS_OK
ReadX 10631 1441792 61440 61440 NT_STATUS_OK
ReadX 10631 1503232 4096 4096 NT_STATUS_OK
ReadX 10631 1507328 61440 61440 NT_STATUS_OK
ReadX 10631 1568768 4096 4096 NT_STATUS_OK
ReadX 10631 1572864 61440 61440 NT_STATUS_OK
ReadX 10631 1634304 4096 4096 NT_STATUS_OK
ReadX 10631 1638400 61440 61440 NT_STATUS_OK
ReadX 10631 1699840 4096 4096 NT_STATUS_OK
ReadX 10631 1703936 61440 61440 NT_STATUS_OK
ReadX 10631 1765376 4096 4096 NT_STATUS_OK
ReadX 10631 1769472 61440 61440 NT_STATUS_OK
ReadX 10631 1830912 4096 4096 NT_STATUS_OK
ReadX 10631 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10632 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10632 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10633 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10634 NT_STATUS_OK
ReadX 10634 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10635 NT_STATUS_OK
ReadX 10635 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10636 NT_STATUS_OK
ReadX 10636 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10637 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10638 NT_STATUS_OK
QUERY_FILE_INFORMATION 10638 1004 NT_STATUS_OK
WriteX 10638 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10638 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10639 NT_STATUS_OK
Close 10639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10640 NT_STATUS_OK
WriteX 10640 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10640 258 NT_STATUS_OK
WriteX 10640 0 491 491 NT_STATUS_OK
Close 10640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10641 NT_STATUS_OK
ReadX 10641 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10638 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10643 NT_STATUS_OK
Close 10643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10644 NT_STATUS_OK
WriteX 10644 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10644 258 NT_STATUS_OK
WriteX 10644 0 543 543 NT_STATUS_OK
Close 10644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10645 NT_STATUS_OK
ReadX 10645 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10629 NT_STATUS_OK
Close 10630 NT_STATUS_OK
Close 10631 NT_STATUS_OK
Close 10645 NT_STATUS_OK
Close 10633 NT_STATUS_OK
Close 10634 NT_STATUS_OK
Close 10635 NT_STATUS_OK
Close 10636 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10648 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10648 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10649 NT_STATUS_OK
ReadX 10649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10650 NT_STATUS_OK
ReadX 10650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10651 NT_STATUS_OK
ReadX 10651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10652 NT_STATUS_OK
ReadX 10652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10653 NT_STATUS_OK
ReadX 10653 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10657 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10658 NT_STATUS_OK
QUERY_FILE_INFORMATION 10658 1004 NT_STATUS_OK
WriteX 10658 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10658 258 NT_STATUS_OK
WriteX 10658 0 2048 2048 NT_STATUS_OK
Close 10658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10659 NT_STATUS_OK
ReadX 10659 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10659 0 4096 4096 NT_STATUS_OK
Flush 10659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10659 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10663 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10664 NT_STATUS_OK
WriteX 10664 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10664 258 NT_STATUS_OK
WriteX 10664 0 2048 2048 NT_STATUS_OK
Close 10664 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10665 NT_STATUS_OK
ReadX 10665 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10669 NT_STATUS_OK
Close 10669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10670 NT_STATUS_OK
WriteX 10670 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10670 258 NT_STATUS_OK
WriteX 10670 0 2048 2048 NT_STATUS_OK
Close 10670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10671 NT_STATUS_OK
ReadX 10671 0 2048 2048 NT_STATUS_OK
ReadX 10649 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10671 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10653 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10665 0 4096 4096 NT_STATUS_OK
WriteX 10649 0 8192 8192 NT_STATUS_OK
WriteX 10650 0 4096 4096 NT_STATUS_OK
WriteX 10651 0 4096 4096 NT_STATUS_OK
ReadX 10665 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10674 NT_STATUS_OK
ReadX 10674 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10675 NT_STATUS_OK
QUERY_FILE_INFORMATION 10675 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10674 NT_STATUS_OK
Close 10650 NT_STATUS_OK
Close 10651 NT_STATUS_OK
Close 10652 NT_STATUS_OK
Close 10665 NT_STATUS_OK
Close 10649 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10677 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10678 NT_STATUS_OK
ReadX 10678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10679 NT_STATUS_OK
ReadX 10679 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10680 NT_STATUS_OK
ReadX 10680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10681 NT_STATUS_OK
ReadX 10681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10682 NT_STATUS_OK
ReadX 10682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10683 NT_STATUS_OK
ReadX 10683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10684 NT_STATUS_OK
ReadX 10684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10685 NT_STATUS_OK
ReadX 10685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10686 NT_STATUS_OK
ReadX 10686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10687 NT_STATUS_OK
ReadX 10687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10688 NT_STATUS_OK
ReadX 10688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10689 NT_STATUS_OK
ReadX 10689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10690 NT_STATUS_OK
ReadX 10690 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10694 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10695 NT_STATUS_OK
QUERY_FILE_INFORMATION 10695 1004 NT_STATUS_OK
WriteX 10695 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10695 258 NT_STATUS_OK
WriteX 10695 0 2048 2048 NT_STATUS_OK
Close 10695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10696 NT_STATUS_OK
ReadX 10696 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10686 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10698 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10698 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10702 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10703 NT_STATUS_OK
QUERY_FILE_INFORMATION 10703 1004 NT_STATUS_OK
WriteX 10703 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10703 258 NT_STATUS_OK
WriteX 10703 0 2048 2048 NT_STATUS_OK
Close 10703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10704 NT_STATUS_OK
ReadX 10704 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10696 0 4096 4096 NT_STATUS_OK
Flush 10696 NT_STATUS_OK
WriteX 10704 0 4096 4096 NT_STATUS_OK
Flush 10704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10696 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10704 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10698 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10706 NT_STATUS_OK
WriteX 10706 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10706 258 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
Close 10706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10707 NT_STATUS_OK
ReadX 10707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10708 NT_STATUS_OK
Close 10708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10709 NT_STATUS_OK
WriteX 10709 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10709 258 NT_STATUS_OK
WriteX 10709 0 4096 4096 NT_STATUS_OK
Close 10709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10710 NT_STATUS_OK
ReadX 10710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10710 0 4096 4096 NT_STATUS_OK
Close 10707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10690 NT_STATUS_OK
Close 10684 NT_STATUS_OK
Close 10698 NT_STATUS_OK
Close 10687 NT_STATUS_OK
Close 10688 NT_STATUS_OK
Close 10689 NT_STATUS_OK
Close 10685 NT_STATUS_OK
Close 10678 NT_STATUS_OK
Close 10679 NT_STATUS_OK
Close 10682 NT_STATUS_OK
Close 10683 NT_STATUS_OK
Close 10680 NT_STATUS_OK
Close 10681 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10713 NT_STATUS_OK
Close 10713 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10715 NT_STATUS_OK
ReadX 10715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10716 NT_STATUS_OK
Close 10716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10717 NT_STATUS_OK
WriteX 10717 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10717 258 NT_STATUS_OK
WriteX 10717 0 2048 2048 NT_STATUS_OK
Close 10717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10718 NT_STATUS_OK
ReadX 10718 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10719 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10719 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10720 NT_STATUS_OK
ReadX 10720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10721 NT_STATUS_OK
ReadX 10721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10722 NT_STATUS_OK
ReadX 10722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10723 NT_STATUS_OK
ReadX 10723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10724 NT_STATUS_OK
ReadX 10724 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10725 NT_STATUS_OK
ReadX 10725 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10726 NT_STATUS_OK
ReadX 10726 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10727 NT_STATUS_OK
ReadX 10727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10728 NT_STATUS_OK
ReadX 10728 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10729 NT_STATUS_OK
ReadX 10729 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10730 NT_STATUS_OK
ReadX 10730 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10731 NT_STATUS_OK
ReadX 10731 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10732 NT_STATUS_OK
QUERY_FILE_INFORMATION 10732 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10715 NT_STATUS_OK
Close 10718 NT_STATUS_OK
Close 10730 NT_STATUS_OK
Close 10725 NT_STATUS_OK
Close 10726 NT_STATUS_OK
Close 10727 NT_STATUS_OK
Close 10728 NT_STATUS_OK
Close 10729 NT_STATUS_OK
Close 10731 NT_STATUS_OK
Close 10719 NT_STATUS_OK
Close 10720 NT_STATUS_OK
Close 10723 NT_STATUS_OK
Close 10724 NT_STATUS_OK
Close 10721 NT_STATUS_OK
Close 10722 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10734 NT_STATUS_OK
QUERY_FILE_INFORMATION 10734 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10736 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10737 NT_STATUS_OK
ReadX 10737 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10738 NT_STATUS_OK
ReadX 10738 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10739 NT_STATUS_OK
ReadX 10739 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10740 NT_STATUS_OK
ReadX 10740 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10741 NT_STATUS_OK
ReadX 10741 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10742 NT_STATUS_OK
ReadX 10742 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10743 NT_STATUS_OK
ReadX 10743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10744 NT_STATUS_OK
ReadX 10744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10745 NT_STATUS_OK
ReadX 10745 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10746 NT_STATUS_OK
ReadX 10746 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10747 NT_STATUS_OK
ReadX 10747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10748 NT_STATUS_OK
ReadX 10748 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10749 NT_STATUS_OK
ReadX 10749 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10753 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10754 NT_STATUS_OK
QUERY_FILE_INFORMATION 10754 1004 NT_STATUS_OK
WriteX 10754 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10754 258 NT_STATUS_OK
WriteX 10754 0 2048 2048 NT_STATUS_OK
Close 10754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10755 NT_STATUS_OK
ReadX 10755 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10756 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10757 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10758 NT_STATUS_OK
ReadX 10758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10759 NT_STATUS_OK
ReadX 10759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10760 NT_STATUS_OK
ReadX 10760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10761 NT_STATUS_OK
ReadX 10761 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10765 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10765 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10766 NT_STATUS_OK
QUERY_FILE_INFORMATION 10766 1004 NT_STATUS_OK
WriteX 10766 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10766 258 NT_STATUS_OK
WriteX 10766 0 2048 2048 NT_STATUS_OK
Close 10766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10767 NT_STATUS_OK
ReadX 10767 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10769 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10769 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10773 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10774 NT_STATUS_OK
QUERY_FILE_INFORMATION 10774 1004 NT_STATUS_OK
WriteX 10774 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10774 258 NT_STATUS_OK
WriteX 10774 0 2048 2048 NT_STATUS_OK
Close 10774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10775 NT_STATUS_OK
ReadX 10775 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10755 0 4096 4096 NT_STATUS_OK
Flush 10755 NT_STATUS_OK
WriteX 10767 0 4096 4096 NT_STATUS_OK
Flush 10767 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10755 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10767 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10757 4096 16384 16384 NT_STATUS_OK
ReadX 10737 4096 16384 16384 NT_STATUS_OK
ReadX 10769 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10777 NT_STATUS_OK
ReadX 10777 0 2048 2048 NT_STATUS_OK
WriteX 10777 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10778 NT_STATUS_OK
QUERY_FILE_INFORMATION 10778 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10777 NT_STATUS_OK
Close 10761 NT_STATUS_OK
Close 10749 NT_STATUS_OK
Close 10741 NT_STATUS_OK
Close 10757 NT_STATUS_OK
Close 10758 NT_STATUS_OK
Close 10759 NT_STATUS_OK
Close 10760 NT_STATUS_OK
Close 10748 NT_STATUS_OK
Close 10769 NT_STATUS_OK
Close 10743 NT_STATUS_OK
Close 10746 NT_STATUS_OK
Close 10747 NT_STATUS_OK
Close 10744 NT_STATUS_OK
Close 10745 NT_STATUS_OK
Close 10737 NT_STATUS_OK
Close 10738 NT_STATUS_OK
Close 10739 NT_STATUS_OK
Close 10740 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10780 NT_STATUS_OK
QUERY_FILE_INFORMATION 10780 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10782 NT_STATUS_OK
QUERY_FILE_INFORMATION 10782 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10785 NT_STATUS_OK
ReadX 10785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10786 NT_STATUS_OK
ReadX 10786 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10787 NT_STATUS_OK
ReadX 10787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10788 NT_STATUS_OK
ReadX 10788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10789 NT_STATUS_OK
ReadX 10789 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10785 4096 16384 16384 NT_STATUS_OK
WriteX 10785 0 4096 4096 NT_STATUS_OK
WriteX 10786 0 4096 4096 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
WriteX 10788 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10790 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10791 NT_STATUS_OK
ReadX 10791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10792 NT_STATUS_OK
ReadX 10792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10793 NT_STATUS_OK
ReadX 10793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10794 NT_STATUS_OK
ReadX 10794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10795 NT_STATUS_OK
ReadX 10795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10796 NT_STATUS_OK
ReadX 10796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10797 NT_STATUS_OK
ReadX 10797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10798 NT_STATUS_OK
ReadX 10798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10799 NT_STATUS_OK
ReadX 10799 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10800 NT_STATUS_OK
ReadX 10800 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10801 NT_STATUS_OK
ReadX 10801 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10802 NT_STATUS_OK
ReadX 10802 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10803 NT_STATUS_OK
ReadX 10803 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10804 NT_STATUS_OK
ReadX 10804 0 8192 8192 NT_STATUS_OK
ReadX 10791 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10805 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10805 0 4096 4096 NT_STATUS_OK
ReadX 10805 4096 4096 4096 NT_STATUS_OK
ReadX 10805 8192 4096 4096 NT_STATUS_OK
WriteX 10791 0 4096 4096 NT_STATUS_OK
WriteX 10792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10806 0 4096 4096 NT_STATUS_OK
ReadX 10806 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10785 0 4096 4096 NT_STATUS_OK
WriteX 10786 0 4096 4096 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
WriteX 10788 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10810 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10811 NT_STATUS_OK
QUERY_FILE_INFORMATION 10811 1004 NT_STATUS_OK
WriteX 10811 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10811 258 NT_STATUS_OK
WriteX 10811 0 2048 2048 NT_STATUS_OK
Close 10811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10812 NT_STATUS_OK
ReadX 10812 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10812 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10812 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10813 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10814 NT_STATUS_OK
ReadX 10814 0 4096 4096 NT_STATUS_OK
ReadX 10814 4096 4096 4096 NT_STATUS_OK
WriteX 10814 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10812 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10815 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10816 NT_STATUS_OK
ReadX 10816 0 4096 4096 NT_STATUS_OK
ReadX 10816 4096 4096 4096 NT_STATUS_OK
WriteX 10816 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10817 NT_STATUS_OK
QUERY_FILE_INFORMATION 10817 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10804 NT_STATUS_OK
Close 10789 NT_STATUS_OK
Close 10785 NT_STATUS_OK
Close 10786 NT_STATUS_OK
Close 10787 NT_STATUS_OK
Close 10788 NT_STATUS_OK
Close 10797 NT_STATUS_OK
Close 10802 NT_STATUS_OK
Close 10798 NT_STATUS_OK
Close 10799 NT_STATUS_OK
Close 10800 NT_STATUS_OK
Close 10801 NT_STATUS_OK
Close 10803 NT_STATUS_OK
Close 10791 NT_STATUS_OK
Close 10792 NT_STATUS_OK
Close 10795 NT_STATUS_OK
Close 10796 NT_STATUS_OK
Close 10793 NT_STATUS_OK
Close 10794 NT_STATUS_OK
Close 10816 NT_STATUS_OK
Close 10805 NT_STATUS_OK
Close 10806 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10819 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10819 0 4096 4096 NT_STATUS_OK
ReadX 10819 4096 4096 4096 NT_STATUS_OK
ReadX 10819 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10820 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10821 NT_STATUS_OK
ReadX 10821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10822 NT_STATUS_OK
ReadX 10822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10823 NT_STATUS_OK
ReadX 10823 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10824 NT_STATUS_OK
ReadX 10824 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10825 NT_STATUS_OK
ReadX 10825 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10826 NT_STATUS_OK
ReadX 10826 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10827 NT_STATUS_OK
ReadX 10827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10828 NT_STATUS_OK
ReadX 10828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10829 NT_STATUS_OK
ReadX 10829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10830 NT_STATUS_OK
ReadX 10830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10831 NT_STATUS_OK
ReadX 10831 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10832 NT_STATUS_OK
ReadX 10832 0 4096 4096 NT_STATUS_OK
ReadX 10820 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10836 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10837 NT_STATUS_OK
QUERY_FILE_INFORMATION 10837 1004 NT_STATUS_OK
WriteX 10837 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10837 258 NT_STATUS_OK
WriteX 10837 0 2048 2048 NT_STATUS_OK
Close 10837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10838 NT_STATUS_OK
ReadX 10838 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10838 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10842 NT_STATUS_OK
Close 10842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10843 NT_STATUS_OK
QUERY_FILE_INFORMATION 10843 1004 NT_STATUS_OK
WriteX 10843 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10843 258 NT_STATUS_OK
WriteX 10843 0 2048 2048 NT_STATUS_OK
Close 10843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10844 NT_STATUS_OK
ReadX 10844 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10844 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10827 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10845 NT_STATUS_OK
QUERY_FILE_INFORMATION 10845 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10831 NT_STATUS_OK
Close 10826 NT_STATUS_OK
Close 10832 NT_STATUS_OK
Close 10820 NT_STATUS_OK
Close 10821 NT_STATUS_OK
Close 10824 NT_STATUS_OK
Close 10825 NT_STATUS_OK
Close 10822 NT_STATUS_OK
Close 10823 NT_STATUS_OK
Close 10827 NT_STATUS_OK
Close 10828 NT_STATUS_OK
Close 10829 NT_STATUS_OK
Close 10830 NT_STATUS_OK
Close 10819 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10847 NT_STATUS_OK
QUERY_FILE_INFORMATION 10847 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10849 NT_STATUS_OK
ReadX 10849 61440 4096 4096 NT_STATUS_OK
ReadX 10849 126976 4096 4096 NT_STATUS_OK
WriteX 10849 0 65536 65536 NT_STATUS_OK
WriteX 10849 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10850 NT_STATUS_OK
ReadX 10850 61440 4096 4096 NT_STATUS_OK
ReadX 10850 126976 4096 4096 NT_STATUS_OK
ReadX 10850 192512 4096 4096 NT_STATUS_OK
ReadX 10850 258048 4096 4096 NT_STATUS_OK
WriteX 10850 0 65536 65536 NT_STATUS_OK
WriteX 10850 65536 65536 65536 NT_STATUS_OK
WriteX 10850 131072 65536 65536 NT_STATUS_OK
WriteX 10850 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10851 NT_STATUS_OK
ReadX 10851 61440 4096 4096 NT_STATUS_OK
ReadX 10851 126976 4096 4096 NT_STATUS_OK
ReadX 10851 192512 4096 4096 NT_STATUS_OK
ReadX 10851 258048 4096 4096 NT_STATUS_OK
ReadX 10851 323584 4096 4096 NT_STATUS_OK
ReadX 10851 389120 4096 4096 NT_STATUS_OK
ReadX 10851 454656 4096 4096 NT_STATUS_OK
ReadX 10851 520192 4096 4096 NT_STATUS_OK
WriteX 10851 0 65536 65536 NT_STATUS_OK
WriteX 10851 65536 65536 65536 NT_STATUS_OK
WriteX 10851 131072 65536 65536 NT_STATUS_OK
WriteX 10851 196608 65536 65536 NT_STATUS_OK
WriteX 10851 262144 65536 65536 NT_STATUS_OK
WriteX 10851 327680 65536 65536 NT_STATUS_OK
WriteX 10851 393216 65536 65536 NT_STATUS_OK
WriteX 10851 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10852 NT_STATUS_OK
ReadX 10852 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10852 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10852 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10852 8192 4096 4096 NT_STATUS_OK
ReadX 10852 12288 4096 4096 NT_STATUS_OK
ReadX 10852 16384 4096 4096 NT_STATUS_OK
ReadX 10852 20480 4096 4096 NT_STATUS_OK
ReadX 10852 24576 4096 4096 NT_STATUS_OK
ReadX 10852 28672 4096 4096 NT_STATUS_OK
ReadX 10852 32768 4096 4096 NT_STATUS_OK
ReadX 10852 36864 4096 4096 NT_STATUS_OK
ReadX 10852 40960 4096 4096 NT_STATUS_OK
ReadX 10852 45056 4096 4096 NT_STATUS_OK
ReadX 10852 49152 4096 4096 NT_STATUS_OK
ReadX 10852 53248 4096 4096 NT_STATUS_OK
ReadX 10852 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10852 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10853 NT_STATUS_OK
Close 10853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10849 NT_STATUS_OK
Close 10850 NT_STATUS_OK
Close 10851 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10855 NT_STATUS_OK
WriteX 10855 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10855 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10855 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10855 1004 NT_STATUS_OK
WriteX 10855 0 57088 57088 NT_STATUS_OK
WriteX 10855 0 4096 4096 NT_STATUS_OK
Flush 10855 NT_STATUS_OK
Close 10852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10856 NT_STATUS_OK
SET_FILE_INFORMATION 10856 1004 NT_STATUS_OK
Close 10856 NT_STATUS_OK
SET_FILE_INFORMATION 10855 1004 NT_STATUS_OK
WriteX 10855 0 4096 4096 NT_STATUS_OK
Close 10855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10857 NT_STATUS_OK
Close 10857 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10859 NT_STATUS_OK
ReadX 10859 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10859 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10860 NT_STATUS_OK
WriteX 10860 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10860 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10860 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10860 1004 NT_STATUS_OK
WriteX 10860 0 51456 51456 NT_STATUS_OK
WriteX 10860 0 4096 4096 NT_STATUS_OK
Flush 10860 NT_STATUS_OK
SET_FILE_INFORMATION 10860 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10860 1004 NT_STATUS_OK
WriteX 10860 0 4096 4096 NT_STATUS_OK
Close 10860 NT_STATUS_OK
Close 10859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10862 NT_STATUS_OK
Close 10862 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10864 NT_STATUS_OK
ReadX 10864 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10864 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10866 NT_STATUS_OK
Close 10866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10869 NT_STATUS_OK
WriteX 10869 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10869 258 NT_STATUS_OK
WriteX 10869 0 53077 53077 NT_STATUS_OK
Close 10869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10870 NT_STATUS_OK
WriteX 10870 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10870 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10870 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10870 1004 NT_STATUS_OK
WriteX 10870 0 65536 65536 NT_STATUS_OK
WriteX 10870 65536 1856 1856 NT_STATUS_OK
WriteX 10870 0 4096 4096 NT_STATUS_OK
Flush 10870 NT_STATUS_OK
SET_FILE_INFORMATION 10870 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10870 1004 NT_STATUS_OK
WriteX 10870 0 4096 4096 NT_STATUS_OK
Close 10870 NT_STATUS_OK
Close 10864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10872 NT_STATUS_OK
Close 10872 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10874 NT_STATUS_OK
ReadX 10874 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10876 NT_STATUS_OK
Close 10876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10879 NT_STATUS_OK
WriteX 10879 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10879 258 NT_STATUS_OK
WriteX 10879 0 7983 7983 NT_STATUS_OK
Close 10879 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10881 NT_STATUS_OK
Close 10881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10884 NT_STATUS_OK
WriteX 10884 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10884 258 NT_STATUS_OK
WriteX 10884 0 65536 65536 NT_STATUS_OK
WriteX 10884 65536 65536 65536 NT_STATUS_OK
WriteX 10884 131072 65536 65536 NT_STATUS_OK
WriteX 10884 196608 65536 65536 NT_STATUS_OK
WriteX 10884 262144 65536 65536 NT_STATUS_OK
WriteX 10884 327680 65536 65536 NT_STATUS_OK
WriteX 10884 393216 65536 65536 NT_STATUS_OK
WriteX 10884 458752 46731 46731 NT_STATUS_OK
Close 10884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10885 NT_STATUS_OK
WriteX 10885 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10885 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10874 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10885 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10885 1004 NT_STATUS_OK
WriteX 10885 0 65536 65536 NT_STATUS_OK
WriteX 10885 65536 22848 22848 NT_STATUS_OK
WriteX 10885 0 4096 4096 NT_STATUS_OK
Flush 10885 NT_STATUS_OK
SET_FILE_INFORMATION 10885 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10885 1004 NT_STATUS_OK
WriteX 10885 0 4096 4096 NT_STATUS_OK
Close 10885 NT_STATUS_OK
Close 10874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10887 NT_STATUS_OK
Close 10887 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10889 NT_STATUS_OK
ReadX 10889 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10889 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10890 NT_STATUS_OK
ReadX 10890 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10890 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10890 1004 NT_STATUS_OK
ReadX 10890 8192 4096 4096 NT_STATUS_OK
ReadX 10890 12288 4096 4096 NT_STATUS_OK
ReadX 10890 16384 4096 4096 NT_STATUS_OK
ReadX 10890 20480 4096 4096 NT_STATUS_OK
ReadX 10890 24576 4096 4096 NT_STATUS_OK
ReadX 10890 28672 4096 4096 NT_STATUS_OK
ReadX 10890 32768 4096 4096 NT_STATUS_OK
ReadX 10890 36864 4096 4096 NT_STATUS_OK
ReadX 10890 40960 4096 4096 NT_STATUS_OK
ReadX 10890 45056 4096 4096 NT_STATUS_OK
ReadX 10890 49152 4096 4096 NT_STATUS_OK
ReadX 10890 53248 4096 4096 NT_STATUS_OK
ReadX 10890 57344 4096 4096 NT_STATUS_OK
ReadX 10890 61440 4096 4096 NT_STATUS_OK
ReadX 10890 65536 4096 4096 NT_STATUS_OK
ReadX 10890 69632 4096 4096 NT_STATUS_OK
ReadX 10890 73728 4096 4096 NT_STATUS_OK
ReadX 10890 77824 4096 4096 NT_STATUS_OK
ReadX 10890 81920 4096 4096 NT_STATUS_OK
ReadX 10890 86016 4096 4096 NT_STATUS_OK
ReadX 10890 90112 4096 4096 NT_STATUS_OK
ReadX 10890 94208 4096 4096 NT_STATUS_OK
ReadX 10890 98304 4096 4096 NT_STATUS_OK
ReadX 10890 102400 4096 4096 NT_STATUS_OK
ReadX 10890 106496 4096 4096 NT_STATUS_OK
ReadX 10890 110592 4096 4096 NT_STATUS_OK
ReadX 10890 114688 4096 4096 NT_STATUS_OK
ReadX 10890 118784 4096 4096 NT_STATUS_OK
ReadX 10890 122880 4096 4096 NT_STATUS_OK
ReadX 10890 126976 4096 4096 NT_STATUS_OK
ReadX 10890 131072 4096 4096 NT_STATUS_OK
ReadX 10890 135168 4096 4096 NT_STATUS_OK
ReadX 10890 139264 4096 4096 NT_STATUS_OK
ReadX 10890 143360 4096 4096 NT_STATUS_OK
ReadX 10890 147456 4096 4096 NT_STATUS_OK
ReadX 10890 151552 4096 4096 NT_STATUS_OK
ReadX 10890 155648 4096 4096 NT_STATUS_OK
ReadX 10890 159744 4096 4096 NT_STATUS_OK
ReadX 10890 163840 4096 4096 NT_STATUS_OK
ReadX 10890 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10890 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10891 NT_STATUS_OK
Close 10891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10889 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10893 NT_STATUS_OK
WriteX 10893 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10893 258 NT_STATUS_OK
Close 10890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10894 NT_STATUS_OK
SET_FILE_INFORMATION 10894 1004 NT_STATUS_OK
Close 10894 NT_STATUS_OK
WriteX 10893 0 42388 42388 NT_STATUS_OK
Close 10893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10895 NT_STATUS_OK
Close 10895 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10897 NT_STATUS_OK
ReadX 10897 0 4096 4096 NT_STATUS_OK
ReadX 10897 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10898 NT_STATUS_OK
WriteX 10898 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10898 258 NT_STATUS_OK
SET_FILE_INFORMATION 10898 1004 NT_STATUS_OK
WriteX 10898 0 42652 42652 NT_STATUS_OK
Close 10898 NT_STATUS_OK
Close 10897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10900 NT_STATUS_OK
Close 10900 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10902 NT_STATUS_OK
ReadX 10902 0 4096 4096 NT_STATUS_OK
ReadX 10902 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10904 NT_STATUS_OK
Close 10904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10907 NT_STATUS_OK
WriteX 10907 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10907 258 NT_STATUS_OK
WriteX 10907 0 65536 65536 NT_STATUS_OK
WriteX 10907 65536 49 49 NT_STATUS_OK
Close 10907 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10908 NT_STATUS_OK
ReadX 10908 0 61440 61440 NT_STATUS_OK
ReadX 10908 61440 4096 4096 NT_STATUS_OK
ReadX 10908 65536 61440 61440 NT_STATUS_OK
ReadX 10908 126976 4096 4096 NT_STATUS_OK
ReadX 10908 131072 61440 61440 NT_STATUS_OK
ReadX 10908 192512 4096 4096 NT_STATUS_OK
ReadX 10908 196608 61440 61440 NT_STATUS_OK
ReadX 10908 258048 4096 4096 NT_STATUS_OK
ReadX 10908 262144 61440 61440 NT_STATUS_OK
ReadX 10908 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10909 NT_STATUS_OK
ReadX 10909 0 61440 61440 NT_STATUS_OK
ReadX 10909 61440 4096 4096 NT_STATUS_OK
ReadX 10909 65536 61440 61440 NT_STATUS_OK
ReadX 10909 126976 4096 4096 NT_STATUS_OK
ReadX 10909 131072 61440 61440 NT_STATUS_OK
ReadX 10909 192512 4096 4096 NT_STATUS_OK
ReadX 10909 196608 61440 61440 NT_STATUS_OK
ReadX 10909 258048 4096 4096 NT_STATUS_OK
ReadX 10909 262144 61440 61440 NT_STATUS_OK
ReadX 10909 323584 4096 4096 NT_STATUS_OK
ReadX 10909 327680 61440 61440 NT_STATUS_OK
ReadX 10909 389120 4096 4096 NT_STATUS_OK
ReadX 10909 393216 61440 61440 NT_STATUS_OK
ReadX 10909 454656 4096 4096 NT_STATUS_OK
ReadX 10909 458752 61440 61440 NT_STATUS_OK
ReadX 10909 520192 4096 4096 NT_STATUS_OK
ReadX 10909 524288 61440 61440 NT_STATUS_OK
ReadX 10909 585728 4096 4096 NT_STATUS_OK
ReadX 10909 589824 61440 61440 NT_STATUS_OK
ReadX 10909 651264 4096 4096 NT_STATUS_OK
ReadX 10909 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10910 NT_STATUS_OK
ReadX 10910 0 61440 61440 NT_STATUS_OK
ReadX 10910 61440 4096 4096 NT_STATUS_OK
ReadX 10910 65536 61440 61440 NT_STATUS_OK
ReadX 10910 126976 4096 4096 NT_STATUS_OK
ReadX 10910 131072 61440 61440 NT_STATUS_OK
ReadX 10910 192512 4096 4096 NT_STATUS_OK
ReadX 10910 196608 61440 61440 NT_STATUS_OK
ReadX 10910 258048 4096 4096 NT_STATUS_OK
ReadX 10910 262144 61440 61440 NT_STATUS_OK
ReadX 10910 323584 4096 4096 NT_STATUS_OK
ReadX 10910 327680 61440 61440 NT_STATUS_OK
ReadX 10910 389120 4096 4096 NT_STATUS_OK
ReadX 10910 393216 61440 61440 NT_STATUS_OK
ReadX 10910 454656 4096 4096 NT_STATUS_OK
ReadX 10910 458752 61440 61440 NT_STATUS_OK
ReadX 10910 520192 4096 4096 NT_STATUS_OK
ReadX 10910 524288 61440 61440 NT_STATUS_OK
ReadX 10910 585728 4096 4096 NT_STATUS_OK
ReadX 10910 589824 61440 61440 NT_STATUS_OK
ReadX 10910 651264 4096 4096 NT_STATUS_OK
ReadX 10910 655360 61440 61440 NT_STATUS_OK
ReadX 10910 716800 4096 4096 NT_STATUS_OK
ReadX 10910 720896 61440 61440 NT_STATUS_OK
ReadX 10910 782336 4096 4096 NT_STATUS_OK
ReadX 10910 786432 61440 61440 NT_STATUS_OK
ReadX 10910 847872 4096 4096 NT_STATUS_OK
ReadX 10910 851968 61440 61440 NT_STATUS_OK
ReadX 10910 913408 4096 4096 NT_STATUS_OK
ReadX 10910 917504 61440 61440 NT_STATUS_OK
ReadX 10910 978944 4096 4096 NT_STATUS_OK
ReadX 10910 983040 61440 61440 NT_STATUS_OK
ReadX 10910 1044480 4096 4096 NT_STATUS_OK
ReadX 10910 1048576 61440 61440 NT_STATUS_OK
ReadX 10910 1110016 4096 4096 NT_STATUS_OK
ReadX 10910 1114112 61440 61440 NT_STATUS_OK
ReadX 10910 1175552 4096 4096 NT_STATUS_OK
ReadX 10910 1179648 61440 61440 NT_STATUS_OK
ReadX 10910 1241088 4096 4096 NT_STATUS_OK
ReadX 10910 1245184 61440 61440 NT_STATUS_OK
ReadX 10910 1306624 4096 4096 NT_STATUS_OK
ReadX 10910 1310720 61440 61440 NT_STATUS_OK
ReadX 10910 1372160 4096 4096 NT_STATUS_OK
ReadX 10910 1376256 61440 61440 NT_STATUS_OK
ReadX 10910 1437696 4096 4096 NT_STATUS_OK
ReadX 10910 1441792 61440 61440 NT_STATUS_OK
ReadX 10910 1503232 4096 4096 NT_STATUS_OK
ReadX 10910 1507328 61440 61440 NT_STATUS_OK
ReadX 10910 1568768 4096 4096 NT_STATUS_OK
ReadX 10910 1572864 61440 61440 NT_STATUS_OK
ReadX 10910 1634304 4096 4096 NT_STATUS_OK
ReadX 10910 1638400 61440 61440 NT_STATUS_OK
ReadX 10910 1699840 4096 4096 NT_STATUS_OK
ReadX 10910 1703936 61440 61440 NT_STATUS_OK
ReadX 10910 1765376 4096 4096 NT_STATUS_OK
ReadX 10910 1769472 61440 61440 NT_STATUS_OK
ReadX 10910 1830912 4096 4096 NT_STATUS_OK
ReadX 10910 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10911 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10912 NT_STATUS_OK
QUERY_FILE_INFORMATION 10912 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10912 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10912 1005 NT_STATUS_OK
ReadX 10912 2156 24 24 NT_STATUS_OK
ReadX 10912 2139 276 276 NT_STATUS_OK
ReadX 10912 2136 14 14 NT_STATUS_OK
ReadX 10912 2136 7 7 NT_STATUS_OK
ReadX 10912 2138 12 12 NT_STATUS_OK
ReadX 10912 2137 8 8 NT_STATUS_OK
ReadX 10912 2135 15 15 NT_STATUS_OK
ReadX 10912 0 16 16 NT_STATUS_OK
ReadX 10912 16 2048 2048 NT_STATUS_OK
ReadX 10912 2064 2048 2048 NT_STATUS_OK
ReadX 10912 257 2048 2048 NT_STATUS_OK
ReadX 10912 385 2048 2048 NT_STATUS_OK
ReadX 10912 513 2048 2048 NT_STATUS_OK
ReadX 10912 641 2048 2048 NT_STATUS_OK
ReadX 10912 769 2048 2048 NT_STATUS_OK
ReadX 10912 897 2048 2048 NT_STATUS_OK
ReadX 10912 1025 2048 2048 NT_STATUS_OK
ReadX 10912 1153 2048 2048 NT_STATUS_OK
ReadX 10912 1281 2048 2048 NT_STATUS_OK
ReadX 10912 1409 2048 2048 NT_STATUS_OK
ReadX 10912 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10914 NT_STATUS_OK
Close 10914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10908 NT_STATUS_OK
Close 10909 NT_STATUS_OK
Close 10910 NT_STATUS_OK
Close 10902 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10917 NT_STATUS_OK
WriteX 10917 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10917 258 NT_STATUS_OK
WriteX 10917 0 10575 10575 NT_STATUS_OK
Flush 10917 NT_STATUS_OK
Close 10917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10918 NT_STATUS_OK
Close 10918 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
Close 10912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10922 NT_STATUS_OK
LockX 10922 2147483538 1 NT_STATUS_OK
UnlockX 10922 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10922 1005 NT_STATUS_OK
ReadX 10922 0 512 512 NT_STATUS_OK
ReadX 10922 512 512 512 NT_STATUS_OK
ReadX 10922 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10922 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10922 1004 NT_STATUS_OK
Close 10922 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10923 NT_STATUS_OK
QUERY_FILE_INFORMATION 10923 1005 NT_STATUS_OK
ReadX 10923 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10924 NT_STATUS_OK
LockX 10924 2147483538 1 NT_STATUS_OK
UnlockX 10924 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10924 1005 NT_STATUS_OK
ReadX 10924 0 512 512 NT_STATUS_OK
ReadX 10924 512 512 512 NT_STATUS_OK
ReadX 10924 1024 512 512 NT_STATUS_OK
ReadX 10924 288 20 20 NT_STATUS_OK
ReadX 10924 308 2084 2084 NT_STATUS_OK
ReadX 10924 388 2084 2084 NT_STATUS_OK
ReadX 10924 388 2084 2084 NT_STATUS_OK
ReadX 10911 2157 1386 1386 NT_STATUS_OK
ReadX 10924 2472 399 399 NT_STATUS_OK
ReadX 10924 3072 1536 1536 NT_STATUS_OK
ReadX 10924 544 149 149 NT_STATUS_OK
ReadX 10924 693 485 485 NT_STATUS_OK
Close 10924 NT_STATUS_OK
ReadX 10911 2157 4096 4096 NT_STATUS_OK
ReadX 10911 6253 4096 4096 NT_STATUS_OK
ReadX 10911 10349 4096 4096 NT_STATUS_OK
ReadX 10911 14445 4096 4096 NT_STATUS_OK
ReadX 10911 18541 4096 4096 NT_STATUS_OK
ReadX 10911 22637 256 256 NT_STATUS_OK
ReadX 10911 22893 4096 4096 NT_STATUS_OK
ReadX 10911 26989 4096 4096 NT_STATUS_OK
ReadX 10911 31085 4096 4096 NT_STATUS_OK
ReadX 10911 35181 4096 4096 NT_STATUS_OK
ReadX 10911 39277 4096 4096 NT_STATUS_OK
ReadX 10911 43373 4096 4096 NT_STATUS_OK
ReadX 10911 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10911 2157 1024 1024 NT_STATUS_OK
ReadX 10911 1667 4688 4688 NT_STATUS_OK
ReadX 10911 6355 3516 3516 NT_STATUS_OK
ReadX 10911 9871 16384 16384 NT_STATUS_OK
ReadX 10911 26255 3771 3771 NT_STATUS_OK
ReadX 10911 30026 2048 2048 NT_STATUS_OK
ReadX 10911 32074 1024 1024 NT_STATUS_OK
ReadX 10911 33098 6652 6652 NT_STATUS_OK
ReadX 10911 39750 16384 16384 NT_STATUS_OK
ReadX 10911 56134 10496 10496 NT_STATUS_OK
ReadX 10911 66630 1784 1784 NT_STATUS_OK
ReadX 10911 68414 90 90 NT_STATUS_OK
ReadX 10911 68504 273 273 NT_STATUS_OK
ReadX 10911 68777 1600 1600 NT_STATUS_OK
ReadX 10911 70377 640 640 NT_STATUS_OK
ReadX 10911 71017 1280 1280 NT_STATUS_OK
ReadX 10911 72297 8464 8464 NT_STATUS_OK
ReadX 10911 80761 158 158 NT_STATUS_OK
ReadX 10911 80919 912 912 NT_STATUS_OK
ReadX 10911 81831 1980 1980 NT_STATUS_OK
ReadX 10911 83811 2256 2256 NT_STATUS_OK
ReadX 10911 86067 400 400 NT_STATUS_OK
ReadX 10911 86467 252 252 NT_STATUS_OK
ReadX 10911 86719 42 42 NT_STATUS_OK
ReadX 10911 86761 725 725 NT_STATUS_OK
ReadX 10911 2009 512 512 NT_STATUS_OK
ReadX 10911 3895 9 9 NT_STATUS_OK
ReadX 10911 3781 46 46 NT_STATUS_OK
ReadX 10911 4059 92 92 NT_STATUS_OK
ReadX 10911 3781 92 92 NT_STATUS_OK
ReadX 10911 3986 184 184 NT_STATUS_OK
ReadX 10911 3987 16384 16384 NT_STATUS_OK
ReadX 10911 3902 16384 16384 NT_STATUS_OK
ReadX 10911 3781 10240 10240 NT_STATUS_OK
ReadX 10911 3821 16384 16384 NT_STATUS_OK
ReadX 10911 3891 935 935 NT_STATUS_OK
ReadX 10911 4060 10240 10240 NT_STATUS_OK
ReadX 10911 4059 184 184 NT_STATUS_OK
ReadX 10911 256 184 184 NT_STATUS_OK
ReadX 10911 256 1026 1026 NT_STATUS_OK
ReadX 10911 3901 326 326 NT_STATUS_OK
ReadX 10911 3899 652 652 NT_STATUS_OK
ReadX 10911 256 2 2 NT_STATUS_OK
ReadX 10911 258 4948 4948 NT_STATUS_OK
Close 10911 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10926 NT_STATUS_OK
Close 10926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10929 NT_STATUS_OK
WriteX 10929 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10929 258 NT_STATUS_OK
WriteX 10929 0 65536 65536 NT_STATUS_OK
WriteX 10929 65536 65536 65536 NT_STATUS_OK
WriteX 10929 131072 65536 65536 NT_STATUS_OK
WriteX 10929 196608 65536 65536 NT_STATUS_OK
WriteX 10929 262144 65536 65536 NT_STATUS_OK
WriteX 10929 327680 65536 65536 NT_STATUS_OK
WriteX 10929 393216 65536 65536 NT_STATUS_OK
WriteX 10929 458752 65536 65536 NT_STATUS_OK
WriteX 10929 524288 65536 65536 NT_STATUS_OK
WriteX 10929 589824 35257 35257 NT_STATUS_OK
Close 10929 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10931 NT_STATUS_OK
Close 10931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10934 NT_STATUS_OK
WriteX 10934 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10934 258 NT_STATUS_OK
WriteX 10934 0 65536 65536 NT_STATUS_OK
WriteX 10934 65536 65536 65536 NT_STATUS_OK
WriteX 10934 131072 65536 65536 NT_STATUS_OK
WriteX 10934 196608 65536 65536 NT_STATUS_OK
WriteX 10934 262144 65536 65536 NT_STATUS_OK
WriteX 10934 327680 65536 65536 NT_STATUS_OK
WriteX 10934 393216 65536 65536 NT_STATUS_OK
WriteX 10934 458752 65536 65536 NT_STATUS_OK
WriteX 10934 524288 65536 65536 NT_STATUS_OK
WriteX 10934 589824 57598 57598 NT_STATUS_OK
Close 10934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10936 NT_STATUS_OK
WriteX 10936 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10936 258 NT_STATUS_OK
WriteX 10936 0 12543 12543 NT_STATUS_OK
Flush 10936 NT_STATUS_OK
Close 10936 NT_STATUS_OK
Close 10920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10938 NT_STATUS_OK
Close 10938 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10940 NT_STATUS_OK
ReadX 10940 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10942 NT_STATUS_OK
QUERY_FILE_INFORMATION 10942 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10942 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10942 1005 NT_STATUS_OK
ReadX 10942 1938 24 24 NT_STATUS_OK
ReadX 10942 1920 276 276 NT_STATUS_OK
ReadX 10942 1918 14 14 NT_STATUS_OK
ReadX 10942 1918 7 7 NT_STATUS_OK
ReadX 10942 1919 12 12 NT_STATUS_OK
ReadX 10942 1919 8 8 NT_STATUS_OK
ReadX 10942 1917 15 15 NT_STATUS_OK
ReadX 10942 0 16 16 NT_STATUS_OK
ReadX 10942 16 2048 2048 NT_STATUS_OK
ReadX 10942 2064 2048 2048 NT_STATUS_OK
ReadX 10942 257 2048 2048 NT_STATUS_OK
ReadX 10942 385 2048 2048 NT_STATUS_OK
ReadX 10942 513 2048 2048 NT_STATUS_OK
ReadX 10942 641 2048 2048 NT_STATUS_OK
ReadX 10942 769 2048 2048 NT_STATUS_OK
ReadX 10942 897 2048 2048 NT_STATUS_OK
ReadX 10942 1025 2048 2048 NT_STATUS_OK
ReadX 10942 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10944 NT_STATUS_OK
Close 10944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10947 NT_STATUS_OK
WriteX 10947 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10947 258 NT_STATUS_OK
WriteX 10947 0 11588 11588 NT_STATUS_OK
Flush 10947 NT_STATUS_OK
Close 10947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10948 NT_STATUS_OK
Close 10948 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10950 NT_STATUS_OK
ReadX 10950 0 4096 4096 NT_STATUS_OK
Close 10942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10952 NT_STATUS_OK
WriteX 10952 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10952 258 NT_STATUS_OK
WriteX 10952 0 11615 11615 NT_STATUS_OK
Flush 10952 NT_STATUS_OK
Close 10952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10954 NT_STATUS_OK
Close 10954 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10956 NT_STATUS_OK
ReadX 10956 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10958 NT_STATUS_OK
Close 10958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10961 NT_STATUS_OK
WriteX 10961 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10961 258 NT_STATUS_OK
WriteX 10961 0 65536 65536 NT_STATUS_OK
WriteX 10961 65536 16050 16050 NT_STATUS_OK
Close 10961 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10941 1939 64 64 NT_STATUS_OK
ReadX 10941 128 248 248 NT_STATUS_OK
ReadX 10941 128 568 568 NT_STATUS_OK
ReadX 10941 3872 1536 1536 NT_STATUS_OK
ReadX 10941 3456 2560 2560 NT_STATUS_OK
ReadX 10941 3136 512 512 NT_STATUS_OK
ReadX 10941 2880 4096 4096 NT_STATUS_OK
ReadX 10941 3264 3072 3072 NT_STATUS_OK
ReadX 10941 320 4096 4096 NT_STATUS_OK
ReadX 10941 1024 4096 4096 NT_STATUS_OK
ReadX 10941 3616 4096 4096 NT_STATUS_OK
ReadX 10941 1939 64 64 NT_STATUS_OK
ReadX 10941 128 248 248 NT_STATUS_OK
ReadX 10941 128 608 608 NT_STATUS_OK
ReadX 10941 2858 1024 1024 NT_STATUS_OK
ReadX 10941 2810 4096 4096 NT_STATUS_OK
ReadX 10941 2826 4096 4096 NT_STATUS_OK
ReadX 10941 2580 2048 2048 NT_STATUS_OK
ReadX 10941 2800 2560 2560 NT_STATUS_OK
ReadX 10941 2100 4096 4096 NT_STATUS_OK
ReadX 10941 2084 4096 4096 NT_STATUS_OK
ReadX 10941 868 4096 4096 NT_STATUS_OK
ReadX 10941 2324 4096 4096 NT_STATUS_OK
ReadX 10941 884 4096 4096 NT_STATUS_OK
ReadX 10941 2604 1024 1024 NT_STATUS_OK
ReadX 10941 580 4096 4096 NT_STATUS_OK
ReadX 10941 596 4096 4096 NT_STATUS_OK
ReadX 10941 2752 4096 4096 NT_STATUS_OK
ReadX 10941 2842 1024 1024 NT_STATUS_OK
ReadX 10941 660 4096 4096 NT_STATUS_OK
ReadX 10941 2720 4096 4096 NT_STATUS_OK
ReadX 10941 2736 4096 4096 NT_STATUS_OK
ReadX 10941 628 4096 4096 NT_STATUS_OK
ReadX 10941 2704 4096 4096 NT_STATUS_OK
ReadX 10941 1556 4096 4096 NT_STATUS_OK
ReadX 10941 576 4096 4096 NT_STATUS_OK
ReadX 10941 3168 1536 1536 NT_STATUS_OK
ReadX 10941 832 4096 4096 NT_STATUS_OK
ReadX 10941 1088 4096 4096 NT_STATUS_OK
ReadX 10941 1344 4096 4096 NT_STATUS_OK
ReadX 10941 1600 4096 4096 NT_STATUS_OK
ReadX 10941 1856 4096 4096 NT_STATUS_OK
ReadX 10941 2112 4096 4096 NT_STATUS_OK
ReadX 10941 1892 4096 4096 NT_STATUS_OK
ReadX 10941 820 4096 4096 NT_STATUS_OK
ReadX 10941 788 4096 4096 NT_STATUS_OK
ReadX 10941 1604 4096 4096 NT_STATUS_OK
ReadX 10941 3648 4096 4096 NT_STATUS_OK
ReadX 10941 2608 4096 4096 NT_STATUS_OK
ReadX 10941 548 4096 4096 NT_STATUS_OK
ReadX 10941 740 4096 4096 NT_STATUS_OK
ReadX 10941 1344 4096 4096 NT_STATUS_OK
ReadX 10941 3392 4096 4096 NT_STATUS_OK
ReadX 10941 3904 4096 4096 NT_STATUS_OK
ReadX 10941 644 4096 4096 NT_STATUS_OK
ReadX 10941 676 4096 4096 NT_STATUS_OK
ReadX 10941 2688 4096 4096 NT_STATUS_OK
ReadX 10941 320 4096 4096 NT_STATUS_OK
ReadX 10941 900 4096 4096 NT_STATUS_OK
ReadX 10941 1908 4096 4096 NT_STATUS_OK
ReadX 10941 852 4096 4096 NT_STATUS_OK
ReadX 10941 724 4096 4096 NT_STATUS_OK
ReadX 10941 2292 4096 4096 NT_STATUS_OK
ReadX 10941 612 4096 4096 NT_STATUS_OK
ReadX 10941 388 4096 4096 NT_STATUS_OK
ReadX 10941 2368 4096 4096 NT_STATUS_OK
ReadX 10941 2624 4096 4096 NT_STATUS_OK
ReadX 10941 500 4096 4096 NT_STATUS_OK
ReadX 10941 356 4096 4096 NT_STATUS_OK
ReadX 10941 1024 4096 4096 NT_STATUS_OK
ReadX 10941 576 4096 4096 NT_STATUS_OK
ReadX 10941 340 4096 4096 NT_STATUS_OK
ReadX 10941 420 4096 4096 NT_STATUS_OK
ReadX 10941 1600 4096 4096 NT_STATUS_OK
ReadX 10941 404 4096 4096 NT_STATUS_OK
ReadX 10941 1428 4096 4096 NT_STATUS_OK
ReadX 10941 2656 4096 4096 NT_STATUS_OK
ReadX 10941 2624 4096 4096 NT_STATUS_OK
ReadX 10941 452 4096 4096 NT_STATUS_OK
ReadX 10941 692 4096 4096 NT_STATUS_OK
ReadX 10941 564 4096 4096 NT_STATUS_OK
ReadX 10941 372 4096 4096 NT_STATUS_OK
ReadX 10941 468 4096 4096 NT_STATUS_OK
ReadX 10941 484 4096 4096 NT_STATUS_OK
ReadX 10941 1088 4096 4096 NT_STATUS_OK
ReadX 10941 1924 4096 4096 NT_STATUS_OK
ReadX 10941 2768 4096 4096 NT_STATUS_OK
ReadX 10941 832 4096 4096 NT_STATUS_OK
ReadX 10941 836 4096 4096 NT_STATUS_OK
ReadX 10941 1856 4096 4096 NT_STATUS_OK
ReadX 10941 2640 4096 4096 NT_STATUS_OK
ReadX 10941 436 4096 4096 NT_STATUS_OK
ReadX 10941 1828 4096 4096 NT_STATUS_OK
ReadX 10941 804 4096 4096 NT_STATUS_OK
ReadX 10941 1860 4096 4096 NT_STATUS_OK
ReadX 10941 1812 4096 4096 NT_STATUS_OK
ReadX 10941 756 4096 4096 NT_STATUS_OK
ReadX 10941 1636 4096 4096 NT_STATUS_OK
ReadX 10941 772 4096 4096 NT_STATUS_OK
ReadX 10941 2036 4096 4096 NT_STATUS_OK
ReadX 10941 1220 4096 4096 NT_STATUS_OK
ReadX 10941 1652 4096 4096 NT_STATUS_OK
ReadX 10941 2588 4096 4096 NT_STATUS_OK
ReadX 10941 916 4096 4096 NT_STATUS_OK
ReadX 10941 260 4096 4096 NT_STATUS_OK
ReadX 10941 932 4096 4096 NT_STATUS_OK
ReadX 10941 2624 4096 4096 NT_STATUS_OK
ReadX 10941 308 4096 4096 NT_STATUS_OK
ReadX 10941 292 4096 4096 NT_STATUS_OK
ReadX 10941 1140 4096 4096 NT_STATUS_OK
ReadX 10941 276 4096 4096 NT_STATUS_OK
ReadX 10941 2020 4096 4096 NT_STATUS_OK
ReadX 10941 2880 4096 4096 NT_STATUS_OK
ReadX 10941 516 4096 4096 NT_STATUS_OK
ReadX 10941 1844 4096 4096 NT_STATUS_OK
ReadX 10941 1124 4096 4096 NT_STATUS_OK
ReadX 10941 3136 4096 4096 NT_STATUS_OK
ReadX 10941 324 4096 4096 NT_STATUS_OK
ReadX 10941 1156 4096 4096 NT_STATUS_OK
ReadX 10941 1172 4096 4096 NT_STATUS_OK
ReadX 10941 2112 4096 4096 NT_STATUS_OK
ReadX 10941 2368 4096 4096 NT_STATUS_OK
ReadX 10941 964 4096 4096 NT_STATUS_OK
ReadX 10941 980 4096 4096 NT_STATUS_OK
ReadX 10941 1012 4096 4096 NT_STATUS_OK
ReadX 10941 532 4096 4096 NT_STATUS_OK
ReadX 10941 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10941 1620 4096 4096 NT_STATUS_OK
ReadX 10941 1604 4096 4096 NT_STATUS_OK
ReadX 10941 2116 4096 4096 NT_STATUS_OK
ReadX 10941 2132 4096 4096 NT_STATUS_OK
ReadX 10941 2148 4096 4096 NT_STATUS_OK
ReadX 10941 2276 4096 4096 NT_STATUS_OK
ReadX 10941 1540 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10963 NT_STATUS_OK
Close 10963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10966 NT_STATUS_OK
QUERY_FILE_INFORMATION 10921 1004 NT_STATUS_OK
Close 10921 NT_STATUS_OK
WriteX 10966 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10966 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10923 1004 NT_STATUS_OK
Close 10923 NT_STATUS_OK
WriteX 10966 0 65536 65536 NT_STATUS_OK
WriteX 10966 65536 64850 64850 NT_STATUS_OK
Close 10966 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10968 NT_STATUS_OK
WriteX 10968 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10968 258 NT_STATUS_OK
ReadX 10941 2068 4096 4096 NT_STATUS_OK
ReadX 10941 1588 4096 4096 NT_STATUS_OK
ReadX 10941 1572 4096 4096 NT_STATUS_OK
WriteX 10968 0 18630 18630 NT_STATUS_OK
Flush 10968 NT_STATUS_OK
Close 10968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10970 NT_STATUS_OK
Close 10970 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10972 NT_STATUS_OK
ReadX 10972 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10941 612 4096 4096 NT_STATUS_OK
ReadX 10941 564 4096 4096 NT_STATUS_OK
ReadX 10941 1876 4096 4096 NT_STATUS_OK
ReadX 10941 628 4096 4096 NT_STATUS_OK
ReadX 10941 740 4096 4096 NT_STATUS_OK
ReadX 10941 724 4096 4096 NT_STATUS_OK
ReadX 10941 644 4096 4096 NT_STATUS_OK
ReadX 10941 2324 4096 4096 NT_STATUS_OK
ReadX 10941 660 4096 4096 NT_STATUS_OK
ReadX 10941 852 4096 4096 NT_STATUS_OK
ReadX 10941 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10941 2368 4096 4096 NT_STATUS_OK
ReadX 10941 1024 4096 4096 NT_STATUS_OK
ReadX 10941 320 4096 4096 NT_STATUS_OK
ReadX 10941 580 4096 4096 NT_STATUS_OK
ReadX 10941 3136 512 512 NT_STATUS_OK
ReadX 10941 2880 4096 4096 NT_STATUS_OK
Close 10941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10973 NT_STATUS_OK
ReadX 10973 61440 4096 4096 NT_STATUS_OK
ReadX 10973 126976 4096 4096 NT_STATUS_OK
WriteX 10973 0 65536 65536 NT_STATUS_OK
WriteX 10973 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10974 NT_STATUS_OK
ReadX 10974 61440 4096 4096 NT_STATUS_OK
ReadX 10974 126976 4096 4096 NT_STATUS_OK
ReadX 10974 192512 4096 4096 NT_STATUS_OK
ReadX 10974 258048 4096 4096 NT_STATUS_OK
WriteX 10974 0 65536 65536 NT_STATUS_OK
WriteX 10974 65536 65536 65536 NT_STATUS_OK
WriteX 10974 131072 65536 65536 NT_STATUS_OK
WriteX 10974 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10975 NT_STATUS_OK
ReadX 10975 61440 4096 4096 NT_STATUS_OK
ReadX 10975 126976 4096 4096 NT_STATUS_OK
ReadX 10975 192512 4096 4096 NT_STATUS_OK
ReadX 10975 258048 4096 4096 NT_STATUS_OK
ReadX 10975 323584 4096 4096 NT_STATUS_OK
ReadX 10975 389120 4096 4096 NT_STATUS_OK
ReadX 10975 454656 4096 4096 NT_STATUS_OK
ReadX 10975 520192 4096 4096 NT_STATUS_OK
WriteX 10975 0 65536 65536 NT_STATUS_OK
WriteX 10975 65536 65536 65536 NT_STATUS_OK
WriteX 10975 131072 65536 65536 NT_STATUS_OK
WriteX 10975 196608 65536 65536 NT_STATUS_OK
WriteX 10975 262144 65536 65536 NT_STATUS_OK
WriteX 10975 327680 65536 65536 NT_STATUS_OK
WriteX 10975 393216 65536 65536 NT_STATUS_OK
WriteX 10975 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10976 NT_STATUS_OK
ReadX 10976 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10977 NT_STATUS_OK
Close 10977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10978 NT_STATUS_OK
WriteX 10978 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10978 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10976 0 8192 8192 NT_STATUS_OK
Flush 10976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10976 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10976 0 8192 8192 NT_STATUS_OK
Flush 10976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10976 0 8192 8192 NT_STATUS_OK
Flush 10976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10976 0 8192 8192 NT_STATUS_OK
Flush 10976 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10980 NT_STATUS_OK
Close 10980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10972 NT_STATUS_OK
Close 10940 NT_STATUS_OK
Close 10973 NT_STATUS_OK
Close 10974 NT_STATUS_OK
Close 10975 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10983 NT_STATUS_OK
WriteX 10983 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10983 258 NT_STATUS_OK
WriteX 10983 0 62591 62591 NT_STATUS_OK
Close 10983 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10985 NT_STATUS_OK
Close 10985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10988 NT_STATUS_OK
WriteX 10988 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10988 258 NT_STATUS_OK
WriteX 10988 0 10845 10845 NT_STATUS_OK
Close 10988 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10990 NT_STATUS_OK
Close 10990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10993 NT_STATUS_OK
WriteX 10993 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10993 258 NT_STATUS_OK
WriteX 10993 0 30118 30118 NT_STATUS_OK
Close 10993 NT_STATUS_OK
WriteX 10976 0 4096 4096 NT_STATUS_OK
WriteX 10978 0 64 64 NT_STATUS_OK
Close 10978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10976 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10995 NT_STATUS_OK
ReadX 10995 0 61440 61440 NT_STATUS_OK
ReadX 10995 61440 4096 4096 NT_STATUS_OK
ReadX 10995 65536 61440 61440 NT_STATUS_OK
ReadX 10995 126976 4096 4096 NT_STATUS_OK
ReadX 10995 131072 61440 61440 NT_STATUS_OK
ReadX 10995 192512 4096 4096 NT_STATUS_OK
ReadX 10995 196608 61440 61440 NT_STATUS_OK
ReadX 10995 258048 4096 4096 NT_STATUS_OK
ReadX 10995 262144 61440 61440 NT_STATUS_OK
ReadX 10995 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 61440 61440 NT_STATUS_OK
ReadX 10996 61440 4096 4096 NT_STATUS_OK
ReadX 10996 65536 61440 61440 NT_STATUS_OK
ReadX 10996 126976 4096 4096 NT_STATUS_OK
ReadX 10996 131072 61440 61440 NT_STATUS_OK
ReadX 10996 192512 4096 4096 NT_STATUS_OK
ReadX 10996 196608 61440 61440 NT_STATUS_OK
ReadX 10996 258048 4096 4096 NT_STATUS_OK
ReadX 10996 262144 61440 61440 NT_STATUS_OK
ReadX 10996 323584 4096 4096 NT_STATUS_OK
ReadX 10996 327680 61440 61440 NT_STATUS_OK
ReadX 10996 389120 4096 4096 NT_STATUS_OK
ReadX 10996 393216 61440 61440 NT_STATUS_OK
ReadX 10996 454656 4096 4096 NT_STATUS_OK
ReadX 10996 458752 61440 61440 NT_STATUS_OK
ReadX 10996 520192 4096 4096 NT_STATUS_OK
ReadX 10996 524288 61440 61440 NT_STATUS_OK
ReadX 10996 585728 4096 4096 NT_STATUS_OK
ReadX 10996 589824 61440 61440 NT_STATUS_OK
ReadX 10996 651264 4096 4096 NT_STATUS_OK
ReadX 10996 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10997 NT_STATUS_OK
ReadX 10997 0 61440 61440 NT_STATUS_OK
ReadX 10997 61440 4096 4096 NT_STATUS_OK
ReadX 10997 65536 61440 61440 NT_STATUS_OK
ReadX 10997 126976 4096 4096 NT_STATUS_OK
ReadX 10997 131072 61440 61440 NT_STATUS_OK
ReadX 10997 192512 4096 4096 NT_STATUS_OK
ReadX 10997 196608 61440 61440 NT_STATUS_OK
ReadX 10997 258048 4096 4096 NT_STATUS_OK
ReadX 10997 262144 61440 61440 NT_STATUS_OK
ReadX 10997 323584 4096 4096 NT_STATUS_OK
ReadX 10997 327680 61440 61440 NT_STATUS_OK
ReadX 10997 389120 4096 4096 NT_STATUS_OK
ReadX 10997 393216 61440 61440 NT_STATUS_OK
ReadX 10997 454656 4096 4096 NT_STATUS_OK
ReadX 10997 458752 61440 61440 NT_STATUS_OK
ReadX 10997 520192 4096 4096 NT_STATUS_OK
ReadX 10997 524288 61440 61440 NT_STATUS_OK
ReadX 10997 585728 4096 4096 NT_STATUS_OK
ReadX 10997 589824 61440 61440 NT_STATUS_OK
ReadX 10997 651264 4096 4096 NT_STATUS_OK
ReadX 10997 655360 61440 61440 NT_STATUS_OK
ReadX 10997 716800 4096 4096 NT_STATUS_OK
ReadX 10997 720896 61440 61440 NT_STATUS_OK
ReadX 10997 782336 4096 4096 NT_STATUS_OK
ReadX 10997 786432 61440 61440 NT_STATUS_OK
ReadX 10997 847872 4096 4096 NT_STATUS_OK
ReadX 10997 851968 61440 61440 NT_STATUS_OK
ReadX 10997 913408 4096 4096 NT_STATUS_OK
ReadX 10997 917504 61440 61440 NT_STATUS_OK
ReadX 10997 978944 4096 4096 NT_STATUS_OK
ReadX 10997 983040 61440 61440 NT_STATUS_OK
ReadX 10997 1044480 4096 4096 NT_STATUS_OK
ReadX 10997 1048576 61440 61440 NT_STATUS_OK
ReadX 10997 1110016 4096 4096 NT_STATUS_OK
ReadX 10997 1114112 61440 61440 NT_STATUS_OK
ReadX 10997 1175552 4096 4096 NT_STATUS_OK
ReadX 10997 1179648 61440 61440 NT_STATUS_OK
ReadX 10997 1241088 4096 4096 NT_STATUS_OK
ReadX 10997 1245184 61440 61440 NT_STATUS_OK
ReadX 10997 1306624 4096 4096 NT_STATUS_OK
ReadX 10997 1310720 61440 61440 NT_STATUS_OK
ReadX 10997 1372160 4096 4096 NT_STATUS_OK
ReadX 10997 1376256 61440 61440 NT_STATUS_OK
ReadX 10997 1437696 4096 4096 NT_STATUS_OK
ReadX 10997 1441792 61440 61440 NT_STATUS_OK
ReadX 10997 1503232 4096 4096 NT_STATUS_OK
ReadX 10997 1507328 61440 61440 NT_STATUS_OK
ReadX 10997 1568768 4096 4096 NT_STATUS_OK
ReadX 10997 1572864 61440 61440 NT_STATUS_OK
ReadX 10997 1634304 4096 4096 NT_STATUS_OK
ReadX 10997 1638400 61440 61440 NT_STATUS_OK
ReadX 10997 1699840 4096 4096 NT_STATUS_OK
ReadX 10997 1703936 61440 61440 NT_STATUS_OK
ReadX 10997 1765376 4096 4096 NT_STATUS_OK
ReadX 10997 1769472 61440 61440 NT_STATUS_OK
ReadX 10997 1830912 4096 4096 NT_STATUS_OK
ReadX 10997 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10998 NT_STATUS_OK
Close 10998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10995 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Close 10997 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11000 NT_STATUS_OK
ReadX 11000 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11001 NT_STATUS_OK
ReadX 11001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11002 NT_STATUS_OK
ReadX 11002 0 4096 4096 NT_STATUS_OK
ReadX 11002 4096 4096 4096 NT_STATUS_OK
ReadX 11002 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11003 NT_STATUS_OK
Close 11003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11000 NT_STATUS_OK
Close 11001 NT_STATUS_OK
Close 11002 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11005 NT_STATUS_OK
ReadX 11005 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11006 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11006 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11007 NT_STATUS_OK
Close 11007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11005 NT_STATUS_OK
Close 11006 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11009 NT_STATUS_OK
ReadX 11009 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11010 NT_STATUS_OK
ReadX 11010 0 8192 8192 NT_STATUS_OK
ReadX 11010 8192 8192 8192 NT_STATUS_OK
ReadX 11010 16384 8192 8192 NT_STATUS_OK
ReadX 11010 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11012 NT_STATUS_OK
Close 11012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11010 NT_STATUS_OK
Close 11009 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11015 NT_STATUS_OK
WriteX 11015 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11015 258 NT_STATUS_OK
WriteX 11015 0 10438 10438 NT_STATUS_OK
Close 11015 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11016 NT_STATUS_OK
Close 11016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11017 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11018 NT_STATUS_OK
Close 11018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11019 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11020 NT_STATUS_OK
Close 11020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11021 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11022 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11023 NT_STATUS_OK
Close 11023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11024 NT_STATUS_OK
ReadX 11024 0 4096 4096 NT_STATUS_OK
ReadX 11024 4096 4096 4096 NT_STATUS_OK
ReadX 11024 8192 4096 4096 NT_STATUS_OK
ReadX 11024 12288 8192 8192 NT_STATUS_OK
ReadX 11024 20480 8192 8192 NT_STATUS_OK
ReadX 11024 28672 8192 8192 NT_STATUS_OK
ReadX 11024 36864 8192 8192 NT_STATUS_OK
ReadX 11024 45056 8192 8192 NT_STATUS_OK
ReadX 11024 53248 8192 8192 NT_STATUS_OK
ReadX 11024 61440 8192 8192 NT_STATUS_OK
ReadX 11024 69632 8192 8192 NT_STATUS_OK
ReadX 11024 77824 8192 8192 NT_STATUS_OK
ReadX 11024 86016 8192 8192 NT_STATUS_OK
ReadX 11024 94208 8192 8192 NT_STATUS_OK
ReadX 11024 102400 8192 8192 NT_STATUS_OK
ReadX 11024 110592 8192 8192 NT_STATUS_OK
ReadX 11024 118784 8192 8192 NT_STATUS_OK
ReadX 11024 126976 8192 8192 NT_STATUS_OK
ReadX 11024 135168 8192 8192 NT_STATUS_OK
ReadX 11024 143360 8192 8192 NT_STATUS_OK
ReadX 11024 151552 8192 8192 NT_STATUS_OK
ReadX 11024 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11024 NT_STATUS_OK
Close 11017 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11026 NT_STATUS_OK
Close 11026 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11029 NT_STATUS_OK
WriteX 11029 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11029 258 NT_STATUS_OK
WriteX 11029 0 28489 28489 NT_STATUS_OK
Close 11029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11030 NT_STATUS_OK
Close 11030 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11032 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11032 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11033 NT_STATUS_OK
Close 11033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11032 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11035 NT_STATUS_OK
ReadX 11035 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11036 NT_STATUS_OK
ReadX 11036 0 8192 8192 NT_STATUS_OK
ReadX 11036 8192 8192 8192 NT_STATUS_OK
ReadX 11036 16384 8192 8192 NT_STATUS_OK
ReadX 11036 24576 8192 8192 NT_STATUS_OK
ReadX 11036 32768 16384 16384 NT_STATUS_OK
ReadX 11036 49152 8192 8192 NT_STATUS_OK
ReadX 11036 57344 8192 8192 NT_STATUS_OK
ReadX 11036 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11038 NT_STATUS_OK
Close 11038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11036 NT_STATUS_OK
Close 11035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11041 NT_STATUS_OK
WriteX 11041 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11041 258 NT_STATUS_OK
WriteX 11041 0 29253 29253 NT_STATUS_OK
Close 11041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11042 NT_STATUS_OK
Close 11042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11043 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11045 NT_STATUS_OK
Close 11045 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11048 NT_STATUS_OK
WriteX 11048 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11048 258 NT_STATUS_OK
WriteX 11048 0 30183 30183 NT_STATUS_OK
Close 11048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11049 NT_STATUS_OK
Close 11049 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11051 NT_STATUS_OK
WriteX 11051 0 510 510 NT_STATUS_OK
WriteX 11051 510 512 512 NT_STATUS_OK
WriteX 11051 1022 510 510 NT_STATUS_OK
WriteX 11051 1532 510 510 NT_STATUS_OK
WriteX 11051 2042 168 168 NT_STATUS_OK
Close 11051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11052 NT_STATUS_OK
Close 11052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11054 NT_STATUS_OK
ReadX 11054 0 4096 4096 NT_STATUS_OK
WriteX 11054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11055 NT_STATUS_OK
ReadX 11055 61440 4096 4096 NT_STATUS_OK
ReadX 11055 126976 4096 4096 NT_STATUS_OK
WriteX 11055 0 65536 65536 NT_STATUS_OK
WriteX 11055 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11056 NT_STATUS_OK
ReadX 11056 61440 4096 4096 NT_STATUS_OK
ReadX 11056 126976 4096 4096 NT_STATUS_OK
ReadX 11056 192512 4096 4096 NT_STATUS_OK
ReadX 11056 258048 4096 4096 NT_STATUS_OK
WriteX 11056 0 65536 65536 NT_STATUS_OK
WriteX 11056 65536 65536 65536 NT_STATUS_OK
WriteX 11056 131072 65536 65536 NT_STATUS_OK
WriteX 11056 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11057 NT_STATUS_OK
ReadX 11057 61440 4096 4096 NT_STATUS_OK
ReadX 11057 126976 4096 4096 NT_STATUS_OK
ReadX 11057 192512 4096 4096 NT_STATUS_OK
ReadX 11057 258048 4096 4096 NT_STATUS_OK
ReadX 11057 323584 4096 4096 NT_STATUS_OK
ReadX 11057 389120 4096 4096 NT_STATUS_OK
ReadX 11057 454656 4096 4096 NT_STATUS_OK
ReadX 11057 520192 4096 4096 NT_STATUS_OK
WriteX 11057 0 65536 65536 NT_STATUS_OK
WriteX 11057 65536 65536 65536 NT_STATUS_OK
WriteX 11057 131072 65536 65536 NT_STATUS_OK
WriteX 11057 196608 65536 65536 NT_STATUS_OK
WriteX 11057 262144 65536 65536 NT_STATUS_OK
WriteX 11057 327680 65536 65536 NT_STATUS_OK
WriteX 11057 393216 65536 65536 NT_STATUS_OK
WriteX 11057 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11058 NT_STATUS_OK
Close 11058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11054 NT_STATUS_OK
Close 11055 NT_STATUS_OK
Close 11056 NT_STATUS_OK
Close 11057 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11060 NT_STATUS_OK
Close 11060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11064 NT_STATUS_OK
Close 11064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11067 NT_STATUS_OK
Close 11067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11069 NT_STATUS_OK
Close 11069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11073 NT_STATUS_OK
Close 11073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11076 NT_STATUS_OK
Close 11076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11078 NT_STATUS_OK
Close 11078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11082 NT_STATUS_OK
Close 11082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11087 NT_STATUS_OK
Close 11087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11092 NT_STATUS_OK
Close 11092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11097 NT_STATUS_OK
Close 11097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11102 NT_STATUS_OK
Close 11102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11107 NT_STATUS_OK
Close 11107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11112 NT_STATUS_OK
Close 11112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11117 NT_STATUS_OK
Close 11117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11120 NT_STATUS_OK
Close 11120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11123 NT_STATUS_OK
Close 11123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11126 NT_STATUS_OK
WriteX 11126 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11126 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11126 0 65536 65536 NT_STATUS_OK
WriteX 11126 65536 65536 65536 NT_STATUS_OK
WriteX 11126 131072 65536 65536 NT_STATUS_OK
WriteX 11126 196608 65536 65536 NT_STATUS_OK
WriteX 11126 262144 26634 26634 NT_STATUS_OK
Close 11126 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11131 NT_STATUS_OK
Close 11131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11132 NT_STATUS_OK
Close 11132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11133 NT_STATUS_OK
ReadX 11133 0 4096 4096 NT_STATUS_OK
Close 11133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11134 NT_STATUS_OK
ReadX 11134 0 4096 4096 NT_STATUS_OK
ReadX 11134 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11135 NT_STATUS_OK
Close 11135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11134 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11139 NT_STATUS_OK
Close 11139 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11142 NT_STATUS_OK
Close 11142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11144 NT_STATUS_OK
Close 11144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11148 NT_STATUS_OK
Close 11148 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11151 NT_STATUS_OK
Close 11151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11153 NT_STATUS_OK
Close 11153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11157 NT_STATUS_OK
Close 11157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11162 NT_STATUS_OK
Close 11162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11167 NT_STATUS_OK
Close 11167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11172 NT_STATUS_OK
Close 11172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11177 NT_STATUS_OK
Close 11177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11182 NT_STATUS_OK
Close 11182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11186 NT_STATUS_OK
Close 11186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11191 NT_STATUS_OK
Close 11191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11196 NT_STATUS_OK
Close 11196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11199 NT_STATUS_OK
Close 11199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11201 NT_STATUS_OK
Close 11201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11211 NT_STATUS_OK
Close 11211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11212 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11213 NT_STATUS_OK
ReadX 11213 0 4096 4096 NT_STATUS_OK
Close 11213 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11214 NT_STATUS_OK
ReadX 11214 0 4096 4096 NT_STATUS_OK
Close 11214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11215 NT_STATUS_OK
ReadX 11215 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11225 NT_STATUS_OK
Close 11225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11226 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11227 NT_STATUS_OK
ReadX 11227 0 4096 4096 NT_STATUS_OK
Close 11227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11228 NT_STATUS_OK
ReadX 11228 0 4096 4096 NT_STATUS_OK
Close 11228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11229 NT_STATUS_OK
ReadX 11229 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11215 NT_STATUS_OK
Close 11229 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11258 0 4096 4096 NT_STATUS_OK
Close 11258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11259 NT_STATUS_OK
ReadX 11259 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11260 NT_STATUS_OK
ReadX 11260 0 4096 4096 NT_STATUS_OK
ReadX 11260 4096 4096 4096 NT_STATUS_OK
ReadX 11260 8192 4096 4096 NT_STATUS_OK
ReadX 11260 12288 4096 4096 NT_STATUS_OK
ReadX 11260 16384 4096 4096 NT_STATUS_OK
ReadX 11260 20480 4096 4096 NT_STATUS_OK
ReadX 11260 24576 4096 4096 NT_STATUS_OK
ReadX 11260 28672 4096 4096 NT_STATUS_OK
ReadX 11260 32768 4096 4096 NT_STATUS_OK
ReadX 11260 36864 4096 4096 NT_STATUS_OK
ReadX 11260 40960 4096 4096 NT_STATUS_OK
ReadX 11260 45056 4096 4096 NT_STATUS_OK
ReadX 11260 49152 4096 4096 NT_STATUS_OK
ReadX 11260 53248 4096 4096 NT_STATUS_OK
ReadX 11260 57344 4096 4096 NT_STATUS_OK
ReadX 11260 61440 4096 4096 NT_STATUS_OK
ReadX 11260 65536 4096 4096 NT_STATUS_OK
ReadX 11260 69632 4096 4096 NT_STATUS_OK
ReadX 11260 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11260 1004 NT_STATUS_OK
WriteX 11260 0 4096 4096 NT_STATUS_OK
Close 11260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11261 NT_STATUS_OK
SET_FILE_INFORMATION 11261 1004 NT_STATUS_OK
Close 11261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11262 NT_STATUS_OK
ReadX 11262 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11263 NT_STATUS_OK
Close 11263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11266 NT_STATUS_OK
WriteX 11266 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11266 258 NT_STATUS_OK
WriteX 11266 0 65536 65536 NT_STATUS_OK
WriteX 11266 65536 19979 19979 NT_STATUS_OK
Close 11266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11267 NT_STATUS_OK
ReadX 11267 0 4096 4096 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Flush 11267 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Flush 11267 NT_STATUS_OK
QUERY_FILE_INFORMATION 11267 1004 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Flush 11267 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Flush 11267 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Flush 11267 NT_STATUS_OK
SET_FILE_INFORMATION 11267 1004 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Flush 11267 NT_STATUS_OK
Close 11267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11268 NT_STATUS_OK
ReadX 11268 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11269 NT_STATUS_OK
ReadX 11269 0 4096 4096 NT_STATUS_OK
Close 11268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11270 NT_STATUS_OK
ReadX 11270 0 4096 4096 NT_STATUS_OK
Close 11270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11271 NT_STATUS_OK
ReadX 11271 0 4096 4096 NT_STATUS_OK
Close 11271 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11272 NT_STATUS_OK
ReadX 11272 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11272 1004 NT_STATUS_OK
WriteX 11272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11273 NT_STATUS_OK
Close 11273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11269 NT_STATUS_OK
Close 11272 NT_STATUS_OK
Close 11262 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11275 NT_STATUS_OK
Close 11275 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11278 NT_STATUS_OK
WriteX 11278 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11278 258 NT_STATUS_OK
WriteX 11278 0 65536 65536 NT_STATUS_OK
WriteX 11278 65536 17654 17654 NT_STATUS_OK
Close 11278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11279 NT_STATUS_OK
ReadX 11279 0 4096 4096 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
QUERY_FILE_INFORMATION 11279 1004 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
SET_FILE_INFORMATION 11279 1004 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
Close 11279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11280 NT_STATUS_OK
SET_FILE_INFORMATION 11280 1004 NT_STATUS_OK
Close 11280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11281 NT_STATUS_OK
ReadX 11281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11282 NT_STATUS_OK
Close 11282 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11284 NT_STATUS_OK
ReadX 11284 0 4096 4096 NT_STATUS_OK
ReadX 11284 4096 4096 4096 NT_STATUS_OK
ReadX 11284 8192 4096 4096 NT_STATUS_OK
ReadX 11284 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11284 16384 4096 4096 NT_STATUS_OK
ReadX 11284 20480 4096 4096 NT_STATUS_OK
ReadX 11284 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11285 NT_STATUS_OK
ReadX 11285 0 4096 4096 NT_STATUS_OK
Close 11285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11286 NT_STATUS_OK
ReadX 11286 0 4096 4096 NT_STATUS_OK
Close 11286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11287 NT_STATUS_OK
ReadX 11287 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11287 1004 NT_STATUS_OK
WriteX 11287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11288 NT_STATUS_OK
Close 11288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11287 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11290 NT_STATUS_OK
Close 11290 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11293 NT_STATUS_OK
WriteX 11293 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11293 258 NT_STATUS_OK
WriteX 11293 0 65536 65536 NT_STATUS_OK
WriteX 11293 65536 19490 19490 NT_STATUS_OK
Close 11293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11294 NT_STATUS_OK
ReadX 11294 0 4096 4096 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
Flush 11294 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
Flush 11294 NT_STATUS_OK
QUERY_FILE_INFORMATION 11294 1004 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
Flush 11294 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
Flush 11294 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
Flush 11294 NT_STATUS_OK
SET_FILE_INFORMATION 11294 1004 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
Flush 11294 NT_STATUS_OK
Close 11294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11295 NT_STATUS_OK
SET_FILE_INFORMATION 11295 1004 NT_STATUS_OK
Close 11295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11296 NT_STATUS_OK
ReadX 11296 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11297 NT_STATUS_OK
Close 11297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11299 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11299 0 4096 4096 NT_STATUS_OK
Close 11299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11300 NT_STATUS_OK
ReadX 11300 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11301 NT_STATUS_OK
ReadX 11301 0 4096 4096 NT_STATUS_OK
ReadX 11301 4096 4096 4096 NT_STATUS_OK
ReadX 11301 8192 4096 4096 NT_STATUS_OK
ReadX 11301 12288 4096 4096 NT_STATUS_OK
ReadX 11301 16384 4096 4096 NT_STATUS_OK
ReadX 11301 20480 4096 4096 NT_STATUS_OK
ReadX 11301 24576 4096 4096 NT_STATUS_OK
ReadX 11301 28672 4096 4096 NT_STATUS_OK
ReadX 11301 32768 4096 4096 NT_STATUS_OK
ReadX 11301 36864 4096 4096 NT_STATUS_OK
ReadX 11301 40960 4096 4096 NT_STATUS_OK
ReadX 11301 45056 4096 4096 NT_STATUS_OK
ReadX 11301 49152 4096 4096 NT_STATUS_OK
ReadX 11301 53248 4096 4096 NT_STATUS_OK
ReadX 11301 57344 4096 4096 NT_STATUS_OK
ReadX 11301 61440 4096 4096 NT_STATUS_OK
ReadX 11301 65536 4096 4096 NT_STATUS_OK
ReadX 11301 69632 4096 4096 NT_STATUS_OK
ReadX 11301 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11301 1004 NT_STATUS_OK
WriteX 11301 0 4096 4096 NT_STATUS_OK
Close 11301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11302 NT_STATUS_OK
SET_FILE_INFORMATION 11302 1004 NT_STATUS_OK
Close 11302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11303 NT_STATUS_OK
ReadX 11303 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11304 NT_STATUS_OK
Close 11304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11296 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11307 NT_STATUS_OK
WriteX 11307 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11307 258 NT_STATUS_OK
WriteX 11307 0 65536 65536 NT_STATUS_OK
WriteX 11307 65536 8866 8866 NT_STATUS_OK
Close 11307 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11308 NT_STATUS_OK
ReadX 11308 0 4096 4096 NT_STATUS_OK
WriteX 11308 0 4096 4096 NT_STATUS_OK
Flush 11308 NT_STATUS_OK
SET_FILE_INFORMATION 11308 1004 NT_STATUS_OK
WriteX 11308 0 4096 4096 NT_STATUS_OK
Flush 11308 NT_STATUS_OK
Close 11308 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11309 NT_STATUS_OK
ReadX 11309 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11310 NT_STATUS_OK
ReadX 11310 0 4096 4096 NT_STATUS_OK
Close 11310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11311 NT_STATUS_OK
ReadX 11311 0 4096 4096 NT_STATUS_OK
Close 11311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11312 NT_STATUS_OK
ReadX 11312 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11312 1004 NT_STATUS_OK
WriteX 11312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11313 NT_STATUS_OK
Close 11313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11312 NT_STATUS_OK
Close 11303 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11315 NT_STATUS_OK
Close 11315 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11318 NT_STATUS_OK
WriteX 11318 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11318 258 NT_STATUS_OK
WriteX 11318 0 65536 65536 NT_STATUS_OK
WriteX 11318 65536 9298 9298 NT_STATUS_OK
Close 11318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11319 NT_STATUS_OK
ReadX 11319 0 4096 4096 NT_STATUS_OK
WriteX 11319 0 4096 4096 NT_STATUS_OK
Flush 11319 NT_STATUS_OK
SET_FILE_INFORMATION 11319 1004 NT_STATUS_OK
WriteX 11319 0 4096 4096 NT_STATUS_OK
Flush 11319 NT_STATUS_OK
Close 11319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11320 NT_STATUS_OK
SET_FILE_INFORMATION 11320 1004 NT_STATUS_OK
Close 11320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11321 NT_STATUS_OK
ReadX 11321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11322 NT_STATUS_OK
Close 11322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11325 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11325 0 4096 4096 NT_STATUS_OK
Close 11325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11326 NT_STATUS_OK
ReadX 11326 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11326 4096 4096 4096 NT_STATUS_OK
ReadX 11326 8192 4096 4096 NT_STATUS_OK
ReadX 11326 12288 4096 4096 NT_STATUS_OK
ReadX 11326 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11327 NT_STATUS_OK
ReadX 11327 0 4096 4096 NT_STATUS_OK
Close 11327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11328 NT_STATUS_OK
ReadX 11328 0 4096 4096 NT_STATUS_OK
Close 11328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11329 NT_STATUS_OK
ReadX 11329 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11329 1004 NT_STATUS_OK
WriteX 11329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11330 NT_STATUS_OK
Close 11330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11326 NT_STATUS_OK
Close 11329 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11332 NT_STATUS_OK
Close 11332 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11335 NT_STATUS_OK
WriteX 11335 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11335 258 NT_STATUS_OK
WriteX 11335 0 65536 65536 NT_STATUS_OK
WriteX 11335 65536 11540 11540 NT_STATUS_OK
Close 11335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11336 NT_STATUS_OK
ReadX 11336 0 4096 4096 NT_STATUS_OK
WriteX 11336 0 4096 4096 NT_STATUS_OK
Flush 11336 NT_STATUS_OK
SET_FILE_INFORMATION 11336 1004 NT_STATUS_OK
WriteX 11336 0 4096 4096 NT_STATUS_OK
Flush 11336 NT_STATUS_OK
Close 11336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11337 NT_STATUS_OK
SET_FILE_INFORMATION 11337 1004 NT_STATUS_OK
Close 11337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11338 NT_STATUS_OK
ReadX 11338 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11339 NT_STATUS_OK
Close 11339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11341 NT_STATUS_OK
ReadX 11341 61440 4096 4096 NT_STATUS_OK
ReadX 11341 126976 4096 4096 NT_STATUS_OK
WriteX 11341 0 65536 65536 NT_STATUS_OK
WriteX 11341 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11342 NT_STATUS_OK
ReadX 11342 61440 4096 4096 NT_STATUS_OK
ReadX 11342 126976 4096 4096 NT_STATUS_OK
ReadX 11342 192512 4096 4096 NT_STATUS_OK
ReadX 11342 258048 4096 4096 NT_STATUS_OK
WriteX 11342 0 65536 65536 NT_STATUS_OK
WriteX 11342 65536 65536 65536 NT_STATUS_OK
WriteX 11342 131072 65536 65536 NT_STATUS_OK
WriteX 11342 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11343 NT_STATUS_OK
ReadX 11343 61440 4096 4096 NT_STATUS_OK
ReadX 11343 126976 4096 4096 NT_STATUS_OK
ReadX 11343 192512 4096 4096 NT_STATUS_OK
ReadX 11343 258048 4096 4096 NT_STATUS_OK
ReadX 11343 323584 4096 4096 NT_STATUS_OK
ReadX 11343 389120 4096 4096 NT_STATUS_OK
ReadX 11343 454656 4096 4096 NT_STATUS_OK
ReadX 11343 520192 4096 4096 NT_STATUS_OK
WriteX 11343 0 65536 65536 NT_STATUS_OK
WriteX 11343 65536 65536 65536 NT_STATUS_OK
WriteX 11343 131072 65536 65536 NT_STATUS_OK
WriteX 11343 196608 65536 65536 NT_STATUS_OK
WriteX 11343 262144 65536 65536 NT_STATUS_OK
WriteX 11343 327680 65536 65536 NT_STATUS_OK
WriteX 11343 393216 65536 65536 NT_STATUS_OK
WriteX 11343 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11344 NT_STATUS_OK
ReadX 11344 0 4096 4096 NT_STATUS_OK
ReadX 11344 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11345 NT_STATUS_OK
WriteX 11345 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11345 258 NT_STATUS_OK
WriteX 11345 0 53 53 NT_STATUS_OK
Close 11345 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11346 NT_STATUS_OK
Close 11346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11338 NT_STATUS_OK
Close 11284 NT_STATUS_OK
Close 11341 NT_STATUS_OK
Close 11342 NT_STATUS_OK
Close 11343 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11348 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11344 8192 4096 4096 NT_STATUS_OK
ReadX 11344 12288 4096 4096 NT_STATUS_OK
WriteX 11348 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11348 258 NT_STATUS_OK
ReadX 11344 16384 4096 4096 NT_STATUS_OK
ReadX 11344 20480 4096 4096 NT_STATUS_OK
WriteX 11348 0 15360 15360 NT_STATUS_OK
Close 11348 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11349 NT_STATUS_OK
ReadX 11349 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11349 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11349 1004 NT_STATUS_OK
WriteX 11349 0 4096 4096 NT_STATUS_OK
Close 11349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11350 NT_STATUS_OK
Close 11350 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11352 NT_STATUS_OK
ReadX 11352 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11353 NT_STATUS_OK
Close 11353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11352 4096 4096 4096 NT_STATUS_OK
ReadX 11352 8192 4096 4096 NT_STATUS_OK
ReadX 11352 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11355 NT_STATUS_OK
ReadX 11355 0 4096 4096 NT_STATUS_OK
ReadX 11355 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11356 NT_STATUS_OK
ReadX 11356 0 4096 4096 NT_STATUS_OK
ReadX 11356 4096 4096 4096 NT_STATUS_OK
ReadX 11356 8192 4096 4096 NT_STATUS_OK
Close 11355 NT_STATUS_OK
Close 11356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11357 NT_STATUS_OK
WriteX 11357 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11357 258 NT_STATUS_OK
WriteX 11357 0 15360 15360 NT_STATUS_OK
Close 11357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11358 NT_STATUS_OK
ReadX 11358 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11358 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11358 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11359 NT_STATUS_OK
Close 11359 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11361 NT_STATUS_OK
ReadX 11361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11362 NT_STATUS_OK
SET_FILE_INFORMATION 11362 1004 NT_STATUS_OK
Close 11362 NT_STATUS_OK
WriteX 11358 0 4096 4096 NT_STATUS_OK
Close 11358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11363 NT_STATUS_OK
Close 11363 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11365 NT_STATUS_OK
ReadX 11365 0 4096 4096 NT_STATUS_OK
ReadX 11365 4096 4096 4096 NT_STATUS_OK
ReadX 11365 8192 4096 4096 NT_STATUS_OK
ReadX 11365 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11365 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11365 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11366 NT_STATUS_OK
ReadX 11366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11367 NT_STATUS_OK
WriteX 11367 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11367 258 NT_STATUS_OK
WriteX 11367 0 53 53 NT_STATUS_OK
Close 11367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11368 NT_STATUS_OK
Close 11368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11366 4096 4096 4096 NT_STATUS_OK
ReadX 11366 8192 4096 4096 NT_STATUS_OK
ReadX 11366 12288 4096 4096 NT_STATUS_OK
WriteX 11370 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11370 258 NT_STATUS_OK
WriteX 11370 0 12006 12006 NT_STATUS_OK
Close 11370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11371 NT_STATUS_OK
ReadX 11371 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11371 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11371 1004 NT_STATUS_OK
WriteX 11371 0 4096 4096 NT_STATUS_OK
Close 11371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11372 NT_STATUS_OK
Close 11372 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11374 NT_STATUS_OK
ReadX 11374 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11375 NT_STATUS_OK
Close 11375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11374 4096 4096 4096 NT_STATUS_OK
ReadX 11374 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11377 NT_STATUS_OK
WriteX 11377 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11377 258 NT_STATUS_OK
WriteX 11377 0 11991 11991 NT_STATUS_OK
Close 11377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11378 NT_STATUS_OK
ReadX 11378 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11378 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11378 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11379 NT_STATUS_OK
Close 11379 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11381 NT_STATUS_OK
ReadX 11381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11382 NT_STATUS_OK
SET_FILE_INFORMATION 11382 1004 NT_STATUS_OK
Close 11382 NT_STATUS_OK
WriteX 11378 0 4096 4096 NT_STATUS_OK
Close 11378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11383 NT_STATUS_OK
Close 11383 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11385 NT_STATUS_OK
ReadX 11385 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11386 NT_STATUS_OK
Close 11386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11385 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11385 1004 NT_STATUS_OK
ReadX 11385 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11385 1004 NT_STATUS_OK
WriteX 11385 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11385 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11385 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11385 1004 NT_STATUS_OK
Close 11361 NT_STATUS_OK
WriteX 11365 0 19054 19054 NT_STATUS_OK
WriteX 11385 0 12288 12288 NT_STATUS_OK
Close 11381 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11388 NT_STATUS_OK
Close 11388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11365 NT_STATUS_OK
Close 11385 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11390 NT_STATUS_OK
Close 11390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11392 NT_STATUS_OK
ReadX 11392 0 61440 61440 NT_STATUS_OK
ReadX 11392 61440 4096 4096 NT_STATUS_OK
ReadX 11392 65536 61440 61440 NT_STATUS_OK
ReadX 11392 126976 4096 4096 NT_STATUS_OK
ReadX 11392 131072 61440 61440 NT_STATUS_OK
ReadX 11392 192512 4096 4096 NT_STATUS_OK
ReadX 11392 196608 61440 61440 NT_STATUS_OK
ReadX 11392 258048 4096 4096 NT_STATUS_OK
ReadX 11392 262144 61440 61440 NT_STATUS_OK
ReadX 11392 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11393 NT_STATUS_OK
ReadX 11393 0 61440 61440 NT_STATUS_OK
ReadX 11393 61440 4096 4096 NT_STATUS_OK
ReadX 11393 65536 61440 61440 NT_STATUS_OK
ReadX 11393 126976 4096 4096 NT_STATUS_OK
ReadX 11393 131072 61440 61440 NT_STATUS_OK
ReadX 11393 192512 4096 4096 NT_STATUS_OK
ReadX 11393 196608 61440 61440 NT_STATUS_OK
ReadX 11393 258048 4096 4096 NT_STATUS_OK
ReadX 11393 262144 61440 61440 NT_STATUS_OK
ReadX 11393 323584 4096 4096 NT_STATUS_OK
ReadX 11393 327680 61440 61440 NT_STATUS_OK
ReadX 11393 389120 4096 4096 NT_STATUS_OK
ReadX 11393 393216 61440 61440 NT_STATUS_OK
ReadX 11393 454656 4096 4096 NT_STATUS_OK
ReadX 11393 458752 61440 61440 NT_STATUS_OK
ReadX 11393 520192 4096 4096 NT_STATUS_OK
ReadX 11393 524288 61440 61440 NT_STATUS_OK
ReadX 11393 585728 4096 4096 NT_STATUS_OK
ReadX 11393 589824 61440 61440 NT_STATUS_OK
ReadX 11393 651264 4096 4096 NT_STATUS_OK
ReadX 11393 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11394 NT_STATUS_OK
ReadX 11394 0 61440 61440 NT_STATUS_OK
ReadX 11394 61440 4096 4096 NT_STATUS_OK
ReadX 11394 65536 61440 61440 NT_STATUS_OK
ReadX 11394 126976 4096 4096 NT_STATUS_OK
ReadX 11394 131072 61440 61440 NT_STATUS_OK
ReadX 11394 192512 4096 4096 NT_STATUS_OK
ReadX 11394 196608 61440 61440 NT_STATUS_OK
ReadX 11394 258048 4096 4096 NT_STATUS_OK
ReadX 11394 262144 61440 61440 NT_STATUS_OK
ReadX 11394 323584 4096 4096 NT_STATUS_OK
ReadX 11394 327680 61440 61440 NT_STATUS_OK
ReadX 11394 389120 4096 4096 NT_STATUS_OK
ReadX 11394 393216 61440 61440 NT_STATUS_OK
ReadX 11394 454656 4096 4096 NT_STATUS_OK
ReadX 11394 458752 61440 61440 NT_STATUS_OK
ReadX 11394 520192 4096 4096 NT_STATUS_OK
ReadX 11394 524288 61440 61440 NT_STATUS_OK
ReadX 11394 585728 4096 4096 NT_STATUS_OK
ReadX 11394 589824 61440 61440 NT_STATUS_OK
ReadX 11394 651264 4096 4096 NT_STATUS_OK
ReadX 11394 655360 61440 61440 NT_STATUS_OK
ReadX 11394 716800 4096 4096 NT_STATUS_OK
ReadX 11394 720896 61440 61440 NT_STATUS_OK
ReadX 11394 782336 4096 4096 NT_STATUS_OK
ReadX 11394 786432 61440 61440 NT_STATUS_OK
ReadX 11394 847872 4096 4096 NT_STATUS_OK
ReadX 11394 851968 61440 61440 NT_STATUS_OK
ReadX 11394 913408 4096 4096 NT_STATUS_OK
ReadX 11394 917504 61440 61440 NT_STATUS_OK
ReadX 11394 978944 4096 4096 NT_STATUS_OK
ReadX 11394 983040 61440 61440 NT_STATUS_OK
ReadX 11394 1044480 4096 4096 NT_STATUS_OK
ReadX 11394 1048576 61440 61440 NT_STATUS_OK
ReadX 11394 1110016 4096 4096 NT_STATUS_OK
ReadX 11394 1114112 61440 61440 NT_STATUS_OK
ReadX 11394 1175552 4096 4096 NT_STATUS_OK
ReadX 11394 1179648 61440 61440 NT_STATUS_OK
ReadX 11394 1241088 4096 4096 NT_STATUS_OK
ReadX 11394 1245184 61440 61440 NT_STATUS_OK
ReadX 11394 1306624 4096 4096 NT_STATUS_OK
ReadX 11394 1310720 61440 61440 NT_STATUS_OK
ReadX 11394 1372160 4096 4096 NT_STATUS_OK
ReadX 11394 1376256 61440 61440 NT_STATUS_OK
ReadX 11394 1437696 4096 4096 NT_STATUS_OK
ReadX 11394 1441792 61440 61440 NT_STATUS_OK
ReadX 11394 1503232 4096 4096 NT_STATUS_OK
ReadX 11394 1507328 61440 61440 NT_STATUS_OK
ReadX 11394 1568768 4096 4096 NT_STATUS_OK
ReadX 11394 1572864 61440 61440 NT_STATUS_OK
ReadX 11394 1634304 4096 4096 NT_STATUS_OK
ReadX 11394 1638400 61440 61440 NT_STATUS_OK
ReadX 11394 1699840 4096 4096 NT_STATUS_OK
ReadX 11394 1703936 61440 61440 NT_STATUS_OK
ReadX 11394 1765376 4096 4096 NT_STATUS_OK
ReadX 11394 1769472 61440 61440 NT_STATUS_OK
ReadX 11394 1830912 4096 4096 NT_STATUS_OK
ReadX 11394 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11395 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11396 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11396 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11397 NT_STATUS_OK
ReadX 11397 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11398 NT_STATUS_OK
ReadX 11398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11399 NT_STATUS_OK
ReadX 11399 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11400 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11401 NT_STATUS_OK
QUERY_FILE_INFORMATION 11401 1004 NT_STATUS_OK
WriteX 11401 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11401 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11402 NT_STATUS_OK
Close 11402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11403 NT_STATUS_OK
WriteX 11403 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11403 258 NT_STATUS_OK
WriteX 11403 0 491 491 NT_STATUS_OK
Close 11403 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11404 NT_STATUS_OK
ReadX 11404 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11401 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11406 NT_STATUS_OK
Close 11406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11407 NT_STATUS_OK
WriteX 11407 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11407 258 NT_STATUS_OK
WriteX 11407 0 543 543 NT_STATUS_OK
Close 11407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11408 NT_STATUS_OK
ReadX 11408 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11392 NT_STATUS_OK
Close 11393 NT_STATUS_OK
Close 11394 NT_STATUS_OK
Close 11408 NT_STATUS_OK
Close 11396 NT_STATUS_OK
Close 11397 NT_STATUS_OK
Close 11398 NT_STATUS_OK
Close 11399 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11411 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11411 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11412 NT_STATUS_OK
ReadX 11412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11413 NT_STATUS_OK
ReadX 11413 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11414 NT_STATUS_OK
ReadX 11414 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11415 NT_STATUS_OK
ReadX 11415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11416 NT_STATUS_OK
ReadX 11416 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11420 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11421 NT_STATUS_OK
QUERY_FILE_INFORMATION 11421 1004 NT_STATUS_OK
WriteX 11421 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11421 258 NT_STATUS_OK
WriteX 11421 0 2048 2048 NT_STATUS_OK
Close 11421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11422 NT_STATUS_OK
ReadX 11422 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11422 0 4096 4096 NT_STATUS_OK
Flush 11422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11422 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11426 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11427 NT_STATUS_OK
WriteX 11427 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11427 258 NT_STATUS_OK
WriteX 11427 0 2048 2048 NT_STATUS_OK
Close 11427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11428 NT_STATUS_OK
ReadX 11428 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11432 NT_STATUS_OK
Close 11432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11433 NT_STATUS_OK
WriteX 11433 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11433 258 NT_STATUS_OK
WriteX 11433 0 2048 2048 NT_STATUS_OK
Close 11433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11434 NT_STATUS_OK
ReadX 11434 0 2048 2048 NT_STATUS_OK
ReadX 11412 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11416 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11428 0 4096 4096 NT_STATUS_OK
WriteX 11412 0 8192 8192 NT_STATUS_OK
WriteX 11413 0 4096 4096 NT_STATUS_OK
WriteX 11414 0 4096 4096 NT_STATUS_OK
ReadX 11428 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11437 NT_STATUS_OK
ReadX 11437 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11438 NT_STATUS_OK
QUERY_FILE_INFORMATION 11438 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11437 NT_STATUS_OK
Close 11413 NT_STATUS_OK
Close 11414 NT_STATUS_OK
Close 11415 NT_STATUS_OK
Close 11428 NT_STATUS_OK
Close 11412 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11440 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11441 NT_STATUS_OK
ReadX 11441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11442 NT_STATUS_OK
ReadX 11442 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11443 NT_STATUS_OK
ReadX 11443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11444 NT_STATUS_OK
ReadX 11444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11445 NT_STATUS_OK
ReadX 11445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11446 NT_STATUS_OK
ReadX 11446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11447 NT_STATUS_OK
ReadX 11447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11448 NT_STATUS_OK
ReadX 11448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11449 NT_STATUS_OK
ReadX 11449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11450 NT_STATUS_OK
ReadX 11450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11451 NT_STATUS_OK
ReadX 11451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11452 NT_STATUS_OK
ReadX 11452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11453 NT_STATUS_OK
ReadX 11453 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11457 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11458 NT_STATUS_OK
QUERY_FILE_INFORMATION 11458 1004 NT_STATUS_OK
WriteX 11458 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11458 258 NT_STATUS_OK
WriteX 11458 0 2048 2048 NT_STATUS_OK
Close 11458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11459 NT_STATUS_OK
ReadX 11459 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11460 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11461 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11465 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11466 NT_STATUS_OK
QUERY_FILE_INFORMATION 11466 1004 NT_STATUS_OK
WriteX 11466 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11466 258 NT_STATUS_OK
WriteX 11466 0 2048 2048 NT_STATUS_OK
Close 11466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11467 NT_STATUS_OK
ReadX 11467 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11459 0 4096 4096 NT_STATUS_OK
Flush 11459 NT_STATUS_OK
WriteX 11467 0 4096 4096 NT_STATUS_OK
Flush 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11459 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11467 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11461 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11469 NT_STATUS_OK
WriteX 11469 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11469 258 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
Close 11469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11470 NT_STATUS_OK
ReadX 11470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11471 NT_STATUS_OK
Close 11471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11472 NT_STATUS_OK
WriteX 11472 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11472 258 NT_STATUS_OK
WriteX 11472 0 4096 4096 NT_STATUS_OK
Close 11472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11473 NT_STATUS_OK
ReadX 11473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11473 0 4096 4096 NT_STATUS_OK
Close 11470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11453 NT_STATUS_OK
Close 11447 NT_STATUS_OK
Close 11461 NT_STATUS_OK
Close 11450 NT_STATUS_OK
Close 11451 NT_STATUS_OK
Close 11452 NT_STATUS_OK
Close 11448 NT_STATUS_OK
Close 11441 NT_STATUS_OK
Close 11442 NT_STATUS_OK
Close 11445 NT_STATUS_OK
Close 11446 NT_STATUS_OK
Close 11443 NT_STATUS_OK
Close 11444 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11476 NT_STATUS_OK
Close 11476 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11478 NT_STATUS_OK
ReadX 11478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11479 NT_STATUS_OK
Close 11479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11480 NT_STATUS_OK
WriteX 11480 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11480 258 NT_STATUS_OK
WriteX 11480 0 2048 2048 NT_STATUS_OK
Close 11480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11481 NT_STATUS_OK
ReadX 11481 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11482 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11482 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11483 NT_STATUS_OK
ReadX 11483 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11484 NT_STATUS_OK
ReadX 11484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11485 NT_STATUS_OK
ReadX 11485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11486 NT_STATUS_OK
ReadX 11486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11487 NT_STATUS_OK
ReadX 11487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11488 NT_STATUS_OK
ReadX 11488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11489 NT_STATUS_OK
ReadX 11489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11490 NT_STATUS_OK
ReadX 11490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11491 NT_STATUS_OK
ReadX 11491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11492 NT_STATUS_OK
ReadX 11492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11493 NT_STATUS_OK
ReadX 11493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11494 NT_STATUS_OK
ReadX 11494 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11495 NT_STATUS_OK
QUERY_FILE_INFORMATION 11495 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11478 NT_STATUS_OK
Close 11481 NT_STATUS_OK
Close 11493 NT_STATUS_OK
Close 11488 NT_STATUS_OK
Close 11489 NT_STATUS_OK
Close 11490 NT_STATUS_OK
Close 11491 NT_STATUS_OK
Close 11492 NT_STATUS_OK
Close 11494 NT_STATUS_OK
Close 11482 NT_STATUS_OK
Close 11483 NT_STATUS_OK
Close 11486 NT_STATUS_OK
Close 11487 NT_STATUS_OK
Close 11484 NT_STATUS_OK
Close 11485 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11497 NT_STATUS_OK
QUERY_FILE_INFORMATION 11497 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11500 NT_STATUS_OK
ReadX 11500 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11501 NT_STATUS_OK
ReadX 11501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11502 NT_STATUS_OK
ReadX 11502 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11503 NT_STATUS_OK
ReadX 11503 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11504 NT_STATUS_OK
ReadX 11504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11505 NT_STATUS_OK
ReadX 11505 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11506 NT_STATUS_OK
ReadX 11506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11507 NT_STATUS_OK
ReadX 11507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11508 NT_STATUS_OK
ReadX 11508 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11509 NT_STATUS_OK
ReadX 11509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11510 NT_STATUS_OK
ReadX 11510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11511 NT_STATUS_OK
ReadX 11511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11512 NT_STATUS_OK
ReadX 11512 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11516 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11517 NT_STATUS_OK
QUERY_FILE_INFORMATION 11517 1004 NT_STATUS_OK
WriteX 11517 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11517 258 NT_STATUS_OK
WriteX 11517 0 2048 2048 NT_STATUS_OK
Close 11517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11518 NT_STATUS_OK
ReadX 11518 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11519 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11520 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11521 NT_STATUS_OK
ReadX 11521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11522 NT_STATUS_OK
ReadX 11522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11523 NT_STATUS_OK
ReadX 11523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11524 NT_STATUS_OK
ReadX 11524 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11528 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11529 NT_STATUS_OK
QUERY_FILE_INFORMATION 11529 1004 NT_STATUS_OK
WriteX 11529 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11529 258 NT_STATUS_OK
WriteX 11529 0 2048 2048 NT_STATUS_OK
Close 11529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11530 NT_STATUS_OK
ReadX 11530 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11531 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11532 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11532 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11536 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11537 NT_STATUS_OK
QUERY_FILE_INFORMATION 11537 1004 NT_STATUS_OK
WriteX 11537 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11537 258 NT_STATUS_OK
WriteX 11537 0 2048 2048 NT_STATUS_OK
Close 11537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11538 NT_STATUS_OK
ReadX 11538 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11518 0 4096 4096 NT_STATUS_OK
Flush 11518 NT_STATUS_OK
WriteX 11530 0 4096 4096 NT_STATUS_OK
Flush 11530 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11518 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11530 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11520 4096 16384 16384 NT_STATUS_OK
ReadX 11500 4096 16384 16384 NT_STATUS_OK
ReadX 11532 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11540 NT_STATUS_OK
ReadX 11540 0 2048 2048 NT_STATUS_OK
WriteX 11540 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11541 NT_STATUS_OK
QUERY_FILE_INFORMATION 11541 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11540 NT_STATUS_OK
Close 11524 NT_STATUS_OK
Close 11512 NT_STATUS_OK
Close 11504 NT_STATUS_OK
Close 11520 NT_STATUS_OK
Close 11521 NT_STATUS_OK
Close 11522 NT_STATUS_OK
Close 11523 NT_STATUS_OK
Close 11511 NT_STATUS_OK
Close 11532 NT_STATUS_OK
Close 11506 NT_STATUS_OK
Close 11509 NT_STATUS_OK
Close 11510 NT_STATUS_OK
Close 11507 NT_STATUS_OK
Close 11508 NT_STATUS_OK
Close 11500 NT_STATUS_OK
Close 11501 NT_STATUS_OK
Close 11502 NT_STATUS_OK
Close 11503 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11543 NT_STATUS_OK
QUERY_FILE_INFORMATION 11543 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11545 NT_STATUS_OK
QUERY_FILE_INFORMATION 11545 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11547 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11548 NT_STATUS_OK
ReadX 11548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11549 NT_STATUS_OK
ReadX 11549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11550 NT_STATUS_OK
ReadX 11550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11551 NT_STATUS_OK
ReadX 11551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11552 NT_STATUS_OK
ReadX 11552 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11548 4096 16384 16384 NT_STATUS_OK
WriteX 11548 0 4096 4096 NT_STATUS_OK
WriteX 11549 0 4096 4096 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
WriteX 11551 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11553 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11553 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11554 NT_STATUS_OK
ReadX 11554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11555 NT_STATUS_OK
ReadX 11555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11556 NT_STATUS_OK
ReadX 11556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11557 NT_STATUS_OK
ReadX 11557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11558 NT_STATUS_OK
ReadX 11558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11559 NT_STATUS_OK
ReadX 11559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11560 NT_STATUS_OK
ReadX 11560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11561 NT_STATUS_OK
ReadX 11561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11562 NT_STATUS_OK
ReadX 11562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11563 NT_STATUS_OK
ReadX 11563 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11564 NT_STATUS_OK
ReadX 11564 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11565 NT_STATUS_OK
ReadX 11565 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11566 NT_STATUS_OK
ReadX 11566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11567 NT_STATUS_OK
ReadX 11567 0 8192 8192 NT_STATUS_OK
ReadX 11554 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11568 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11568 0 4096 4096 NT_STATUS_OK
ReadX 11568 4096 4096 4096 NT_STATUS_OK
ReadX 11568 8192 4096 4096 NT_STATUS_OK
WriteX 11554 0 4096 4096 NT_STATUS_OK
WriteX 11555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11569 0 4096 4096 NT_STATUS_OK
ReadX 11569 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11548 0 4096 4096 NT_STATUS_OK
WriteX 11549 0 4096 4096 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
WriteX 11551 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11573 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11574 NT_STATUS_OK
QUERY_FILE_INFORMATION 11574 1004 NT_STATUS_OK
WriteX 11574 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11574 258 NT_STATUS_OK
WriteX 11574 0 2048 2048 NT_STATUS_OK
Close 11574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11575 NT_STATUS_OK
ReadX 11575 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11575 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11575 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11576 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11576 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11577 NT_STATUS_OK
ReadX 11577 0 4096 4096 NT_STATUS_OK
ReadX 11577 4096 4096 4096 NT_STATUS_OK
WriteX 11577 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11575 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11578 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11579 NT_STATUS_OK
ReadX 11579 0 4096 4096 NT_STATUS_OK
ReadX 11579 4096 4096 4096 NT_STATUS_OK
WriteX 11579 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11580 NT_STATUS_OK
QUERY_FILE_INFORMATION 11580 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11567 NT_STATUS_OK
Close 11552 NT_STATUS_OK
Close 11548 NT_STATUS_OK
Close 11549 NT_STATUS_OK
Close 11550 NT_STATUS_OK
Close 11551 NT_STATUS_OK
Close 11560 NT_STATUS_OK
Close 11565 NT_STATUS_OK
Close 11561 NT_STATUS_OK
Close 11562 NT_STATUS_OK
Close 11563 NT_STATUS_OK
Close 11564 NT_STATUS_OK
Close 11566 NT_STATUS_OK
Close 11554 NT_STATUS_OK
Close 11555 NT_STATUS_OK
Close 11558 NT_STATUS_OK
Close 11559 NT_STATUS_OK
Close 11556 NT_STATUS_OK
Close 11557 NT_STATUS_OK
Close 11579 NT_STATUS_OK
Close 11568 NT_STATUS_OK
Close 11569 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11582 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11582 0 4096 4096 NT_STATUS_OK
ReadX 11582 4096 4096 4096 NT_STATUS_OK
ReadX 11582 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11583 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11584 NT_STATUS_OK
ReadX 11584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11585 NT_STATUS_OK
ReadX 11585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11586 NT_STATUS_OK
ReadX 11586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11587 NT_STATUS_OK
ReadX 11587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11588 NT_STATUS_OK
ReadX 11588 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11589 NT_STATUS_OK
ReadX 11589 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11590 NT_STATUS_OK
ReadX 11590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11591 NT_STATUS_OK
ReadX 11591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11592 NT_STATUS_OK
ReadX 11592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11593 NT_STATUS_OK
ReadX 11593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11594 NT_STATUS_OK
ReadX 11594 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11595 NT_STATUS_OK
ReadX 11595 0 4096 4096 NT_STATUS_OK
ReadX 11583 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11599 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11600 NT_STATUS_OK
QUERY_FILE_INFORMATION 11600 1004 NT_STATUS_OK
WriteX 11600 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11600 258 NT_STATUS_OK
WriteX 11600 0 2048 2048 NT_STATUS_OK
Close 11600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11601 NT_STATUS_OK
ReadX 11601 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11601 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11605 NT_STATUS_OK
Close 11605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11606 NT_STATUS_OK
QUERY_FILE_INFORMATION 11606 1004 NT_STATUS_OK
WriteX 11606 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11606 258 NT_STATUS_OK
WriteX 11606 0 2048 2048 NT_STATUS_OK
Close 11606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11607 NT_STATUS_OK
ReadX 11607 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11607 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11590 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11608 NT_STATUS_OK
QUERY_FILE_INFORMATION 11608 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11594 NT_STATUS_OK
Close 11589 NT_STATUS_OK
Close 11595 NT_STATUS_OK
Close 11583 NT_STATUS_OK
Close 11584 NT_STATUS_OK
Close 11587 NT_STATUS_OK
Close 11588 NT_STATUS_OK
Close 11585 NT_STATUS_OK
Close 11586 NT_STATUS_OK
Close 11590 NT_STATUS_OK
Close 11591 NT_STATUS_OK
Close 11592 NT_STATUS_OK
Close 11593 NT_STATUS_OK
Close 11582 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11610 NT_STATUS_OK
QUERY_FILE_INFORMATION 11610 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11612 NT_STATUS_OK
ReadX 11612 61440 4096 4096 NT_STATUS_OK
ReadX 11612 126976 4096 4096 NT_STATUS_OK
WriteX 11612 0 65536 65536 NT_STATUS_OK
WriteX 11612 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11613 NT_STATUS_OK
ReadX 11613 61440 4096 4096 NT_STATUS_OK
ReadX 11613 126976 4096 4096 NT_STATUS_OK
ReadX 11613 192512 4096 4096 NT_STATUS_OK
ReadX 11613 258048 4096 4096 NT_STATUS_OK
WriteX 11613 0 65536 65536 NT_STATUS_OK
WriteX 11613 65536 65536 65536 NT_STATUS_OK
WriteX 11613 131072 65536 65536 NT_STATUS_OK
WriteX 11613 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11614 NT_STATUS_OK
ReadX 11614 61440 4096 4096 NT_STATUS_OK
ReadX 11614 126976 4096 4096 NT_STATUS_OK
ReadX 11614 192512 4096 4096 NT_STATUS_OK
ReadX 11614 258048 4096 4096 NT_STATUS_OK
ReadX 11614 323584 4096 4096 NT_STATUS_OK
ReadX 11614 389120 4096 4096 NT_STATUS_OK
ReadX 11614 454656 4096 4096 NT_STATUS_OK
ReadX 11614 520192 4096 4096 NT_STATUS_OK
WriteX 11614 0 65536 65536 NT_STATUS_OK
WriteX 11614 65536 65536 65536 NT_STATUS_OK
WriteX 11614 131072 65536 65536 NT_STATUS_OK
WriteX 11614 196608 65536 65536 NT_STATUS_OK
WriteX 11614 262144 65536 65536 NT_STATUS_OK
WriteX 11614 327680 65536 65536 NT_STATUS_OK
WriteX 11614 393216 65536 65536 NT_STATUS_OK
WriteX 11614 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11615 NT_STATUS_OK
ReadX 11615 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11615 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11615 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11615 8192 4096 4096 NT_STATUS_OK
ReadX 11615 12288 4096 4096 NT_STATUS_OK
ReadX 11615 16384 4096 4096 NT_STATUS_OK
ReadX 11615 20480 4096 4096 NT_STATUS_OK
ReadX 11615 24576 4096 4096 NT_STATUS_OK
ReadX 11615 28672 4096 4096 NT_STATUS_OK
ReadX 11615 32768 4096 4096 NT_STATUS_OK
ReadX 11615 36864 4096 4096 NT_STATUS_OK
ReadX 11615 40960 4096 4096 NT_STATUS_OK
ReadX 11615 45056 4096 4096 NT_STATUS_OK
ReadX 11615 49152 4096 4096 NT_STATUS_OK
ReadX 11615 53248 4096 4096 NT_STATUS_OK
ReadX 11615 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11615 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11616 NT_STATUS_OK
Close 11616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11612 NT_STATUS_OK
Close 11613 NT_STATUS_OK
Close 11614 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11618 NT_STATUS_OK
WriteX 11618 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11618 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11618 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11618 1004 NT_STATUS_OK
WriteX 11618 0 57088 57088 NT_STATUS_OK
WriteX 11618 0 4096 4096 NT_STATUS_OK
Flush 11618 NT_STATUS_OK
Close 11615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11619 NT_STATUS_OK
SET_FILE_INFORMATION 11619 1004 NT_STATUS_OK
Close 11619 NT_STATUS_OK
SET_FILE_INFORMATION 11618 1004 NT_STATUS_OK
WriteX 11618 0 4096 4096 NT_STATUS_OK
Close 11618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11620 NT_STATUS_OK
Close 11620 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11622 NT_STATUS_OK
ReadX 11622 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11622 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11623 NT_STATUS_OK
WriteX 11623 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11623 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11623 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11623 1004 NT_STATUS_OK
WriteX 11623 0 51456 51456 NT_STATUS_OK
WriteX 11623 0 4096 4096 NT_STATUS_OK
Flush 11623 NT_STATUS_OK
SET_FILE_INFORMATION 11623 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11623 1004 NT_STATUS_OK
WriteX 11623 0 4096 4096 NT_STATUS_OK
Close 11623 NT_STATUS_OK
Close 11622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11625 NT_STATUS_OK
Close 11625 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11627 NT_STATUS_OK
ReadX 11627 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11627 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11629 NT_STATUS_OK
Close 11629 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11632 NT_STATUS_OK
WriteX 11632 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11632 258 NT_STATUS_OK
WriteX 11632 0 53077 53077 NT_STATUS_OK
Close 11632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11633 NT_STATUS_OK
WriteX 11633 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11633 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11633 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11633 1004 NT_STATUS_OK
WriteX 11633 0 65536 65536 NT_STATUS_OK
WriteX 11633 65536 1856 1856 NT_STATUS_OK
WriteX 11633 0 4096 4096 NT_STATUS_OK
Flush 11633 NT_STATUS_OK
SET_FILE_INFORMATION 11633 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11633 1004 NT_STATUS_OK
WriteX 11633 0 4096 4096 NT_STATUS_OK
Close 11633 NT_STATUS_OK
Close 11627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11635 NT_STATUS_OK
Close 11635 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11637 NT_STATUS_OK
ReadX 11637 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11639 NT_STATUS_OK
Close 11639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11642 NT_STATUS_OK
WriteX 11642 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11642 258 NT_STATUS_OK
WriteX 11642 0 7983 7983 NT_STATUS_OK
Close 11642 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11644 NT_STATUS_OK
Close 11644 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11647 NT_STATUS_OK
WriteX 11647 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11647 258 NT_STATUS_OK
WriteX 11647 0 65536 65536 NT_STATUS_OK
WriteX 11647 65536 65536 65536 NT_STATUS_OK
WriteX 11647 131072 65536 65536 NT_STATUS_OK
WriteX 11647 196608 65536 65536 NT_STATUS_OK
WriteX 11647 262144 65536 65536 NT_STATUS_OK
WriteX 11647 327680 65536 65536 NT_STATUS_OK
WriteX 11647 393216 65536 65536 NT_STATUS_OK
WriteX 11647 458752 46731 46731 NT_STATUS_OK
Close 11647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11648 NT_STATUS_OK
WriteX 11648 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11648 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11637 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11648 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11648 1004 NT_STATUS_OK
WriteX 11648 0 65536 65536 NT_STATUS_OK
WriteX 11648 65536 22848 22848 NT_STATUS_OK
WriteX 11648 0 4096 4096 NT_STATUS_OK
Flush 11648 NT_STATUS_OK
SET_FILE_INFORMATION 11648 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11648 1004 NT_STATUS_OK
WriteX 11648 0 4096 4096 NT_STATUS_OK
Close 11648 NT_STATUS_OK
Close 11637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11650 NT_STATUS_OK
Close 11650 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11652 NT_STATUS_OK
ReadX 11652 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11652 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11653 NT_STATUS_OK
ReadX 11653 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11653 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11653 1004 NT_STATUS_OK
ReadX 11653 8192 4096 4096 NT_STATUS_OK
ReadX 11653 12288 4096 4096 NT_STATUS_OK
ReadX 11653 16384 4096 4096 NT_STATUS_OK
ReadX 11653 20480 4096 4096 NT_STATUS_OK
ReadX 11653 24576 4096 4096 NT_STATUS_OK
ReadX 11653 28672 4096 4096 NT_STATUS_OK
ReadX 11653 32768 4096 4096 NT_STATUS_OK
ReadX 11653 36864 4096 4096 NT_STATUS_OK
ReadX 11653 40960 4096 4096 NT_STATUS_OK
ReadX 11653 45056 4096 4096 NT_STATUS_OK
ReadX 11653 49152 4096 4096 NT_STATUS_OK
ReadX 11653 53248 4096 4096 NT_STATUS_OK
ReadX 11653 57344 4096 4096 NT_STATUS_OK
ReadX 11653 61440 4096 4096 NT_STATUS_OK
ReadX 11653 65536 4096 4096 NT_STATUS_OK
ReadX 11653 69632 4096 4096 NT_STATUS_OK
ReadX 11653 73728 4096 4096 NT_STATUS_OK
ReadX 11653 77824 4096 4096 NT_STATUS_OK
ReadX 11653 81920 4096 4096 NT_STATUS_OK
ReadX 11653 86016 4096 4096 NT_STATUS_OK
ReadX 11653 90112 4096 4096 NT_STATUS_OK
ReadX 11653 94208 4096 4096 NT_STATUS_OK
ReadX 11653 98304 4096 4096 NT_STATUS_OK
ReadX 11653 102400 4096 4096 NT_STATUS_OK
ReadX 11653 106496 4096 4096 NT_STATUS_OK
ReadX 11653 110592 4096 4096 NT_STATUS_OK
ReadX 11653 114688 4096 4096 NT_STATUS_OK
ReadX 11653 118784 4096 4096 NT_STATUS_OK
ReadX 11653 122880 4096 4096 NT_STATUS_OK
ReadX 11653 126976 4096 4096 NT_STATUS_OK
ReadX 11653 131072 4096 4096 NT_STATUS_OK
ReadX 11653 135168 4096 4096 NT_STATUS_OK
ReadX 11653 139264 4096 4096 NT_STATUS_OK
ReadX 11653 143360 4096 4096 NT_STATUS_OK
ReadX 11653 147456 4096 4096 NT_STATUS_OK
ReadX 11653 151552 4096 4096 NT_STATUS_OK
ReadX 11653 155648 4096 4096 NT_STATUS_OK
ReadX 11653 159744 4096 4096 NT_STATUS_OK
ReadX 11653 163840 4096 4096 NT_STATUS_OK
ReadX 11653 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11653 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11654 NT_STATUS_OK
Close 11654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11652 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11656 NT_STATUS_OK
WriteX 11656 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11656 258 NT_STATUS_OK
Close 11653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11657 NT_STATUS_OK
SET_FILE_INFORMATION 11657 1004 NT_STATUS_OK
Close 11657 NT_STATUS_OK
WriteX 11656 0 42388 42388 NT_STATUS_OK
Close 11656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11658 NT_STATUS_OK
Close 11658 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11660 NT_STATUS_OK
ReadX 11660 0 4096 4096 NT_STATUS_OK
ReadX 11660 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11661 NT_STATUS_OK
WriteX 11661 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11661 258 NT_STATUS_OK
SET_FILE_INFORMATION 11661 1004 NT_STATUS_OK
WriteX 11661 0 42652 42652 NT_STATUS_OK
Close 11661 NT_STATUS_OK
Close 11660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11663 NT_STATUS_OK
Close 11663 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11665 NT_STATUS_OK
ReadX 11665 0 4096 4096 NT_STATUS_OK
ReadX 11665 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11667 NT_STATUS_OK
Close 11667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11670 NT_STATUS_OK
WriteX 11670 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11670 258 NT_STATUS_OK
WriteX 11670 0 65536 65536 NT_STATUS_OK
WriteX 11670 65536 49 49 NT_STATUS_OK
Close 11670 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11671 NT_STATUS_OK
ReadX 11671 0 61440 61440 NT_STATUS_OK
ReadX 11671 61440 4096 4096 NT_STATUS_OK
ReadX 11671 65536 61440 61440 NT_STATUS_OK
ReadX 11671 126976 4096 4096 NT_STATUS_OK
ReadX 11671 131072 61440 61440 NT_STATUS_OK
ReadX 11671 192512 4096 4096 NT_STATUS_OK
ReadX 11671 196608 61440 61440 NT_STATUS_OK
ReadX 11671 258048 4096 4096 NT_STATUS_OK
ReadX 11671 262144 61440 61440 NT_STATUS_OK
ReadX 11671 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11672 NT_STATUS_OK
ReadX 11672 0 61440 61440 NT_STATUS_OK
ReadX 11672 61440 4096 4096 NT_STATUS_OK
ReadX 11672 65536 61440 61440 NT_STATUS_OK
ReadX 11672 126976 4096 4096 NT_STATUS_OK
ReadX 11672 131072 61440 61440 NT_STATUS_OK
ReadX 11672 192512 4096 4096 NT_STATUS_OK
ReadX 11672 196608 61440 61440 NT_STATUS_OK
ReadX 11672 258048 4096 4096 NT_STATUS_OK
ReadX 11672 262144 61440 61440 NT_STATUS_OK
ReadX 11672 323584 4096 4096 NT_STATUS_OK
ReadX 11672 327680 61440 61440 NT_STATUS_OK
ReadX 11672 389120 4096 4096 NT_STATUS_OK
ReadX 11672 393216 61440 61440 NT_STATUS_OK
ReadX 11672 454656 4096 4096 NT_STATUS_OK
ReadX 11672 458752 61440 61440 NT_STATUS_OK
ReadX 11672 520192 4096 4096 NT_STATUS_OK
ReadX 11672 524288 61440 61440 NT_STATUS_OK
ReadX 11672 585728 4096 4096 NT_STATUS_OK
ReadX 11672 589824 61440 61440 NT_STATUS_OK
ReadX 11672 651264 4096 4096 NT_STATUS_OK
ReadX 11672 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11673 NT_STATUS_OK
ReadX 11673 0 61440 61440 NT_STATUS_OK
ReadX 11673 61440 4096 4096 NT_STATUS_OK
ReadX 11673 65536 61440 61440 NT_STATUS_OK
ReadX 11673 126976 4096 4096 NT_STATUS_OK
ReadX 11673 131072 61440 61440 NT_STATUS_OK
ReadX 11673 192512 4096 4096 NT_STATUS_OK
ReadX 11673 196608 61440 61440 NT_STATUS_OK
ReadX 11673 258048 4096 4096 NT_STATUS_OK
ReadX 11673 262144 61440 61440 NT_STATUS_OK
ReadX 11673 323584 4096 4096 NT_STATUS_OK
ReadX 11673 327680 61440 61440 NT_STATUS_OK
ReadX 11673 389120 4096 4096 NT_STATUS_OK
ReadX 11673 393216 61440 61440 NT_STATUS_OK
ReadX 11673 454656 4096 4096 NT_STATUS_OK
ReadX 11673 458752 61440 61440 NT_STATUS_OK
ReadX 11673 520192 4096 4096 NT_STATUS_OK
ReadX 11673 524288 61440 61440 NT_STATUS_OK
ReadX 11673 585728 4096 4096 NT_STATUS_OK
ReadX 11673 589824 61440 61440 NT_STATUS_OK
ReadX 11673 651264 4096 4096 NT_STATUS_OK
ReadX 11673 655360 61440 61440 NT_STATUS_OK
ReadX 11673 716800 4096 4096 NT_STATUS_OK
ReadX 11673 720896 61440 61440 NT_STATUS_OK
ReadX 11673 782336 4096 4096 NT_STATUS_OK
ReadX 11673 786432 61440 61440 NT_STATUS_OK
ReadX 11673 847872 4096 4096 NT_STATUS_OK
ReadX 11673 851968 61440 61440 NT_STATUS_OK
ReadX 11673 913408 4096 4096 NT_STATUS_OK
ReadX 11673 917504 61440 61440 NT_STATUS_OK
ReadX 11673 978944 4096 4096 NT_STATUS_OK
ReadX 11673 983040 61440 61440 NT_STATUS_OK
ReadX 11673 1044480 4096 4096 NT_STATUS_OK
ReadX 11673 1048576 61440 61440 NT_STATUS_OK
ReadX 11673 1110016 4096 4096 NT_STATUS_OK
ReadX 11673 1114112 61440 61440 NT_STATUS_OK
ReadX 11673 1175552 4096 4096 NT_STATUS_OK
ReadX 11673 1179648 61440 61440 NT_STATUS_OK
ReadX 11673 1241088 4096 4096 NT_STATUS_OK
ReadX 11673 1245184 61440 61440 NT_STATUS_OK
ReadX 11673 1306624 4096 4096 NT_STATUS_OK
ReadX 11673 1310720 61440 61440 NT_STATUS_OK
ReadX 11673 1372160 4096 4096 NT_STATUS_OK
ReadX 11673 1376256 61440 61440 NT_STATUS_OK
ReadX 11673 1437696 4096 4096 NT_STATUS_OK
ReadX 11673 1441792 61440 61440 NT_STATUS_OK
ReadX 11673 1503232 4096 4096 NT_STATUS_OK
ReadX 11673 1507328 61440 61440 NT_STATUS_OK
ReadX 11673 1568768 4096 4096 NT_STATUS_OK
ReadX 11673 1572864 61440 61440 NT_STATUS_OK
ReadX 11673 1634304 4096 4096 NT_STATUS_OK
ReadX 11673 1638400 61440 61440 NT_STATUS_OK
ReadX 11673 1699840 4096 4096 NT_STATUS_OK
ReadX 11673 1703936 61440 61440 NT_STATUS_OK
ReadX 11673 1765376 4096 4096 NT_STATUS_OK
ReadX 11673 1769472 61440 61440 NT_STATUS_OK
ReadX 11673 1830912 4096 4096 NT_STATUS_OK
ReadX 11673 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11674 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11675 NT_STATUS_OK
QUERY_FILE_INFORMATION 11675 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11675 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11675 1005 NT_STATUS_OK
ReadX 11675 2156 24 24 NT_STATUS_OK
ReadX 11675 2139 276 276 NT_STATUS_OK
ReadX 11675 2136 14 14 NT_STATUS_OK
ReadX 11675 2136 7 7 NT_STATUS_OK
ReadX 11675 2138 12 12 NT_STATUS_OK
ReadX 11675 2137 8 8 NT_STATUS_OK
ReadX 11675 2135 15 15 NT_STATUS_OK
ReadX 11675 0 16 16 NT_STATUS_OK
ReadX 11675 16 2048 2048 NT_STATUS_OK
ReadX 11675 2064 2048 2048 NT_STATUS_OK
ReadX 11675 257 2048 2048 NT_STATUS_OK
ReadX 11675 385 2048 2048 NT_STATUS_OK
ReadX 11675 513 2048 2048 NT_STATUS_OK
ReadX 11675 641 2048 2048 NT_STATUS_OK
ReadX 11675 769 2048 2048 NT_STATUS_OK
ReadX 11675 897 2048 2048 NT_STATUS_OK
ReadX 11675 1025 2048 2048 NT_STATUS_OK
ReadX 11675 1153 2048 2048 NT_STATUS_OK
ReadX 11675 1281 2048 2048 NT_STATUS_OK
ReadX 11675 1409 2048 2048 NT_STATUS_OK
ReadX 11675 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11677 NT_STATUS_OK
Close 11677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11671 NT_STATUS_OK
Close 11672 NT_STATUS_OK
Close 11673 NT_STATUS_OK
Close 11665 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11680 NT_STATUS_OK
WriteX 11680 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11680 258 NT_STATUS_OK
WriteX 11680 0 10575 10575 NT_STATUS_OK
Flush 11680 NT_STATUS_OK
Close 11680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11681 NT_STATUS_OK
Close 11681 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
Close 11675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11685 NT_STATUS_OK
LockX 11685 2147483538 1 NT_STATUS_OK
UnlockX 11685 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11685 1005 NT_STATUS_OK
ReadX 11685 0 512 512 NT_STATUS_OK
ReadX 11685 512 512 512 NT_STATUS_OK
ReadX 11685 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11685 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11685 1004 NT_STATUS_OK
Close 11685 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11686 NT_STATUS_OK
QUERY_FILE_INFORMATION 11686 1005 NT_STATUS_OK
ReadX 11686 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11687 NT_STATUS_OK
LockX 11687 2147483538 1 NT_STATUS_OK
UnlockX 11687 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11687 1005 NT_STATUS_OK
ReadX 11687 0 512 512 NT_STATUS_OK
ReadX 11687 512 512 512 NT_STATUS_OK
ReadX 11687 1024 512 512 NT_STATUS_OK
ReadX 11687 288 20 20 NT_STATUS_OK
ReadX 11687 308 2084 2084 NT_STATUS_OK
ReadX 11687 388 2084 2084 NT_STATUS_OK
ReadX 11687 388 2084 2084 NT_STATUS_OK
ReadX 11674 2157 1386 1386 NT_STATUS_OK
ReadX 11687 2472 399 399 NT_STATUS_OK
ReadX 11687 3072 1536 1536 NT_STATUS_OK
ReadX 11687 544 149 149 NT_STATUS_OK
ReadX 11687 693 485 485 NT_STATUS_OK
Close 11687 NT_STATUS_OK
ReadX 11674 2157 4096 4096 NT_STATUS_OK
ReadX 11674 6253 4096 4096 NT_STATUS_OK
ReadX 11674 10349 4096 4096 NT_STATUS_OK
ReadX 11674 14445 4096 4096 NT_STATUS_OK
ReadX 11674 18541 4096 4096 NT_STATUS_OK
ReadX 11674 22637 256 256 NT_STATUS_OK
ReadX 11674 22893 4096 4096 NT_STATUS_OK
ReadX 11674 26989 4096 4096 NT_STATUS_OK
ReadX 11674 31085 4096 4096 NT_STATUS_OK
ReadX 11674 35181 4096 4096 NT_STATUS_OK
ReadX 11674 39277 4096 4096 NT_STATUS_OK
ReadX 11674 43373 4096 4096 NT_STATUS_OK
ReadX 11674 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11674 2157 1024 1024 NT_STATUS_OK
ReadX 11674 1667 4688 4688 NT_STATUS_OK
ReadX 11674 6355 3516 3516 NT_STATUS_OK
ReadX 11674 9871 16384 16384 NT_STATUS_OK
ReadX 11674 26255 3771 3771 NT_STATUS_OK
ReadX 11674 30026 2048 2048 NT_STATUS_OK
ReadX 11674 32074 1024 1024 NT_STATUS_OK
ReadX 11674 33098 6652 6652 NT_STATUS_OK
ReadX 11674 39750 16384 16384 NT_STATUS_OK
ReadX 11674 56134 10496 10496 NT_STATUS_OK
ReadX 11674 66630 1784 1784 NT_STATUS_OK
ReadX 11674 68414 90 90 NT_STATUS_OK
ReadX 11674 68504 273 273 NT_STATUS_OK
ReadX 11674 68777 1600 1600 NT_STATUS_OK
ReadX 11674 70377 640 640 NT_STATUS_OK
ReadX 11674 71017 1280 1280 NT_STATUS_OK
ReadX 11674 72297 8464 8464 NT_STATUS_OK
ReadX 11674 80761 158 158 NT_STATUS_OK
ReadX 11674 80919 912 912 NT_STATUS_OK
ReadX 11674 81831 1980 1980 NT_STATUS_OK
ReadX 11674 83811 2256 2256 NT_STATUS_OK
ReadX 11674 86067 400 400 NT_STATUS_OK
ReadX 11674 86467 252 252 NT_STATUS_OK
ReadX 11674 86719 42 42 NT_STATUS_OK
ReadX 11674 86761 725 725 NT_STATUS_OK
ReadX 11674 2009 512 512 NT_STATUS_OK
ReadX 11674 3895 9 9 NT_STATUS_OK
ReadX 11674 3781 46 46 NT_STATUS_OK
ReadX 11674 4059 92 92 NT_STATUS_OK
ReadX 11674 3781 92 92 NT_STATUS_OK
ReadX 11674 3986 184 184 NT_STATUS_OK
ReadX 11674 3987 16384 16384 NT_STATUS_OK
ReadX 11674 3902 16384 16384 NT_STATUS_OK
ReadX 11674 3781 10240 10240 NT_STATUS_OK
ReadX 11674 3821 16384 16384 NT_STATUS_OK
ReadX 11674 3891 935 935 NT_STATUS_OK
ReadX 11674 4060 10240 10240 NT_STATUS_OK
ReadX 11674 4059 184 184 NT_STATUS_OK
ReadX 11674 256 184 184 NT_STATUS_OK
ReadX 11674 256 1026 1026 NT_STATUS_OK
ReadX 11674 3901 326 326 NT_STATUS_OK
ReadX 11674 3899 652 652 NT_STATUS_OK
ReadX 11674 256 2 2 NT_STATUS_OK
ReadX 11674 258 4948 4948 NT_STATUS_OK
Close 11674 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11689 NT_STATUS_OK
Close 11689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11692 NT_STATUS_OK
WriteX 11692 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11692 258 NT_STATUS_OK
WriteX 11692 0 65536 65536 NT_STATUS_OK
WriteX 11692 65536 65536 65536 NT_STATUS_OK
WriteX 11692 131072 65536 65536 NT_STATUS_OK
WriteX 11692 196608 65536 65536 NT_STATUS_OK
WriteX 11692 262144 65536 65536 NT_STATUS_OK
WriteX 11692 327680 65536 65536 NT_STATUS_OK
WriteX 11692 393216 65536 65536 NT_STATUS_OK
WriteX 11692 458752 65536 65536 NT_STATUS_OK
WriteX 11692 524288 65536 65536 NT_STATUS_OK
WriteX 11692 589824 35257 35257 NT_STATUS_OK
Close 11692 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11694 NT_STATUS_OK
Close 11694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11697 NT_STATUS_OK
WriteX 11697 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11697 258 NT_STATUS_OK
WriteX 11697 0 65536 65536 NT_STATUS_OK
WriteX 11697 65536 65536 65536 NT_STATUS_OK
WriteX 11697 131072 65536 65536 NT_STATUS_OK
WriteX 11697 196608 65536 65536 NT_STATUS_OK
WriteX 11697 262144 65536 65536 NT_STATUS_OK
WriteX 11697 327680 65536 65536 NT_STATUS_OK
WriteX 11697 393216 65536 65536 NT_STATUS_OK
WriteX 11697 458752 65536 65536 NT_STATUS_OK
WriteX 11697 524288 65536 65536 NT_STATUS_OK
WriteX 11697 589824 57598 57598 NT_STATUS_OK
Close 11697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11699 NT_STATUS_OK
WriteX 11699 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11699 258 NT_STATUS_OK
WriteX 11699 0 12543 12543 NT_STATUS_OK
Flush 11699 NT_STATUS_OK
Close 11699 NT_STATUS_OK
Close 11683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11701 NT_STATUS_OK
Close 11701 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11703 NT_STATUS_OK
ReadX 11703 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11705 NT_STATUS_OK
QUERY_FILE_INFORMATION 11705 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11705 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11705 1005 NT_STATUS_OK
ReadX 11705 1938 24 24 NT_STATUS_OK
ReadX 11705 1920 276 276 NT_STATUS_OK
ReadX 11705 1918 14 14 NT_STATUS_OK
ReadX 11705 1918 7 7 NT_STATUS_OK
ReadX 11705 1919 12 12 NT_STATUS_OK
ReadX 11705 1919 8 8 NT_STATUS_OK
ReadX 11705 1917 15 15 NT_STATUS_OK
ReadX 11705 0 16 16 NT_STATUS_OK
ReadX 11705 16 2048 2048 NT_STATUS_OK
ReadX 11705 2064 2048 2048 NT_STATUS_OK
ReadX 11705 257 2048 2048 NT_STATUS_OK
ReadX 11705 385 2048 2048 NT_STATUS_OK
ReadX 11705 513 2048 2048 NT_STATUS_OK
ReadX 11705 641 2048 2048 NT_STATUS_OK
ReadX 11705 769 2048 2048 NT_STATUS_OK
ReadX 11705 897 2048 2048 NT_STATUS_OK
ReadX 11705 1025 2048 2048 NT_STATUS_OK
ReadX 11705 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11707 NT_STATUS_OK
Close 11707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11710 NT_STATUS_OK
WriteX 11710 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11710 258 NT_STATUS_OK
WriteX 11710 0 11588 11588 NT_STATUS_OK
Flush 11710 NT_STATUS_OK
Close 11710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11711 NT_STATUS_OK
Close 11711 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11713 NT_STATUS_OK
ReadX 11713 0 4096 4096 NT_STATUS_OK
Close 11705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11715 NT_STATUS_OK
WriteX 11715 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11715 258 NT_STATUS_OK
WriteX 11715 0 11615 11615 NT_STATUS_OK
Flush 11715 NT_STATUS_OK
Close 11715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11717 NT_STATUS_OK
Close 11717 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11719 NT_STATUS_OK
ReadX 11719 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11721 NT_STATUS_OK
Close 11721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11724 NT_STATUS_OK
WriteX 11724 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11724 258 NT_STATUS_OK
WriteX 11724 0 65536 65536 NT_STATUS_OK
WriteX 11724 65536 16050 16050 NT_STATUS_OK
Close 11724 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11704 1939 64 64 NT_STATUS_OK
ReadX 11704 128 248 248 NT_STATUS_OK
ReadX 11704 128 568 568 NT_STATUS_OK
ReadX 11704 3872 1536 1536 NT_STATUS_OK
ReadX 11704 3456 2560 2560 NT_STATUS_OK
ReadX 11704 3136 512 512 NT_STATUS_OK
ReadX 11704 2880 4096 4096 NT_STATUS_OK
ReadX 11704 3264 3072 3072 NT_STATUS_OK
ReadX 11704 320 4096 4096 NT_STATUS_OK
ReadX 11704 1024 4096 4096 NT_STATUS_OK
ReadX 11704 3616 4096 4096 NT_STATUS_OK
ReadX 11704 1939 64 64 NT_STATUS_OK
ReadX 11704 128 248 248 NT_STATUS_OK
ReadX 11704 128 608 608 NT_STATUS_OK
ReadX 11704 2858 1024 1024 NT_STATUS_OK
ReadX 11704 2810 4096 4096 NT_STATUS_OK
ReadX 11704 2826 4096 4096 NT_STATUS_OK
ReadX 11704 2580 2048 2048 NT_STATUS_OK
ReadX 11704 2800 2560 2560 NT_STATUS_OK
ReadX 11704 2100 4096 4096 NT_STATUS_OK
ReadX 11704 2084 4096 4096 NT_STATUS_OK
ReadX 11704 868 4096 4096 NT_STATUS_OK
ReadX 11704 2324 4096 4096 NT_STATUS_OK
ReadX 11704 884 4096 4096 NT_STATUS_OK
ReadX 11704 2604 1024 1024 NT_STATUS_OK
ReadX 11704 580 4096 4096 NT_STATUS_OK
ReadX 11704 596 4096 4096 NT_STATUS_OK
ReadX 11704 2752 4096 4096 NT_STATUS_OK
ReadX 11704 2842 1024 1024 NT_STATUS_OK
ReadX 11704 660 4096 4096 NT_STATUS_OK
ReadX 11704 2720 4096 4096 NT_STATUS_OK
ReadX 11704 2736 4096 4096 NT_STATUS_OK
ReadX 11704 628 4096 4096 NT_STATUS_OK
ReadX 11704 2704 4096 4096 NT_STATUS_OK
ReadX 11704 1556 4096 4096 NT_STATUS_OK
ReadX 11704 576 4096 4096 NT_STATUS_OK
ReadX 11704 3168 1536 1536 NT_STATUS_OK
ReadX 11704 832 4096 4096 NT_STATUS_OK
ReadX 11704 1088 4096 4096 NT_STATUS_OK
ReadX 11704 1344 4096 4096 NT_STATUS_OK
ReadX 11704 1600 4096 4096 NT_STATUS_OK
ReadX 11704 1856 4096 4096 NT_STATUS_OK
ReadX 11704 2112 4096 4096 NT_STATUS_OK
ReadX 11704 1892 4096 4096 NT_STATUS_OK
ReadX 11704 820 4096 4096 NT_STATUS_OK
ReadX 11704 788 4096 4096 NT_STATUS_OK
ReadX 11704 1604 4096 4096 NT_STATUS_OK
ReadX 11704 3648 4096 4096 NT_STATUS_OK
ReadX 11704 2608 4096 4096 NT_STATUS_OK
ReadX 11704 548 4096 4096 NT_STATUS_OK
ReadX 11704 740 4096 4096 NT_STATUS_OK
ReadX 11704 1344 4096 4096 NT_STATUS_OK
ReadX 11704 3392 4096 4096 NT_STATUS_OK
ReadX 11704 3904 4096 4096 NT_STATUS_OK
ReadX 11704 644 4096 4096 NT_STATUS_OK
ReadX 11704 676 4096 4096 NT_STATUS_OK
ReadX 11704 2688 4096 4096 NT_STATUS_OK
ReadX 11704 320 4096 4096 NT_STATUS_OK
ReadX 11704 900 4096 4096 NT_STATUS_OK
ReadX 11704 1908 4096 4096 NT_STATUS_OK
ReadX 11704 852 4096 4096 NT_STATUS_OK
ReadX 11704 724 4096 4096 NT_STATUS_OK
ReadX 11704 2292 4096 4096 NT_STATUS_OK
ReadX 11704 612 4096 4096 NT_STATUS_OK
ReadX 11704 388 4096 4096 NT_STATUS_OK
ReadX 11704 2368 4096 4096 NT_STATUS_OK
ReadX 11704 2624 4096 4096 NT_STATUS_OK
ReadX 11704 500 4096 4096 NT_STATUS_OK
ReadX 11704 356 4096 4096 NT_STATUS_OK
ReadX 11704 1024 4096 4096 NT_STATUS_OK
ReadX 11704 576 4096 4096 NT_STATUS_OK
ReadX 11704 340 4096 4096 NT_STATUS_OK
ReadX 11704 420 4096 4096 NT_STATUS_OK
ReadX 11704 1600 4096 4096 NT_STATUS_OK
ReadX 11704 404 4096 4096 NT_STATUS_OK
ReadX 11704 1428 4096 4096 NT_STATUS_OK
ReadX 11704 2656 4096 4096 NT_STATUS_OK
ReadX 11704 2624 4096 4096 NT_STATUS_OK
ReadX 11704 452 4096 4096 NT_STATUS_OK
ReadX 11704 692 4096 4096 NT_STATUS_OK
ReadX 11704 564 4096 4096 NT_STATUS_OK
ReadX 11704 372 4096 4096 NT_STATUS_OK
ReadX 11704 468 4096 4096 NT_STATUS_OK
ReadX 11704 484 4096 4096 NT_STATUS_OK
ReadX 11704 1088 4096 4096 NT_STATUS_OK
ReadX 11704 1924 4096 4096 NT_STATUS_OK
ReadX 11704 2768 4096 4096 NT_STATUS_OK
ReadX 11704 832 4096 4096 NT_STATUS_OK
ReadX 11704 836 4096 4096 NT_STATUS_OK
ReadX 11704 1856 4096 4096 NT_STATUS_OK
ReadX 11704 2640 4096 4096 NT_STATUS_OK
ReadX 11704 436 4096 4096 NT_STATUS_OK
ReadX 11704 1828 4096 4096 NT_STATUS_OK
ReadX 11704 804 4096 4096 NT_STATUS_OK
ReadX 11704 1860 4096 4096 NT_STATUS_OK
ReadX 11704 1812 4096 4096 NT_STATUS_OK
ReadX 11704 756 4096 4096 NT_STATUS_OK
ReadX 11704 1636 4096 4096 NT_STATUS_OK
ReadX 11704 772 4096 4096 NT_STATUS_OK
ReadX 11704 2036 4096 4096 NT_STATUS_OK
ReadX 11704 1220 4096 4096 NT_STATUS_OK
ReadX 11704 1652 4096 4096 NT_STATUS_OK
ReadX 11704 2588 4096 4096 NT_STATUS_OK
ReadX 11704 916 4096 4096 NT_STATUS_OK
ReadX 11704 260 4096 4096 NT_STATUS_OK
ReadX 11704 932 4096 4096 NT_STATUS_OK
ReadX 11704 2624 4096 4096 NT_STATUS_OK
ReadX 11704 308 4096 4096 NT_STATUS_OK
ReadX 11704 292 4096 4096 NT_STATUS_OK
ReadX 11704 1140 4096 4096 NT_STATUS_OK
ReadX 11704 276 4096 4096 NT_STATUS_OK
ReadX 11704 2020 4096 4096 NT_STATUS_OK
ReadX 11704 2880 4096 4096 NT_STATUS_OK
ReadX 11704 516 4096 4096 NT_STATUS_OK
ReadX 11704 1844 4096 4096 NT_STATUS_OK
ReadX 11704 1124 4096 4096 NT_STATUS_OK
ReadX 11704 3136 4096 4096 NT_STATUS_OK
ReadX 11704 324 4096 4096 NT_STATUS_OK
ReadX 11704 1156 4096 4096 NT_STATUS_OK
ReadX 11704 1172 4096 4096 NT_STATUS_OK
ReadX 11704 2112 4096 4096 NT_STATUS_OK
ReadX 11704 2368 4096 4096 NT_STATUS_OK
ReadX 11704 964 4096 4096 NT_STATUS_OK
ReadX 11704 980 4096 4096 NT_STATUS_OK
ReadX 11704 1012 4096 4096 NT_STATUS_OK
ReadX 11704 532 4096 4096 NT_STATUS_OK
ReadX 11704 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11704 1620 4096 4096 NT_STATUS_OK
ReadX 11704 1604 4096 4096 NT_STATUS_OK
ReadX 11704 2116 4096 4096 NT_STATUS_OK
ReadX 11704 2132 4096 4096 NT_STATUS_OK
ReadX 11704 2148 4096 4096 NT_STATUS_OK
ReadX 11704 2276 4096 4096 NT_STATUS_OK
ReadX 11704 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11726 NT_STATUS_OK
Close 11726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11729 NT_STATUS_OK
QUERY_FILE_INFORMATION 11684 1004 NT_STATUS_OK
Close 11684 NT_STATUS_OK
WriteX 11729 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11729 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11686 1004 NT_STATUS_OK
Close 11686 NT_STATUS_OK
WriteX 11729 0 65536 65536 NT_STATUS_OK
WriteX 11729 65536 64850 64850 NT_STATUS_OK
Close 11729 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11731 NT_STATUS_OK
WriteX 11731 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11731 258 NT_STATUS_OK
ReadX 11704 2068 4096 4096 NT_STATUS_OK
ReadX 11704 1588 4096 4096 NT_STATUS_OK
ReadX 11704 1572 4096 4096 NT_STATUS_OK
WriteX 11731 0 18630 18630 NT_STATUS_OK
Flush 11731 NT_STATUS_OK
Close 11731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11733 NT_STATUS_OK
Close 11733 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11735 NT_STATUS_OK
ReadX 11735 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11704 612 4096 4096 NT_STATUS_OK
ReadX 11704 564 4096 4096 NT_STATUS_OK
ReadX 11704 1876 4096 4096 NT_STATUS_OK
ReadX 11704 628 4096 4096 NT_STATUS_OK
ReadX 11704 740 4096 4096 NT_STATUS_OK
ReadX 11704 724 4096 4096 NT_STATUS_OK
ReadX 11704 644 4096 4096 NT_STATUS_OK
ReadX 11704 2324 4096 4096 NT_STATUS_OK
ReadX 11704 660 4096 4096 NT_STATUS_OK
ReadX 11704 852 4096 4096 NT_STATUS_OK
ReadX 11704 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11704 2368 4096 4096 NT_STATUS_OK
ReadX 11704 1024 4096 4096 NT_STATUS_OK
ReadX 11704 320 4096 4096 NT_STATUS_OK
ReadX 11704 580 4096 4096 NT_STATUS_OK
ReadX 11704 3136 512 512 NT_STATUS_OK
ReadX 11704 2880 4096 4096 NT_STATUS_OK
Close 11704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11736 NT_STATUS_OK
ReadX 11736 61440 4096 4096 NT_STATUS_OK
ReadX 11736 126976 4096 4096 NT_STATUS_OK
WriteX 11736 0 65536 65536 NT_STATUS_OK
WriteX 11736 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11737 NT_STATUS_OK
ReadX 11737 61440 4096 4096 NT_STATUS_OK
ReadX 11737 126976 4096 4096 NT_STATUS_OK
ReadX 11737 192512 4096 4096 NT_STATUS_OK
ReadX 11737 258048 4096 4096 NT_STATUS_OK
WriteX 11737 0 65536 65536 NT_STATUS_OK
WriteX 11737 65536 65536 65536 NT_STATUS_OK
WriteX 11737 131072 65536 65536 NT_STATUS_OK
WriteX 11737 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11738 NT_STATUS_OK
ReadX 11738 61440 4096 4096 NT_STATUS_OK
ReadX 11738 126976 4096 4096 NT_STATUS_OK
ReadX 11738 192512 4096 4096 NT_STATUS_OK
ReadX 11738 258048 4096 4096 NT_STATUS_OK
ReadX 11738 323584 4096 4096 NT_STATUS_OK
ReadX 11738 389120 4096 4096 NT_STATUS_OK
ReadX 11738 454656 4096 4096 NT_STATUS_OK
ReadX 11738 520192 4096 4096 NT_STATUS_OK
WriteX 11738 0 65536 65536 NT_STATUS_OK
WriteX 11738 65536 65536 65536 NT_STATUS_OK
WriteX 11738 131072 65536 65536 NT_STATUS_OK
WriteX 11738 196608 65536 65536 NT_STATUS_OK
WriteX 11738 262144 65536 65536 NT_STATUS_OK
WriteX 11738 327680 65536 65536 NT_STATUS_OK
WriteX 11738 393216 65536 65536 NT_STATUS_OK
WriteX 11738 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11739 NT_STATUS_OK
ReadX 11739 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11740 NT_STATUS_OK
Close 11740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11741 NT_STATUS_OK
WriteX 11741 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11741 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11739 0 8192 8192 NT_STATUS_OK
Flush 11739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11739 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11739 0 8192 8192 NT_STATUS_OK
Flush 11739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11739 0 8192 8192 NT_STATUS_OK
Flush 11739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11739 0 8192 8192 NT_STATUS_OK
Flush 11739 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11743 NT_STATUS_OK
Close 11743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11735 NT_STATUS_OK
Close 11703 NT_STATUS_OK
Close 11736 NT_STATUS_OK
Close 11737 NT_STATUS_OK
Close 11738 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11746 NT_STATUS_OK
WriteX 11746 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11746 258 NT_STATUS_OK
WriteX 11746 0 62591 62591 NT_STATUS_OK
Close 11746 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11748 NT_STATUS_OK
Close 11748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11751 NT_STATUS_OK
WriteX 11751 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11751 258 NT_STATUS_OK
WriteX 11751 0 10845 10845 NT_STATUS_OK
Close 11751 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11753 NT_STATUS_OK
Close 11753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11756 NT_STATUS_OK
WriteX 11756 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11756 258 NT_STATUS_OK
WriteX 11756 0 30118 30118 NT_STATUS_OK
Close 11756 NT_STATUS_OK
WriteX 11739 0 4096 4096 NT_STATUS_OK
WriteX 11741 0 64 64 NT_STATUS_OK
Close 11741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11739 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11758 NT_STATUS_OK
ReadX 11758 0 61440 61440 NT_STATUS_OK
ReadX 11758 61440 4096 4096 NT_STATUS_OK
ReadX 11758 65536 61440 61440 NT_STATUS_OK
ReadX 11758 126976 4096 4096 NT_STATUS_OK
ReadX 11758 131072 61440 61440 NT_STATUS_OK
ReadX 11758 192512 4096 4096 NT_STATUS_OK
ReadX 11758 196608 61440 61440 NT_STATUS_OK
ReadX 11758 258048 4096 4096 NT_STATUS_OK
ReadX 11758 262144 61440 61440 NT_STATUS_OK
ReadX 11758 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 61440 61440 NT_STATUS_OK
ReadX 11759 61440 4096 4096 NT_STATUS_OK
ReadX 11759 65536 61440 61440 NT_STATUS_OK
ReadX 11759 126976 4096 4096 NT_STATUS_OK
ReadX 11759 131072 61440 61440 NT_STATUS_OK
ReadX 11759 192512 4096 4096 NT_STATUS_OK
ReadX 11759 196608 61440 61440 NT_STATUS_OK
ReadX 11759 258048 4096 4096 NT_STATUS_OK
ReadX 11759 262144 61440 61440 NT_STATUS_OK
ReadX 11759 323584 4096 4096 NT_STATUS_OK
ReadX 11759 327680 61440 61440 NT_STATUS_OK
ReadX 11759 389120 4096 4096 NT_STATUS_OK
ReadX 11759 393216 61440 61440 NT_STATUS_OK
ReadX 11759 454656 4096 4096 NT_STATUS_OK
ReadX 11759 458752 61440 61440 NT_STATUS_OK
ReadX 11759 520192 4096 4096 NT_STATUS_OK
ReadX 11759 524288 61440 61440 NT_STATUS_OK
ReadX 11759 585728 4096 4096 NT_STATUS_OK
ReadX 11759 589824 61440 61440 NT_STATUS_OK
ReadX 11759 651264 4096 4096 NT_STATUS_OK
ReadX 11759 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11760 NT_STATUS_OK
ReadX 11760 0 61440 61440 NT_STATUS_OK
ReadX 11760 61440 4096 4096 NT_STATUS_OK
ReadX 11760 65536 61440 61440 NT_STATUS_OK
ReadX 11760 126976 4096 4096 NT_STATUS_OK
ReadX 11760 131072 61440 61440 NT_STATUS_OK
ReadX 11760 192512 4096 4096 NT_STATUS_OK
ReadX 11760 196608 61440 61440 NT_STATUS_OK
ReadX 11760 258048 4096 4096 NT_STATUS_OK
ReadX 11760 262144 61440 61440 NT_STATUS_OK
ReadX 11760 323584 4096 4096 NT_STATUS_OK
ReadX 11760 327680 61440 61440 NT_STATUS_OK
ReadX 11760 389120 4096 4096 NT_STATUS_OK
ReadX 11760 393216 61440 61440 NT_STATUS_OK
ReadX 11760 454656 4096 4096 NT_STATUS_OK
ReadX 11760 458752 61440 61440 NT_STATUS_OK
ReadX 11760 520192 4096 4096 NT_STATUS_OK
ReadX 11760 524288 61440 61440 NT_STATUS_OK
ReadX 11760 585728 4096 4096 NT_STATUS_OK
ReadX 11760 589824 61440 61440 NT_STATUS_OK
ReadX 11760 651264 4096 4096 NT_STATUS_OK
ReadX 11760 655360 61440 61440 NT_STATUS_OK
ReadX 11760 716800 4096 4096 NT_STATUS_OK
ReadX 11760 720896 61440 61440 NT_STATUS_OK
ReadX 11760 782336 4096 4096 NT_STATUS_OK
ReadX 11760 786432 61440 61440 NT_STATUS_OK
ReadX 11760 847872 4096 4096 NT_STATUS_OK
ReadX 11760 851968 61440 61440 NT_STATUS_OK
ReadX 11760 913408 4096 4096 NT_STATUS_OK
ReadX 11760 917504 61440 61440 NT_STATUS_OK
ReadX 11760 978944 4096 4096 NT_STATUS_OK
ReadX 11760 983040 61440 61440 NT_STATUS_OK
ReadX 11760 1044480 4096 4096 NT_STATUS_OK
ReadX 11760 1048576 61440 61440 NT_STATUS_OK
ReadX 11760 1110016 4096 4096 NT_STATUS_OK
ReadX 11760 1114112 61440 61440 NT_STATUS_OK
ReadX 11760 1175552 4096 4096 NT_STATUS_OK
ReadX 11760 1179648 61440 61440 NT_STATUS_OK
ReadX 11760 1241088 4096 4096 NT_STATUS_OK
ReadX 11760 1245184 61440 61440 NT_STATUS_OK
ReadX 11760 1306624 4096 4096 NT_STATUS_OK
ReadX 11760 1310720 61440 61440 NT_STATUS_OK
ReadX 11760 1372160 4096 4096 NT_STATUS_OK
ReadX 11760 1376256 61440 61440 NT_STATUS_OK
ReadX 11760 1437696 4096 4096 NT_STATUS_OK
ReadX 11760 1441792 61440 61440 NT_STATUS_OK
ReadX 11760 1503232 4096 4096 NT_STATUS_OK
ReadX 11760 1507328 61440 61440 NT_STATUS_OK
ReadX 11760 1568768 4096 4096 NT_STATUS_OK
ReadX 11760 1572864 61440 61440 NT_STATUS_OK
ReadX 11760 1634304 4096 4096 NT_STATUS_OK
ReadX 11760 1638400 61440 61440 NT_STATUS_OK
ReadX 11760 1699840 4096 4096 NT_STATUS_OK
ReadX 11760 1703936 61440 61440 NT_STATUS_OK
ReadX 11760 1765376 4096 4096 NT_STATUS_OK
ReadX 11760 1769472 61440 61440 NT_STATUS_OK
ReadX 11760 1830912 4096 4096 NT_STATUS_OK
ReadX 11760 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11761 NT_STATUS_OK
Close 11761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11758 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Close 11760 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11763 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11764 NT_STATUS_OK
ReadX 11764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11765 NT_STATUS_OK
ReadX 11765 0 4096 4096 NT_STATUS_OK
ReadX 11765 4096 4096 4096 NT_STATUS_OK
ReadX 11765 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11766 NT_STATUS_OK
Close 11766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11763 NT_STATUS_OK
Close 11764 NT_STATUS_OK
Close 11765 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11768 NT_STATUS_OK
ReadX 11768 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11769 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11769 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11770 NT_STATUS_OK
Close 11770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11768 NT_STATUS_OK
Close 11769 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11772 NT_STATUS_OK
ReadX 11772 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11773 NT_STATUS_OK
ReadX 11773 0 8192 8192 NT_STATUS_OK
ReadX 11773 8192 8192 8192 NT_STATUS_OK
ReadX 11773 16384 8192 8192 NT_STATUS_OK
ReadX 11773 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11775 NT_STATUS_OK
Close 11775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11773 NT_STATUS_OK
Close 11772 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11778 NT_STATUS_OK
WriteX 11778 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11778 258 NT_STATUS_OK
WriteX 11778 0 10438 10438 NT_STATUS_OK
Close 11778 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11779 NT_STATUS_OK
Close 11779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11780 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11781 NT_STATUS_OK
Close 11781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11782 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11783 NT_STATUS_OK
Close 11783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11784 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11785 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11786 NT_STATUS_OK
Close 11786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11787 NT_STATUS_OK
ReadX 11787 0 4096 4096 NT_STATUS_OK
ReadX 11787 4096 4096 4096 NT_STATUS_OK
ReadX 11787 8192 4096 4096 NT_STATUS_OK
ReadX 11787 12288 8192 8192 NT_STATUS_OK
ReadX 11787 20480 8192 8192 NT_STATUS_OK
ReadX 11787 28672 8192 8192 NT_STATUS_OK
ReadX 11787 36864 8192 8192 NT_STATUS_OK
ReadX 11787 45056 8192 8192 NT_STATUS_OK
ReadX 11787 53248 8192 8192 NT_STATUS_OK
ReadX 11787 61440 8192 8192 NT_STATUS_OK
ReadX 11787 69632 8192 8192 NT_STATUS_OK
ReadX 11787 77824 8192 8192 NT_STATUS_OK
ReadX 11787 86016 8192 8192 NT_STATUS_OK
ReadX 11787 94208 8192 8192 NT_STATUS_OK
ReadX 11787 102400 8192 8192 NT_STATUS_OK
ReadX 11787 110592 8192 8192 NT_STATUS_OK
ReadX 11787 118784 8192 8192 NT_STATUS_OK
ReadX 11787 126976 8192 8192 NT_STATUS_OK
ReadX 11787 135168 8192 8192 NT_STATUS_OK
ReadX 11787 143360 8192 8192 NT_STATUS_OK
ReadX 11787 151552 8192 8192 NT_STATUS_OK
ReadX 11787 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11787 NT_STATUS_OK
Close 11780 NT_STATUS_OK
Close 11782 NT_STATUS_OK
Close 11784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11789 NT_STATUS_OK
Close 11789 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11792 NT_STATUS_OK
WriteX 11792 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11792 258 NT_STATUS_OK
WriteX 11792 0 28489 28489 NT_STATUS_OK
Close 11792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11793 NT_STATUS_OK
Close 11793 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11795 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11795 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11796 NT_STATUS_OK
Close 11796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11795 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11798 NT_STATUS_OK
ReadX 11798 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11799 NT_STATUS_OK
ReadX 11799 0 8192 8192 NT_STATUS_OK
ReadX 11799 8192 8192 8192 NT_STATUS_OK
ReadX 11799 16384 8192 8192 NT_STATUS_OK
ReadX 11799 24576 8192 8192 NT_STATUS_OK
ReadX 11799 32768 16384 16384 NT_STATUS_OK
ReadX 11799 49152 8192 8192 NT_STATUS_OK
ReadX 11799 57344 8192 8192 NT_STATUS_OK
ReadX 11799 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11801 NT_STATUS_OK
Close 11801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11799 NT_STATUS_OK
Close 11798 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11804 NT_STATUS_OK
WriteX 11804 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11804 258 NT_STATUS_OK
WriteX 11804 0 29253 29253 NT_STATUS_OK
Close 11804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11805 NT_STATUS_OK
Close 11805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11808 NT_STATUS_OK
Close 11808 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11811 NT_STATUS_OK
WriteX 11811 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11811 258 NT_STATUS_OK
WriteX 11811 0 30183 30183 NT_STATUS_OK
Close 11811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11812 NT_STATUS_OK
Close 11812 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11814 NT_STATUS_OK
WriteX 11814 0 510 510 NT_STATUS_OK
WriteX 11814 510 512 512 NT_STATUS_OK
WriteX 11814 1022 510 510 NT_STATUS_OK
WriteX 11814 1532 510 510 NT_STATUS_OK
WriteX 11814 2042 168 168 NT_STATUS_OK
Close 11814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11815 NT_STATUS_OK
Close 11815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11817 NT_STATUS_OK
ReadX 11817 0 4096 4096 NT_STATUS_OK
WriteX 11817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11818 NT_STATUS_OK
ReadX 11818 61440 4096 4096 NT_STATUS_OK
ReadX 11818 126976 4096 4096 NT_STATUS_OK
WriteX 11818 0 65536 65536 NT_STATUS_OK
WriteX 11818 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11819 NT_STATUS_OK
ReadX 11819 61440 4096 4096 NT_STATUS_OK
ReadX 11819 126976 4096 4096 NT_STATUS_OK
ReadX 11819 192512 4096 4096 NT_STATUS_OK
ReadX 11819 258048 4096 4096 NT_STATUS_OK
WriteX 11819 0 65536 65536 NT_STATUS_OK
WriteX 11819 65536 65536 65536 NT_STATUS_OK
WriteX 11819 131072 65536 65536 NT_STATUS_OK
WriteX 11819 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11820 NT_STATUS_OK
ReadX 11820 61440 4096 4096 NT_STATUS_OK
ReadX 11820 126976 4096 4096 NT_STATUS_OK
ReadX 11820 192512 4096 4096 NT_STATUS_OK
ReadX 11820 258048 4096 4096 NT_STATUS_OK
ReadX 11820 323584 4096 4096 NT_STATUS_OK
ReadX 11820 389120 4096 4096 NT_STATUS_OK
ReadX 11820 454656 4096 4096 NT_STATUS_OK
ReadX 11820 520192 4096 4096 NT_STATUS_OK
WriteX 11820 0 65536 65536 NT_STATUS_OK
WriteX 11820 65536 65536 65536 NT_STATUS_OK
WriteX 11820 131072 65536 65536 NT_STATUS_OK
WriteX 11820 196608 65536 65536 NT_STATUS_OK
WriteX 11820 262144 65536 65536 NT_STATUS_OK
WriteX 11820 327680 65536 65536 NT_STATUS_OK
WriteX 11820 393216 65536 65536 NT_STATUS_OK
WriteX 11820 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11821 NT_STATUS_OK
Close 11821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11817 NT_STATUS_OK
Close 11818 NT_STATUS_OK
Close 11819 NT_STATUS_OK
Close 11820 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11823 NT_STATUS_OK
Close 11823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11827 NT_STATUS_OK
Close 11827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11830 NT_STATUS_OK
Close 11830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11832 NT_STATUS_OK
Close 11832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11836 NT_STATUS_OK
Close 11836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11839 NT_STATUS_OK
Close 11839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11841 NT_STATUS_OK
Close 11841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11845 NT_STATUS_OK
Close 11845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11850 NT_STATUS_OK
Close 11850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11855 NT_STATUS_OK
Close 11855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11860 NT_STATUS_OK
Close 11860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11865 NT_STATUS_OK
Close 11865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11870 NT_STATUS_OK
Close 11870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11875 NT_STATUS_OK
Close 11875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11880 NT_STATUS_OK
Close 11880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11883 NT_STATUS_OK
Close 11883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11886 NT_STATUS_OK
Close 11886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11889 NT_STATUS_OK
WriteX 11889 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11889 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11889 0 65536 65536 NT_STATUS_OK
WriteX 11889 65536 65536 65536 NT_STATUS_OK
WriteX 11889 131072 65536 65536 NT_STATUS_OK
WriteX 11889 196608 65536 65536 NT_STATUS_OK
WriteX 11889 262144 26634 26634 NT_STATUS_OK
Close 11889 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11894 NT_STATUS_OK
Close 11894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11895 NT_STATUS_OK
Close 11895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11896 NT_STATUS_OK
ReadX 11896 0 4096 4096 NT_STATUS_OK
Close 11896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11897 NT_STATUS_OK
ReadX 11897 0 4096 4096 NT_STATUS_OK
ReadX 11897 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11898 NT_STATUS_OK
Close 11898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11897 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11902 NT_STATUS_OK
Close 11902 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11905 NT_STATUS_OK
Close 11905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11907 NT_STATUS_OK
Close 11907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11911 NT_STATUS_OK
Close 11911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11914 NT_STATUS_OK
Close 11914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11916 NT_STATUS_OK
Close 11916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11920 NT_STATUS_OK
Close 11920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11925 NT_STATUS_OK
Close 11925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11930 NT_STATUS_OK
Close 11930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11935 NT_STATUS_OK
Close 11935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11940 NT_STATUS_OK
Close 11940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11945 NT_STATUS_OK
Close 11945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11949 NT_STATUS_OK
Close 11949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11954 NT_STATUS_OK
Close 11954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11959 NT_STATUS_OK
Close 11959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11962 NT_STATUS_OK
Close 11962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11964 NT_STATUS_OK
Close 11964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11974 NT_STATUS_OK
Close 11974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11975 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11976 NT_STATUS_OK
ReadX 11976 0 4096 4096 NT_STATUS_OK
Close 11976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11977 NT_STATUS_OK
ReadX 11977 0 4096 4096 NT_STATUS_OK
Close 11977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11978 NT_STATUS_OK
ReadX 11978 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11988 NT_STATUS_OK
Close 11988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11989 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11990 NT_STATUS_OK
ReadX 11990 0 4096 4096 NT_STATUS_OK
Close 11990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11991 NT_STATUS_OK
ReadX 11991 0 4096 4096 NT_STATUS_OK
Close 11991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11992 NT_STATUS_OK
ReadX 11992 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11978 NT_STATUS_OK
Close 11992 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12021 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12021 0 4096 4096 NT_STATUS_OK
Close 12021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12022 NT_STATUS_OK
ReadX 12022 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12023 NT_STATUS_OK
ReadX 12023 0 4096 4096 NT_STATUS_OK
ReadX 12023 4096 4096 4096 NT_STATUS_OK
ReadX 12023 8192 4096 4096 NT_STATUS_OK
ReadX 12023 12288 4096 4096 NT_STATUS_OK
ReadX 12023 16384 4096 4096 NT_STATUS_OK
ReadX 12023 20480 4096 4096 NT_STATUS_OK
ReadX 12023 24576 4096 4096 NT_STATUS_OK
ReadX 12023 28672 4096 4096 NT_STATUS_OK
ReadX 12023 32768 4096 4096 NT_STATUS_OK
ReadX 12023 36864 4096 4096 NT_STATUS_OK
ReadX 12023 40960 4096 4096 NT_STATUS_OK
ReadX 12023 45056 4096 4096 NT_STATUS_OK
ReadX 12023 49152 4096 4096 NT_STATUS_OK
ReadX 12023 53248 4096 4096 NT_STATUS_OK
ReadX 12023 57344 4096 4096 NT_STATUS_OK
ReadX 12023 61440 4096 4096 NT_STATUS_OK
ReadX 12023 65536 4096 4096 NT_STATUS_OK
ReadX 12023 69632 4096 4096 NT_STATUS_OK
ReadX 12023 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12023 1004 NT_STATUS_OK
WriteX 12023 0 4096 4096 NT_STATUS_OK
Close 12023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12024 NT_STATUS_OK
SET_FILE_INFORMATION 12024 1004 NT_STATUS_OK
Close 12024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12025 NT_STATUS_OK
ReadX 12025 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12026 NT_STATUS_OK
Close 12026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12029 NT_STATUS_OK
WriteX 12029 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12029 258 NT_STATUS_OK
WriteX 12029 0 65536 65536 NT_STATUS_OK
WriteX 12029 65536 19979 19979 NT_STATUS_OK
Close 12029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12030 NT_STATUS_OK
ReadX 12030 0 4096 4096 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Flush 12030 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Flush 12030 NT_STATUS_OK
QUERY_FILE_INFORMATION 12030 1004 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Flush 12030 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Flush 12030 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Flush 12030 NT_STATUS_OK
SET_FILE_INFORMATION 12030 1004 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Flush 12030 NT_STATUS_OK
Close 12030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12031 NT_STATUS_OK
ReadX 12031 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12032 NT_STATUS_OK
ReadX 12032 0 4096 4096 NT_STATUS_OK
Close 12031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12033 NT_STATUS_OK
ReadX 12033 0 4096 4096 NT_STATUS_OK
Close 12033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12034 NT_STATUS_OK
ReadX 12034 0 4096 4096 NT_STATUS_OK
Close 12034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12035 NT_STATUS_OK
ReadX 12035 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12035 1004 NT_STATUS_OK
WriteX 12035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12036 NT_STATUS_OK
Close 12036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12032 NT_STATUS_OK
Close 12035 NT_STATUS_OK
Close 12025 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12038 NT_STATUS_OK
Close 12038 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12041 NT_STATUS_OK
WriteX 12041 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12041 258 NT_STATUS_OK
WriteX 12041 0 65536 65536 NT_STATUS_OK
WriteX 12041 65536 17654 17654 NT_STATUS_OK
Close 12041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12042 NT_STATUS_OK
ReadX 12042 0 4096 4096 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
QUERY_FILE_INFORMATION 12042 1004 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
SET_FILE_INFORMATION 12042 1004 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
Close 12042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12043 NT_STATUS_OK
SET_FILE_INFORMATION 12043 1004 NT_STATUS_OK
Close 12043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12044 NT_STATUS_OK
ReadX 12044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12045 NT_STATUS_OK
Close 12045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12047 NT_STATUS_OK
ReadX 12047 0 4096 4096 NT_STATUS_OK
ReadX 12047 4096 4096 4096 NT_STATUS_OK
ReadX 12047 8192 4096 4096 NT_STATUS_OK
ReadX 12047 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12047 16384 4096 4096 NT_STATUS_OK
ReadX 12047 20480 4096 4096 NT_STATUS_OK
ReadX 12047 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12048 NT_STATUS_OK
ReadX 12048 0 4096 4096 NT_STATUS_OK
Close 12048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12049 NT_STATUS_OK
ReadX 12049 0 4096 4096 NT_STATUS_OK
Close 12049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12050 NT_STATUS_OK
ReadX 12050 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12050 1004 NT_STATUS_OK
WriteX 12050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12051 NT_STATUS_OK
Close 12051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12050 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12053 NT_STATUS_OK
Close 12053 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12056 NT_STATUS_OK
WriteX 12056 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12056 258 NT_STATUS_OK
WriteX 12056 0 65536 65536 NT_STATUS_OK
WriteX 12056 65536 19490 19490 NT_STATUS_OK
Close 12056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12057 NT_STATUS_OK
ReadX 12057 0 4096 4096 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
Flush 12057 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
Flush 12057 NT_STATUS_OK
QUERY_FILE_INFORMATION 12057 1004 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
Flush 12057 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
Flush 12057 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
Flush 12057 NT_STATUS_OK
SET_FILE_INFORMATION 12057 1004 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
Flush 12057 NT_STATUS_OK
Close 12057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12058 NT_STATUS_OK
SET_FILE_INFORMATION 12058 1004 NT_STATUS_OK
Close 12058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12059 NT_STATUS_OK
ReadX 12059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12060 NT_STATUS_OK
Close 12060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12062 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12062 0 4096 4096 NT_STATUS_OK
Close 12062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12063 NT_STATUS_OK
ReadX 12063 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12064 NT_STATUS_OK
ReadX 12064 0 4096 4096 NT_STATUS_OK
ReadX 12064 4096 4096 4096 NT_STATUS_OK
ReadX 12064 8192 4096 4096 NT_STATUS_OK
ReadX 12064 12288 4096 4096 NT_STATUS_OK
ReadX 12064 16384 4096 4096 NT_STATUS_OK
ReadX 12064 20480 4096 4096 NT_STATUS_OK
ReadX 12064 24576 4096 4096 NT_STATUS_OK
ReadX 12064 28672 4096 4096 NT_STATUS_OK
ReadX 12064 32768 4096 4096 NT_STATUS_OK
ReadX 12064 36864 4096 4096 NT_STATUS_OK
ReadX 12064 40960 4096 4096 NT_STATUS_OK
ReadX 12064 45056 4096 4096 NT_STATUS_OK
ReadX 12064 49152 4096 4096 NT_STATUS_OK
ReadX 12064 53248 4096 4096 NT_STATUS_OK
ReadX 12064 57344 4096 4096 NT_STATUS_OK
ReadX 12064 61440 4096 4096 NT_STATUS_OK
ReadX 12064 65536 4096 4096 NT_STATUS_OK
ReadX 12064 69632 4096 4096 NT_STATUS_OK
ReadX 12064 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12064 1004 NT_STATUS_OK
WriteX 12064 0 4096 4096 NT_STATUS_OK
Close 12064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12065 NT_STATUS_OK
SET_FILE_INFORMATION 12065 1004 NT_STATUS_OK
Close 12065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12066 NT_STATUS_OK
ReadX 12066 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12067 NT_STATUS_OK
Close 12067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12059 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12070 NT_STATUS_OK
WriteX 12070 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12070 258 NT_STATUS_OK
WriteX 12070 0 65536 65536 NT_STATUS_OK
WriteX 12070 65536 8866 8866 NT_STATUS_OK
Close 12070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12071 NT_STATUS_OK
ReadX 12071 0 4096 4096 NT_STATUS_OK
WriteX 12071 0 4096 4096 NT_STATUS_OK
Flush 12071 NT_STATUS_OK
SET_FILE_INFORMATION 12071 1004 NT_STATUS_OK
WriteX 12071 0 4096 4096 NT_STATUS_OK
Flush 12071 NT_STATUS_OK
Close 12071 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12072 NT_STATUS_OK
ReadX 12072 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12073 NT_STATUS_OK
ReadX 12073 0 4096 4096 NT_STATUS_OK
Close 12073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12074 NT_STATUS_OK
ReadX 12074 0 4096 4096 NT_STATUS_OK
Close 12074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12075 NT_STATUS_OK
ReadX 12075 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12075 1004 NT_STATUS_OK
WriteX 12075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12076 NT_STATUS_OK
Close 12076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12075 NT_STATUS_OK
Close 12066 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12078 NT_STATUS_OK
Close 12078 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12081 NT_STATUS_OK
WriteX 12081 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12081 258 NT_STATUS_OK
WriteX 12081 0 65536 65536 NT_STATUS_OK
WriteX 12081 65536 9298 9298 NT_STATUS_OK
Close 12081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12082 NT_STATUS_OK
ReadX 12082 0 4096 4096 NT_STATUS_OK
WriteX 12082 0 4096 4096 NT_STATUS_OK
Flush 12082 NT_STATUS_OK
SET_FILE_INFORMATION 12082 1004 NT_STATUS_OK
WriteX 12082 0 4096 4096 NT_STATUS_OK
Flush 12082 NT_STATUS_OK
Close 12082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12083 NT_STATUS_OK
SET_FILE_INFORMATION 12083 1004 NT_STATUS_OK
Close 12083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12084 NT_STATUS_OK
ReadX 12084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12085 NT_STATUS_OK
Close 12085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12088 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12088 0 4096 4096 NT_STATUS_OK
Close 12088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12089 NT_STATUS_OK
ReadX 12089 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12089 4096 4096 4096 NT_STATUS_OK
ReadX 12089 8192 4096 4096 NT_STATUS_OK
ReadX 12089 12288 4096 4096 NT_STATUS_OK
ReadX 12089 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12090 NT_STATUS_OK
ReadX 12090 0 4096 4096 NT_STATUS_OK
Close 12090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12091 NT_STATUS_OK
ReadX 12091 0 4096 4096 NT_STATUS_OK
Close 12091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12092 NT_STATUS_OK
ReadX 12092 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12092 1004 NT_STATUS_OK
WriteX 12092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12093 NT_STATUS_OK
Close 12093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12089 NT_STATUS_OK
Close 12092 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12095 NT_STATUS_OK
Close 12095 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12098 NT_STATUS_OK
WriteX 12098 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12098 258 NT_STATUS_OK
WriteX 12098 0 65536 65536 NT_STATUS_OK
WriteX 12098 65536 11540 11540 NT_STATUS_OK
Close 12098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12099 NT_STATUS_OK
ReadX 12099 0 4096 4096 NT_STATUS_OK
WriteX 12099 0 4096 4096 NT_STATUS_OK
Flush 12099 NT_STATUS_OK
SET_FILE_INFORMATION 12099 1004 NT_STATUS_OK
WriteX 12099 0 4096 4096 NT_STATUS_OK
Flush 12099 NT_STATUS_OK
Close 12099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12100 NT_STATUS_OK
SET_FILE_INFORMATION 12100 1004 NT_STATUS_OK
Close 12100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12101 NT_STATUS_OK
ReadX 12101 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12102 NT_STATUS_OK
Close 12102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12104 NT_STATUS_OK
ReadX 12104 61440 4096 4096 NT_STATUS_OK
ReadX 12104 126976 4096 4096 NT_STATUS_OK
WriteX 12104 0 65536 65536 NT_STATUS_OK
WriteX 12104 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12105 NT_STATUS_OK
ReadX 12105 61440 4096 4096 NT_STATUS_OK
ReadX 12105 126976 4096 4096 NT_STATUS_OK
ReadX 12105 192512 4096 4096 NT_STATUS_OK
ReadX 12105 258048 4096 4096 NT_STATUS_OK
WriteX 12105 0 65536 65536 NT_STATUS_OK
WriteX 12105 65536 65536 65536 NT_STATUS_OK
WriteX 12105 131072 65536 65536 NT_STATUS_OK
WriteX 12105 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12106 NT_STATUS_OK
ReadX 12106 61440 4096 4096 NT_STATUS_OK
ReadX 12106 126976 4096 4096 NT_STATUS_OK
ReadX 12106 192512 4096 4096 NT_STATUS_OK
ReadX 12106 258048 4096 4096 NT_STATUS_OK
ReadX 12106 323584 4096 4096 NT_STATUS_OK
ReadX 12106 389120 4096 4096 NT_STATUS_OK
ReadX 12106 454656 4096 4096 NT_STATUS_OK
ReadX 12106 520192 4096 4096 NT_STATUS_OK
WriteX 12106 0 65536 65536 NT_STATUS_OK
WriteX 12106 65536 65536 65536 NT_STATUS_OK
WriteX 12106 131072 65536 65536 NT_STATUS_OK
WriteX 12106 196608 65536 65536 NT_STATUS_OK
WriteX 12106 262144 65536 65536 NT_STATUS_OK
WriteX 12106 327680 65536 65536 NT_STATUS_OK
WriteX 12106 393216 65536 65536 NT_STATUS_OK
WriteX 12106 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12107 NT_STATUS_OK
ReadX 12107 0 4096 4096 NT_STATUS_OK
ReadX 12107 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12108 NT_STATUS_OK
WriteX 12108 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12108 258 NT_STATUS_OK
WriteX 12108 0 53 53 NT_STATUS_OK
Close 12108 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12109 NT_STATUS_OK
Close 12109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12101 NT_STATUS_OK
Close 12047 NT_STATUS_OK
Close 12104 NT_STATUS_OK
Close 12105 NT_STATUS_OK
Close 12106 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12107 8192 4096 4096 NT_STATUS_OK
ReadX 12107 12288 4096 4096 NT_STATUS_OK
WriteX 12111 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12111 258 NT_STATUS_OK
ReadX 12107 16384 4096 4096 NT_STATUS_OK
ReadX 12107 20480 4096 4096 NT_STATUS_OK
WriteX 12111 0 15360 15360 NT_STATUS_OK
Close 12111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12112 NT_STATUS_OK
ReadX 12112 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12112 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12112 1004 NT_STATUS_OK
WriteX 12112 0 4096 4096 NT_STATUS_OK
Close 12112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12113 NT_STATUS_OK
Close 12113 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12115 NT_STATUS_OK
ReadX 12115 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12116 NT_STATUS_OK
Close 12116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12115 4096 4096 4096 NT_STATUS_OK
ReadX 12115 8192 4096 4096 NT_STATUS_OK
ReadX 12115 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12118 NT_STATUS_OK
ReadX 12118 0 4096 4096 NT_STATUS_OK
ReadX 12118 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12119 NT_STATUS_OK
ReadX 12119 0 4096 4096 NT_STATUS_OK
ReadX 12119 4096 4096 4096 NT_STATUS_OK
ReadX 12119 8192 4096 4096 NT_STATUS_OK
Close 12118 NT_STATUS_OK
Close 12119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12120 NT_STATUS_OK
WriteX 12120 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12120 258 NT_STATUS_OK
WriteX 12120 0 15360 15360 NT_STATUS_OK
Close 12120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12121 NT_STATUS_OK
ReadX 12121 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12121 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12121 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12107 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12122 NT_STATUS_OK
Close 12122 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12124 NT_STATUS_OK
ReadX 12124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12125 NT_STATUS_OK
SET_FILE_INFORMATION 12125 1004 NT_STATUS_OK
Close 12125 NT_STATUS_OK
WriteX 12121 0 4096 4096 NT_STATUS_OK
Close 12121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12126 NT_STATUS_OK
Close 12126 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12128 NT_STATUS_OK
ReadX 12128 0 4096 4096 NT_STATUS_OK
ReadX 12128 4096 4096 4096 NT_STATUS_OK
ReadX 12128 8192 4096 4096 NT_STATUS_OK
ReadX 12128 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12128 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12128 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12129 NT_STATUS_OK
ReadX 12129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12130 NT_STATUS_OK
WriteX 12130 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12130 258 NT_STATUS_OK
WriteX 12130 0 53 53 NT_STATUS_OK
Close 12130 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12131 NT_STATUS_OK
Close 12131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12129 4096 4096 4096 NT_STATUS_OK
ReadX 12129 8192 4096 4096 NT_STATUS_OK
ReadX 12129 12288 4096 4096 NT_STATUS_OK
WriteX 12133 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12133 258 NT_STATUS_OK
WriteX 12133 0 12006 12006 NT_STATUS_OK
Close 12133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12134 NT_STATUS_OK
ReadX 12134 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12134 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12134 1004 NT_STATUS_OK
WriteX 12134 0 4096 4096 NT_STATUS_OK
Close 12134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12135 NT_STATUS_OK
Close 12135 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12137 NT_STATUS_OK
ReadX 12137 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12138 NT_STATUS_OK
Close 12138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12137 4096 4096 4096 NT_STATUS_OK
ReadX 12137 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12140 NT_STATUS_OK
WriteX 12140 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12140 258 NT_STATUS_OK
WriteX 12140 0 11991 11991 NT_STATUS_OK
Close 12140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12141 NT_STATUS_OK
ReadX 12141 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12141 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12141 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12142 NT_STATUS_OK
Close 12142 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12144 NT_STATUS_OK
ReadX 12144 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12145 NT_STATUS_OK
SET_FILE_INFORMATION 12145 1004 NT_STATUS_OK
Close 12145 NT_STATUS_OK
WriteX 12141 0 4096 4096 NT_STATUS_OK
Close 12141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12146 NT_STATUS_OK
Close 12146 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12148 NT_STATUS_OK
ReadX 12148 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12149 NT_STATUS_OK
Close 12149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12148 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12148 1004 NT_STATUS_OK
ReadX 12148 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12148 1004 NT_STATUS_OK
WriteX 12148 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12148 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12148 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12148 1004 NT_STATUS_OK
Close 12124 NT_STATUS_OK
WriteX 12128 0 19054 19054 NT_STATUS_OK
WriteX 12148 0 12288 12288 NT_STATUS_OK
Close 12144 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12151 NT_STATUS_OK
Close 12151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12128 NT_STATUS_OK
Close 12148 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12153 NT_STATUS_OK
Close 12153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12155 NT_STATUS_OK
ReadX 12155 0 61440 61440 NT_STATUS_OK
ReadX 12155 61440 4096 4096 NT_STATUS_OK
ReadX 12155 65536 61440 61440 NT_STATUS_OK
ReadX 12155 126976 4096 4096 NT_STATUS_OK
ReadX 12155 131072 61440 61440 NT_STATUS_OK
ReadX 12155 192512 4096 4096 NT_STATUS_OK
ReadX 12155 196608 61440 61440 NT_STATUS_OK
ReadX 12155 258048 4096 4096 NT_STATUS_OK
ReadX 12155 262144 61440 61440 NT_STATUS_OK
ReadX 12155 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12156 NT_STATUS_OK
ReadX 12156 0 61440 61440 NT_STATUS_OK
ReadX 12156 61440 4096 4096 NT_STATUS_OK
ReadX 12156 65536 61440 61440 NT_STATUS_OK
ReadX 12156 126976 4096 4096 NT_STATUS_OK
ReadX 12156 131072 61440 61440 NT_STATUS_OK
ReadX 12156 192512 4096 4096 NT_STATUS_OK
ReadX 12156 196608 61440 61440 NT_STATUS_OK
ReadX 12156 258048 4096 4096 NT_STATUS_OK
ReadX 12156 262144 61440 61440 NT_STATUS_OK
ReadX 12156 323584 4096 4096 NT_STATUS_OK
ReadX 12156 327680 61440 61440 NT_STATUS_OK
ReadX 12156 389120 4096 4096 NT_STATUS_OK
ReadX 12156 393216 61440 61440 NT_STATUS_OK
ReadX 12156 454656 4096 4096 NT_STATUS_OK
ReadX 12156 458752 61440 61440 NT_STATUS_OK
ReadX 12156 520192 4096 4096 NT_STATUS_OK
ReadX 12156 524288 61440 61440 NT_STATUS_OK
ReadX 12156 585728 4096 4096 NT_STATUS_OK
ReadX 12156 589824 61440 61440 NT_STATUS_OK
ReadX 12156 651264 4096 4096 NT_STATUS_OK
ReadX 12156 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12157 NT_STATUS_OK
ReadX 12157 0 61440 61440 NT_STATUS_OK
ReadX 12157 61440 4096 4096 NT_STATUS_OK
ReadX 12157 65536 61440 61440 NT_STATUS_OK
ReadX 12157 126976 4096 4096 NT_STATUS_OK
ReadX 12157 131072 61440 61440 NT_STATUS_OK
ReadX 12157 192512 4096 4096 NT_STATUS_OK
ReadX 12157 196608 61440 61440 NT_STATUS_OK
ReadX 12157 258048 4096 4096 NT_STATUS_OK
ReadX 12157 262144 61440 61440 NT_STATUS_OK
ReadX 12157 323584 4096 4096 NT_STATUS_OK
ReadX 12157 327680 61440 61440 NT_STATUS_OK
ReadX 12157 389120 4096 4096 NT_STATUS_OK
ReadX 12157 393216 61440 61440 NT_STATUS_OK
ReadX 12157 454656 4096 4096 NT_STATUS_OK
ReadX 12157 458752 61440 61440 NT_STATUS_OK
ReadX 12157 520192 4096 4096 NT_STATUS_OK
ReadX 12157 524288 61440 61440 NT_STATUS_OK
ReadX 12157 585728 4096 4096 NT_STATUS_OK
ReadX 12157 589824 61440 61440 NT_STATUS_OK
ReadX 12157 651264 4096 4096 NT_STATUS_OK
ReadX 12157 655360 61440 61440 NT_STATUS_OK
ReadX 12157 716800 4096 4096 NT_STATUS_OK
ReadX 12157 720896 61440 61440 NT_STATUS_OK
ReadX 12157 782336 4096 4096 NT_STATUS_OK
ReadX 12157 786432 61440 61440 NT_STATUS_OK
ReadX 12157 847872 4096 4096 NT_STATUS_OK
ReadX 12157 851968 61440 61440 NT_STATUS_OK
ReadX 12157 913408 4096 4096 NT_STATUS_OK
ReadX 12157 917504 61440 61440 NT_STATUS_OK
ReadX 12157 978944 4096 4096 NT_STATUS_OK
ReadX 12157 983040 61440 61440 NT_STATUS_OK
ReadX 12157 1044480 4096 4096 NT_STATUS_OK
ReadX 12157 1048576 61440 61440 NT_STATUS_OK
ReadX 12157 1110016 4096 4096 NT_STATUS_OK
ReadX 12157 1114112 61440 61440 NT_STATUS_OK
ReadX 12157 1175552 4096 4096 NT_STATUS_OK
ReadX 12157 1179648 61440 61440 NT_STATUS_OK
ReadX 12157 1241088 4096 4096 NT_STATUS_OK
ReadX 12157 1245184 61440 61440 NT_STATUS_OK
ReadX 12157 1306624 4096 4096 NT_STATUS_OK
ReadX 12157 1310720 61440 61440 NT_STATUS_OK
ReadX 12157 1372160 4096 4096 NT_STATUS_OK
ReadX 12157 1376256 61440 61440 NT_STATUS_OK
ReadX 12157 1437696 4096 4096 NT_STATUS_OK
ReadX 12157 1441792 61440 61440 NT_STATUS_OK
ReadX 12157 1503232 4096 4096 NT_STATUS_OK
ReadX 12157 1507328 61440 61440 NT_STATUS_OK
ReadX 12157 1568768 4096 4096 NT_STATUS_OK
ReadX 12157 1572864 61440 61440 NT_STATUS_OK
ReadX 12157 1634304 4096 4096 NT_STATUS_OK
ReadX 12157 1638400 61440 61440 NT_STATUS_OK
ReadX 12157 1699840 4096 4096 NT_STATUS_OK
ReadX 12157 1703936 61440 61440 NT_STATUS_OK
ReadX 12157 1765376 4096 4096 NT_STATUS_OK
ReadX 12157 1769472 61440 61440 NT_STATUS_OK
ReadX 12157 1830912 4096 4096 NT_STATUS_OK
ReadX 12157 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12158 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12159 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12160 NT_STATUS_OK
ReadX 12160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12161 NT_STATUS_OK
ReadX 12161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12162 NT_STATUS_OK
ReadX 12162 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12163 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12163 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12164 NT_STATUS_OK
QUERY_FILE_INFORMATION 12164 1004 NT_STATUS_OK
WriteX 12164 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12164 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12165 NT_STATUS_OK
Close 12165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12166 NT_STATUS_OK
WriteX 12166 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12166 258 NT_STATUS_OK
WriteX 12166 0 491 491 NT_STATUS_OK
Close 12166 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12167 NT_STATUS_OK
ReadX 12167 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12164 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12169 NT_STATUS_OK
Close 12169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12170 NT_STATUS_OK
WriteX 12170 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12170 258 NT_STATUS_OK
WriteX 12170 0 543 543 NT_STATUS_OK
Close 12170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12171 NT_STATUS_OK
ReadX 12171 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12155 NT_STATUS_OK
Close 12156 NT_STATUS_OK
Close 12157 NT_STATUS_OK
Close 12171 NT_STATUS_OK
Close 12159 NT_STATUS_OK
Close 12160 NT_STATUS_OK
Close 12161 NT_STATUS_OK
Close 12162 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12174 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12174 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12175 NT_STATUS_OK
ReadX 12175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12176 NT_STATUS_OK
ReadX 12176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12177 NT_STATUS_OK
ReadX 12177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12178 NT_STATUS_OK
ReadX 12178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12179 NT_STATUS_OK
ReadX 12179 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12183 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12183 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12184 NT_STATUS_OK
QUERY_FILE_INFORMATION 12184 1004 NT_STATUS_OK
WriteX 12184 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12184 258 NT_STATUS_OK
WriteX 12184 0 2048 2048 NT_STATUS_OK
Close 12184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12185 NT_STATUS_OK
ReadX 12185 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12185 0 4096 4096 NT_STATUS_OK
Flush 12185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12185 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12189 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12190 NT_STATUS_OK
WriteX 12190 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12190 258 NT_STATUS_OK
WriteX 12190 0 2048 2048 NT_STATUS_OK
Close 12190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12191 NT_STATUS_OK
ReadX 12191 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12195 NT_STATUS_OK
Close 12195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12196 NT_STATUS_OK
WriteX 12196 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12196 258 NT_STATUS_OK
WriteX 12196 0 2048 2048 NT_STATUS_OK
Close 12196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12197 NT_STATUS_OK
ReadX 12197 0 2048 2048 NT_STATUS_OK
ReadX 12175 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12179 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12191 0 4096 4096 NT_STATUS_OK
WriteX 12175 0 8192 8192 NT_STATUS_OK
WriteX 12176 0 4096 4096 NT_STATUS_OK
WriteX 12177 0 4096 4096 NT_STATUS_OK
ReadX 12191 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12200 NT_STATUS_OK
ReadX 12200 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12201 NT_STATUS_OK
QUERY_FILE_INFORMATION 12201 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12200 NT_STATUS_OK
Close 12176 NT_STATUS_OK
Close 12177 NT_STATUS_OK
Close 12178 NT_STATUS_OK
Close 12191 NT_STATUS_OK
Close 12175 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12203 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12203 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12204 NT_STATUS_OK
ReadX 12204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12205 NT_STATUS_OK
ReadX 12205 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12206 NT_STATUS_OK
ReadX 12206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12207 NT_STATUS_OK
ReadX 12207 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12208 NT_STATUS_OK
ReadX 12208 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12209 NT_STATUS_OK
ReadX 12209 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12210 NT_STATUS_OK
ReadX 12210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12211 NT_STATUS_OK
ReadX 12211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12212 NT_STATUS_OK
ReadX 12212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12213 NT_STATUS_OK
ReadX 12213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12214 NT_STATUS_OK
ReadX 12214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12215 NT_STATUS_OK
ReadX 12215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12216 NT_STATUS_OK
ReadX 12216 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12220 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12221 NT_STATUS_OK
QUERY_FILE_INFORMATION 12221 1004 NT_STATUS_OK
WriteX 12221 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12221 258 NT_STATUS_OK
WriteX 12221 0 2048 2048 NT_STATUS_OK
Close 12221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12222 NT_STATUS_OK
ReadX 12222 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12223 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12224 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12228 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12229 NT_STATUS_OK
QUERY_FILE_INFORMATION 12229 1004 NT_STATUS_OK
WriteX 12229 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12229 258 NT_STATUS_OK
WriteX 12229 0 2048 2048 NT_STATUS_OK
Close 12229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12230 NT_STATUS_OK
ReadX 12230 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12222 0 4096 4096 NT_STATUS_OK
Flush 12222 NT_STATUS_OK
WriteX 12230 0 4096 4096 NT_STATUS_OK
Flush 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12222 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12230 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12224 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12231 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12232 NT_STATUS_OK
WriteX 12232 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12232 258 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
Close 12232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12233 NT_STATUS_OK
ReadX 12233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12234 NT_STATUS_OK
Close 12234 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12235 NT_STATUS_OK
WriteX 12235 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12235 258 NT_STATUS_OK
WriteX 12235 0 4096 4096 NT_STATUS_OK
Close 12235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12236 NT_STATUS_OK
ReadX 12236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12236 0 4096 4096 NT_STATUS_OK
Close 12233 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12216 NT_STATUS_OK
Close 12210 NT_STATUS_OK
Close 12224 NT_STATUS_OK
Close 12213 NT_STATUS_OK
Close 12214 NT_STATUS_OK
Close 12215 NT_STATUS_OK
Close 12211 NT_STATUS_OK
Close 12204 NT_STATUS_OK
Close 12205 NT_STATUS_OK
Close 12208 NT_STATUS_OK
Close 12209 NT_STATUS_OK
Close 12206 NT_STATUS_OK
Close 12207 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12239 NT_STATUS_OK
Close 12239 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12241 NT_STATUS_OK
ReadX 12241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12242 NT_STATUS_OK
Close 12242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12243 NT_STATUS_OK
WriteX 12243 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12243 258 NT_STATUS_OK
WriteX 12243 0 2048 2048 NT_STATUS_OK
Close 12243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12244 NT_STATUS_OK
ReadX 12244 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12245 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12246 NT_STATUS_OK
ReadX 12246 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12247 NT_STATUS_OK
ReadX 12247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12248 NT_STATUS_OK
ReadX 12248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12249 NT_STATUS_OK
ReadX 12249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12250 NT_STATUS_OK
ReadX 12250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12251 NT_STATUS_OK
ReadX 12251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12252 NT_STATUS_OK
ReadX 12252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12253 NT_STATUS_OK
ReadX 12253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12254 NT_STATUS_OK
ReadX 12254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12255 NT_STATUS_OK
ReadX 12255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12256 NT_STATUS_OK
ReadX 12256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12257 NT_STATUS_OK
ReadX 12257 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12222 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12258 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12241 NT_STATUS_OK
Close 12244 NT_STATUS_OK
Close 12256 NT_STATUS_OK
Close 12251 NT_STATUS_OK
Close 12252 NT_STATUS_OK
Close 12253 NT_STATUS_OK
Close 12254 NT_STATUS_OK
Close 12255 NT_STATUS_OK
Close 12257 NT_STATUS_OK
Close 12245 NT_STATUS_OK
Close 12246 NT_STATUS_OK
Close 12249 NT_STATUS_OK
Close 12250 NT_STATUS_OK
Close 12247 NT_STATUS_OK
Close 12248 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12260 NT_STATUS_OK
QUERY_FILE_INFORMATION 12260 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12262 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12263 NT_STATUS_OK
ReadX 12263 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12264 NT_STATUS_OK
ReadX 12264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12265 NT_STATUS_OK
ReadX 12265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12266 NT_STATUS_OK
ReadX 12266 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12267 NT_STATUS_OK
ReadX 12267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12268 NT_STATUS_OK
ReadX 12268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12269 NT_STATUS_OK
ReadX 12269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12270 NT_STATUS_OK
ReadX 12270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12271 NT_STATUS_OK
ReadX 12271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12272 NT_STATUS_OK
ReadX 12272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12273 NT_STATUS_OK
ReadX 12273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12274 NT_STATUS_OK
ReadX 12274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12275 NT_STATUS_OK
ReadX 12275 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12279 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12280 NT_STATUS_OK
QUERY_FILE_INFORMATION 12280 1004 NT_STATUS_OK
WriteX 12280 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12280 258 NT_STATUS_OK
WriteX 12280 0 2048 2048 NT_STATUS_OK
Close 12280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12281 NT_STATUS_OK
ReadX 12281 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12282 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12283 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12284 NT_STATUS_OK
ReadX 12284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12285 NT_STATUS_OK
ReadX 12285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12286 NT_STATUS_OK
ReadX 12286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12287 NT_STATUS_OK
ReadX 12287 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12291 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12292 NT_STATUS_OK
QUERY_FILE_INFORMATION 12292 1004 NT_STATUS_OK
WriteX 12292 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12292 258 NT_STATUS_OK
WriteX 12292 0 2048 2048 NT_STATUS_OK
Close 12292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12293 NT_STATUS_OK
ReadX 12293 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12294 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12295 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12295 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12299 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12300 NT_STATUS_OK
QUERY_FILE_INFORMATION 12300 1004 NT_STATUS_OK
WriteX 12300 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12300 258 NT_STATUS_OK
WriteX 12300 0 2048 2048 NT_STATUS_OK
Close 12300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12301 NT_STATUS_OK
ReadX 12301 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12281 0 4096 4096 NT_STATUS_OK
Flush 12281 NT_STATUS_OK
WriteX 12293 0 4096 4096 NT_STATUS_OK
Flush 12293 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12281 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12293 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12283 4096 16384 16384 NT_STATUS_OK
ReadX 12263 4096 16384 16384 NT_STATUS_OK
ReadX 12295 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12302 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12303 NT_STATUS_OK
ReadX 12303 0 2048 2048 NT_STATUS_OK
WriteX 12303 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12304 NT_STATUS_OK
QUERY_FILE_INFORMATION 12304 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12303 NT_STATUS_OK
Close 12287 NT_STATUS_OK
Close 12275 NT_STATUS_OK
Close 12267 NT_STATUS_OK
Close 12283 NT_STATUS_OK
Close 12284 NT_STATUS_OK
Close 12285 NT_STATUS_OK
Close 12286 NT_STATUS_OK
Close 12274 NT_STATUS_OK
Close 12295 NT_STATUS_OK
Close 12269 NT_STATUS_OK
Close 12272 NT_STATUS_OK
Close 12273 NT_STATUS_OK
Close 12270 NT_STATUS_OK
Close 12271 NT_STATUS_OK
Close 12263 NT_STATUS_OK
Close 12264 NT_STATUS_OK
Close 12265 NT_STATUS_OK
Close 12266 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12306 NT_STATUS_OK
QUERY_FILE_INFORMATION 12306 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12308 NT_STATUS_OK
QUERY_FILE_INFORMATION 12308 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12310 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12311 NT_STATUS_OK
ReadX 12311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12312 NT_STATUS_OK
ReadX 12312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12313 NT_STATUS_OK
ReadX 12313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12314 NT_STATUS_OK
ReadX 12314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12315 NT_STATUS_OK
ReadX 12315 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12311 4096 16384 16384 NT_STATUS_OK
WriteX 12311 0 4096 4096 NT_STATUS_OK
WriteX 12312 0 4096 4096 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
WriteX 12314 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12316 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12316 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12317 NT_STATUS_OK
ReadX 12317 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12318 NT_STATUS_OK
ReadX 12318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12319 NT_STATUS_OK
ReadX 12319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12320 NT_STATUS_OK
ReadX 12320 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12321 NT_STATUS_OK
ReadX 12321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12322 NT_STATUS_OK
ReadX 12322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12323 NT_STATUS_OK
ReadX 12323 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12324 NT_STATUS_OK
ReadX 12324 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12325 NT_STATUS_OK
ReadX 12325 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12326 NT_STATUS_OK
ReadX 12326 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12327 NT_STATUS_OK
ReadX 12327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12328 NT_STATUS_OK
ReadX 12328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12329 NT_STATUS_OK
ReadX 12329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12330 NT_STATUS_OK
ReadX 12330 0 8192 8192 NT_STATUS_OK
ReadX 12317 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12331 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12331 0 4096 4096 NT_STATUS_OK
ReadX 12331 4096 4096 4096 NT_STATUS_OK
ReadX 12331 8192 4096 4096 NT_STATUS_OK
WriteX 12317 0 4096 4096 NT_STATUS_OK
WriteX 12318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12332 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12332 0 4096 4096 NT_STATUS_OK
ReadX 12332 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12311 0 4096 4096 NT_STATUS_OK
WriteX 12312 0 4096 4096 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
WriteX 12314 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12336 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12337 NT_STATUS_OK
QUERY_FILE_INFORMATION 12337 1004 NT_STATUS_OK
WriteX 12337 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12337 258 NT_STATUS_OK
WriteX 12337 0 2048 2048 NT_STATUS_OK
Close 12337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12338 NT_STATUS_OK
ReadX 12338 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12338 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12338 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12339 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12340 NT_STATUS_OK
ReadX 12340 0 4096 4096 NT_STATUS_OK
ReadX 12340 4096 4096 4096 NT_STATUS_OK
WriteX 12340 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12338 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12341 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12342 NT_STATUS_OK
ReadX 12342 0 4096 4096 NT_STATUS_OK
ReadX 12342 4096 4096 4096 NT_STATUS_OK
WriteX 12342 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12343 NT_STATUS_OK
QUERY_FILE_INFORMATION 12343 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12330 NT_STATUS_OK
Close 12315 NT_STATUS_OK
Close 12311 NT_STATUS_OK
Close 12312 NT_STATUS_OK
Close 12313 NT_STATUS_OK
Close 12314 NT_STATUS_OK
Close 12323 NT_STATUS_OK
Close 12328 NT_STATUS_OK
Close 12324 NT_STATUS_OK
Close 12325 NT_STATUS_OK
Close 12326 NT_STATUS_OK
Close 12327 NT_STATUS_OK
Close 12329 NT_STATUS_OK
Close 12317 NT_STATUS_OK
Close 12318 NT_STATUS_OK
Close 12321 NT_STATUS_OK
Close 12322 NT_STATUS_OK
Close 12319 NT_STATUS_OK
Close 12320 NT_STATUS_OK
Close 12342 NT_STATUS_OK
Close 12331 NT_STATUS_OK
Close 12332 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12345 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12345 0 4096 4096 NT_STATUS_OK
ReadX 12345 4096 4096 4096 NT_STATUS_OK
ReadX 12345 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12346 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12347 NT_STATUS_OK
ReadX 12347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12348 NT_STATUS_OK
ReadX 12348 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12349 NT_STATUS_OK
ReadX 12349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12350 NT_STATUS_OK
ReadX 12350 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12351 NT_STATUS_OK
ReadX 12351 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12352 NT_STATUS_OK
ReadX 12352 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12353 NT_STATUS_OK
ReadX 12353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12354 NT_STATUS_OK
ReadX 12354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12355 NT_STATUS_OK
ReadX 12355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12356 NT_STATUS_OK
ReadX 12356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12357 NT_STATUS_OK
ReadX 12357 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12358 NT_STATUS_OK
ReadX 12358 0 4096 4096 NT_STATUS_OK
ReadX 12346 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12362 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12363 NT_STATUS_OK
QUERY_FILE_INFORMATION 12363 1004 NT_STATUS_OK
WriteX 12363 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12363 258 NT_STATUS_OK
WriteX 12363 0 2048 2048 NT_STATUS_OK
Close 12363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12364 NT_STATUS_OK
ReadX 12364 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12364 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12368 NT_STATUS_OK
Close 12368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12369 NT_STATUS_OK
QUERY_FILE_INFORMATION 12369 1004 NT_STATUS_OK
WriteX 12369 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12369 258 NT_STATUS_OK
WriteX 12369 0 2048 2048 NT_STATUS_OK
Close 12369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12370 NT_STATUS_OK
ReadX 12370 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12370 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12353 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12371 NT_STATUS_OK
QUERY_FILE_INFORMATION 12371 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12357 NT_STATUS_OK
Close 12352 NT_STATUS_OK
Close 12358 NT_STATUS_OK
Close 12346 NT_STATUS_OK
Close 12347 NT_STATUS_OK
Close 12350 NT_STATUS_OK
Close 12351 NT_STATUS_OK
Close 12348 NT_STATUS_OK
Close 12349 NT_STATUS_OK
Close 12353 NT_STATUS_OK
Close 12354 NT_STATUS_OK
Close 12355 NT_STATUS_OK
Close 12356 NT_STATUS_OK
Close 12345 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12373 NT_STATUS_OK
QUERY_FILE_INFORMATION 12373 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12375 NT_STATUS_OK
ReadX 12375 61440 4096 4096 NT_STATUS_OK
ReadX 12375 126976 4096 4096 NT_STATUS_OK
WriteX 12375 0 65536 65536 NT_STATUS_OK
WriteX 12375 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12376 NT_STATUS_OK
ReadX 12376 61440 4096 4096 NT_STATUS_OK
ReadX 12376 126976 4096 4096 NT_STATUS_OK
ReadX 12376 192512 4096 4096 NT_STATUS_OK
ReadX 12376 258048 4096 4096 NT_STATUS_OK
WriteX 12376 0 65536 65536 NT_STATUS_OK
WriteX 12376 65536 65536 65536 NT_STATUS_OK
WriteX 12376 131072 65536 65536 NT_STATUS_OK
WriteX 12376 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12377 NT_STATUS_OK
ReadX 12377 61440 4096 4096 NT_STATUS_OK
ReadX 12377 126976 4096 4096 NT_STATUS_OK
ReadX 12377 192512 4096 4096 NT_STATUS_OK
ReadX 12377 258048 4096 4096 NT_STATUS_OK
ReadX 12377 323584 4096 4096 NT_STATUS_OK
ReadX 12377 389120 4096 4096 NT_STATUS_OK
ReadX 12377 454656 4096 4096 NT_STATUS_OK
ReadX 12377 520192 4096 4096 NT_STATUS_OK
WriteX 12377 0 65536 65536 NT_STATUS_OK
WriteX 12377 65536 65536 65536 NT_STATUS_OK
WriteX 12377 131072 65536 65536 NT_STATUS_OK
WriteX 12377 196608 65536 65536 NT_STATUS_OK
WriteX 12377 262144 65536 65536 NT_STATUS_OK
WriteX 12377 327680 65536 65536 NT_STATUS_OK
WriteX 12377 393216 65536 65536 NT_STATUS_OK
WriteX 12377 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12378 NT_STATUS_OK
ReadX 12378 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12378 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12378 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12378 8192 4096 4096 NT_STATUS_OK
ReadX 12378 12288 4096 4096 NT_STATUS_OK
ReadX 12378 16384 4096 4096 NT_STATUS_OK
ReadX 12378 20480 4096 4096 NT_STATUS_OK
ReadX 12378 24576 4096 4096 NT_STATUS_OK
ReadX 12378 28672 4096 4096 NT_STATUS_OK
ReadX 12378 32768 4096 4096 NT_STATUS_OK
ReadX 12378 36864 4096 4096 NT_STATUS_OK
ReadX 12378 40960 4096 4096 NT_STATUS_OK
ReadX 12378 45056 4096 4096 NT_STATUS_OK
ReadX 12378 49152 4096 4096 NT_STATUS_OK
ReadX 12378 53248 4096 4096 NT_STATUS_OK
ReadX 12378 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12378 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12379 NT_STATUS_OK
Close 12379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12375 NT_STATUS_OK
Close 12376 NT_STATUS_OK
Close 12377 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12381 NT_STATUS_OK
WriteX 12381 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12381 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12381 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12381 1004 NT_STATUS_OK
WriteX 12381 0 57088 57088 NT_STATUS_OK
WriteX 12381 0 4096 4096 NT_STATUS_OK
Flush 12381 NT_STATUS_OK
Close 12378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12382 NT_STATUS_OK
SET_FILE_INFORMATION 12382 1004 NT_STATUS_OK
Close 12382 NT_STATUS_OK
SET_FILE_INFORMATION 12381 1004 NT_STATUS_OK
WriteX 12381 0 4096 4096 NT_STATUS_OK
Close 12381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12383 NT_STATUS_OK
Close 12383 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12385 NT_STATUS_OK
ReadX 12385 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12385 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12386 NT_STATUS_OK
WriteX 12386 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12386 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12386 0 51456 51456 NT_STATUS_OK
WriteX 12386 0 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12386 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12386 1004 NT_STATUS_OK
WriteX 12386 0 8192 8192 NT_STATUS_OK
Flush 12386 NT_STATUS_OK
SET_FILE_INFORMATION 12386 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12386 1004 NT_STATUS_OK
WriteX 12386 0 4096 4096 NT_STATUS_OK
Close 12386 NT_STATUS_OK
Close 12385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12388 NT_STATUS_OK
Close 12388 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12390 NT_STATUS_OK
ReadX 12390 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12390 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12392 NT_STATUS_OK
Close 12392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12395 NT_STATUS_OK
WriteX 12395 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12395 258 NT_STATUS_OK
WriteX 12395 0 53077 53077 NT_STATUS_OK
Close 12395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12396 NT_STATUS_OK
WriteX 12396 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12396 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12396 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12396 1004 NT_STATUS_OK
WriteX 12396 0 65536 65536 NT_STATUS_OK
WriteX 12396 65536 1856 1856 NT_STATUS_OK
WriteX 12396 0 4096 4096 NT_STATUS_OK
Flush 12396 NT_STATUS_OK
SET_FILE_INFORMATION 12396 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12396 1004 NT_STATUS_OK
WriteX 12396 0 4096 4096 NT_STATUS_OK
Close 12396 NT_STATUS_OK
Close 12390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12398 NT_STATUS_OK
Close 12398 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12400 NT_STATUS_OK
ReadX 12400 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12402 NT_STATUS_OK
Close 12402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12405 NT_STATUS_OK
WriteX 12405 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12405 258 NT_STATUS_OK
WriteX 12405 0 7983 7983 NT_STATUS_OK
Close 12405 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12407 NT_STATUS_OK
Close 12407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12410 NT_STATUS_OK
WriteX 12410 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12410 258 NT_STATUS_OK
WriteX 12410 0 65536 65536 NT_STATUS_OK
WriteX 12410 65536 65536 65536 NT_STATUS_OK
WriteX 12410 131072 65536 65536 NT_STATUS_OK
WriteX 12410 196608 65536 65536 NT_STATUS_OK
WriteX 12410 262144 65536 65536 NT_STATUS_OK
WriteX 12410 327680 65536 65536 NT_STATUS_OK
WriteX 12410 393216 65536 65536 NT_STATUS_OK
WriteX 12410 458752 46731 46731 NT_STATUS_OK
Close 12410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12411 NT_STATUS_OK
WriteX 12411 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12411 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12400 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12411 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12411 1004 NT_STATUS_OK
WriteX 12411 0 65536 65536 NT_STATUS_OK
WriteX 12411 65536 22848 22848 NT_STATUS_OK
WriteX 12411 0 4096 4096 NT_STATUS_OK
Flush 12411 NT_STATUS_OK
SET_FILE_INFORMATION 12411 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12411 1004 NT_STATUS_OK
WriteX 12411 0 4096 4096 NT_STATUS_OK
Close 12411 NT_STATUS_OK
Close 12400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12413 NT_STATUS_OK
Close 12413 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12415 NT_STATUS_OK
ReadX 12415 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12415 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12416 NT_STATUS_OK
ReadX 12416 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12416 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12416 1004 NT_STATUS_OK
ReadX 12416 8192 4096 4096 NT_STATUS_OK
ReadX 12416 12288 4096 4096 NT_STATUS_OK
ReadX 12416 16384 4096 4096 NT_STATUS_OK
ReadX 12416 20480 4096 4096 NT_STATUS_OK
ReadX 12416 24576 4096 4096 NT_STATUS_OK
ReadX 12416 28672 4096 4096 NT_STATUS_OK
ReadX 12416 32768 4096 4096 NT_STATUS_OK
ReadX 12416 36864 4096 4096 NT_STATUS_OK
ReadX 12416 40960 4096 4096 NT_STATUS_OK
ReadX 12416 45056 4096 4096 NT_STATUS_OK
ReadX 12416 49152 4096 4096 NT_STATUS_OK
ReadX 12416 53248 4096 4096 NT_STATUS_OK
ReadX 12416 57344 4096 4096 NT_STATUS_OK
ReadX 12416 61440 4096 4096 NT_STATUS_OK
ReadX 12416 65536 4096 4096 NT_STATUS_OK
ReadX 12416 69632 4096 4096 NT_STATUS_OK
ReadX 12416 73728 4096 4096 NT_STATUS_OK
ReadX 12416 77824 4096 4096 NT_STATUS_OK
ReadX 12416 81920 4096 4096 NT_STATUS_OK
ReadX 12416 86016 4096 4096 NT_STATUS_OK
ReadX 12416 90112 4096 4096 NT_STATUS_OK
ReadX 12416 94208 4096 4096 NT_STATUS_OK
ReadX 12416 98304 4096 4096 NT_STATUS_OK
ReadX 12416 102400 4096 4096 NT_STATUS_OK
ReadX 12416 106496 4096 4096 NT_STATUS_OK
ReadX 12416 110592 4096 4096 NT_STATUS_OK
ReadX 12416 114688 4096 4096 NT_STATUS_OK
ReadX 12416 118784 4096 4096 NT_STATUS_OK
ReadX 12416 122880 4096 4096 NT_STATUS_OK
ReadX 12416 126976 4096 4096 NT_STATUS_OK
ReadX 12416 131072 4096 4096 NT_STATUS_OK
ReadX 12416 135168 4096 4096 NT_STATUS_OK
ReadX 12416 139264 4096 4096 NT_STATUS_OK
ReadX 12416 143360 4096 4096 NT_STATUS_OK
ReadX 12416 147456 4096 4096 NT_STATUS_OK
ReadX 12416 151552 4096 4096 NT_STATUS_OK
ReadX 12416 155648 4096 4096 NT_STATUS_OK
ReadX 12416 159744 4096 4096 NT_STATUS_OK
ReadX 12416 163840 4096 4096 NT_STATUS_OK
ReadX 12416 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12416 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12417 NT_STATUS_OK
Close 12417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12415 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12419 NT_STATUS_OK
WriteX 12419 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12419 258 NT_STATUS_OK
Close 12416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12420 NT_STATUS_OK
SET_FILE_INFORMATION 12420 1004 NT_STATUS_OK
Close 12420 NT_STATUS_OK
WriteX 12419 0 42388 42388 NT_STATUS_OK
Close 12419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12421 NT_STATUS_OK
Close 12421 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12423 NT_STATUS_OK
ReadX 12423 0 4096 4096 NT_STATUS_OK
ReadX 12423 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12424 NT_STATUS_OK
WriteX 12424 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12424 258 NT_STATUS_OK
SET_FILE_INFORMATION 12424 1004 NT_STATUS_OK
WriteX 12424 0 42652 42652 NT_STATUS_OK
Close 12424 NT_STATUS_OK
Close 12423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12426 NT_STATUS_OK
Close 12426 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12428 NT_STATUS_OK
ReadX 12428 0 4096 4096 NT_STATUS_OK
ReadX 12428 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12430 NT_STATUS_OK
Close 12430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12433 NT_STATUS_OK
WriteX 12433 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12433 258 NT_STATUS_OK
WriteX 12433 0 65536 65536 NT_STATUS_OK
WriteX 12433 65536 49 49 NT_STATUS_OK
Close 12433 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12434 NT_STATUS_OK
ReadX 12434 0 61440 61440 NT_STATUS_OK
ReadX 12434 61440 4096 4096 NT_STATUS_OK
ReadX 12434 65536 61440 61440 NT_STATUS_OK
ReadX 12434 126976 4096 4096 NT_STATUS_OK
ReadX 12434 131072 61440 61440 NT_STATUS_OK
ReadX 12434 192512 4096 4096 NT_STATUS_OK
ReadX 12434 196608 61440 61440 NT_STATUS_OK
ReadX 12434 258048 4096 4096 NT_STATUS_OK
ReadX 12434 262144 61440 61440 NT_STATUS_OK
ReadX 12434 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12435 NT_STATUS_OK
ReadX 12435 0 61440 61440 NT_STATUS_OK
ReadX 12435 61440 4096 4096 NT_STATUS_OK
ReadX 12435 65536 61440 61440 NT_STATUS_OK
ReadX 12435 126976 4096 4096 NT_STATUS_OK
ReadX 12435 131072 61440 61440 NT_STATUS_OK
ReadX 12435 192512 4096 4096 NT_STATUS_OK
ReadX 12435 196608 61440 61440 NT_STATUS_OK
ReadX 12435 258048 4096 4096 NT_STATUS_OK
ReadX 12435 262144 61440 61440 NT_STATUS_OK
ReadX 12435 323584 4096 4096 NT_STATUS_OK
ReadX 12435 327680 61440 61440 NT_STATUS_OK
ReadX 12435 389120 4096 4096 NT_STATUS_OK
ReadX 12435 393216 61440 61440 NT_STATUS_OK
ReadX 12435 454656 4096 4096 NT_STATUS_OK
ReadX 12435 458752 61440 61440 NT_STATUS_OK
ReadX 12435 520192 4096 4096 NT_STATUS_OK
ReadX 12435 524288 61440 61440 NT_STATUS_OK
ReadX 12435 585728 4096 4096 NT_STATUS_OK
ReadX 12435 589824 61440 61440 NT_STATUS_OK
ReadX 12435 651264 4096 4096 NT_STATUS_OK
ReadX 12435 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12436 NT_STATUS_OK
ReadX 12436 0 61440 61440 NT_STATUS_OK
ReadX 12436 61440 4096 4096 NT_STATUS_OK
ReadX 12436 65536 61440 61440 NT_STATUS_OK
ReadX 12436 126976 4096 4096 NT_STATUS_OK
ReadX 12436 131072 61440 61440 NT_STATUS_OK
ReadX 12436 192512 4096 4096 NT_STATUS_OK
ReadX 12436 196608 61440 61440 NT_STATUS_OK
ReadX 12436 258048 4096 4096 NT_STATUS_OK
ReadX 12436 262144 61440 61440 NT_STATUS_OK
ReadX 12436 323584 4096 4096 NT_STATUS_OK
ReadX 12436 327680 61440 61440 NT_STATUS_OK
ReadX 12436 389120 4096 4096 NT_STATUS_OK
ReadX 12436 393216 61440 61440 NT_STATUS_OK
ReadX 12436 454656 4096 4096 NT_STATUS_OK
ReadX 12436 458752 61440 61440 NT_STATUS_OK
ReadX 12436 520192 4096 4096 NT_STATUS_OK
ReadX 12436 524288 61440 61440 NT_STATUS_OK
ReadX 12436 585728 4096 4096 NT_STATUS_OK
ReadX 12436 589824 61440 61440 NT_STATUS_OK
ReadX 12436 651264 4096 4096 NT_STATUS_OK
ReadX 12436 655360 61440 61440 NT_STATUS_OK
ReadX 12436 716800 4096 4096 NT_STATUS_OK
ReadX 12436 720896 61440 61440 NT_STATUS_OK
ReadX 12436 782336 4096 4096 NT_STATUS_OK
ReadX 12436 786432 61440 61440 NT_STATUS_OK
ReadX 12436 847872 4096 4096 NT_STATUS_OK
ReadX 12436 851968 61440 61440 NT_STATUS_OK
ReadX 12436 913408 4096 4096 NT_STATUS_OK
ReadX 12436 917504 61440 61440 NT_STATUS_OK
ReadX 12436 978944 4096 4096 NT_STATUS_OK
ReadX 12436 983040 61440 61440 NT_STATUS_OK
ReadX 12436 1044480 4096 4096 NT_STATUS_OK
ReadX 12436 1048576 61440 61440 NT_STATUS_OK
ReadX 12436 1110016 4096 4096 NT_STATUS_OK
ReadX 12436 1114112 61440 61440 NT_STATUS_OK
ReadX 12436 1175552 4096 4096 NT_STATUS_OK
ReadX 12436 1179648 61440 61440 NT_STATUS_OK
ReadX 12436 1241088 4096 4096 NT_STATUS_OK
ReadX 12436 1245184 61440 61440 NT_STATUS_OK
ReadX 12436 1306624 4096 4096 NT_STATUS_OK
ReadX 12436 1310720 61440 61440 NT_STATUS_OK
ReadX 12436 1372160 4096 4096 NT_STATUS_OK
ReadX 12436 1376256 61440 61440 NT_STATUS_OK
ReadX 12436 1437696 4096 4096 NT_STATUS_OK
ReadX 12436 1441792 61440 61440 NT_STATUS_OK
ReadX 12436 1503232 4096 4096 NT_STATUS_OK
ReadX 12436 1507328 61440 61440 NT_STATUS_OK
ReadX 12436 1568768 4096 4096 NT_STATUS_OK
ReadX 12436 1572864 61440 61440 NT_STATUS_OK
ReadX 12436 1634304 4096 4096 NT_STATUS_OK
ReadX 12436 1638400 61440 61440 NT_STATUS_OK
ReadX 12436 1699840 4096 4096 NT_STATUS_OK
ReadX 12436 1703936 61440 61440 NT_STATUS_OK
ReadX 12436 1765376 4096 4096 NT_STATUS_OK
ReadX 12436 1769472 61440 61440 NT_STATUS_OK
ReadX 12436 1830912 4096 4096 NT_STATUS_OK
ReadX 12436 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12438 NT_STATUS_OK
QUERY_FILE_INFORMATION 12438 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12438 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12438 1005 NT_STATUS_OK
ReadX 12438 2156 24 24 NT_STATUS_OK
ReadX 12438 2139 276 276 NT_STATUS_OK
ReadX 12438 2136 14 14 NT_STATUS_OK
ReadX 12438 2136 7 7 NT_STATUS_OK
ReadX 12438 2138 12 12 NT_STATUS_OK
ReadX 12438 2137 8 8 NT_STATUS_OK
ReadX 12438 2135 15 15 NT_STATUS_OK
ReadX 12438 0 16 16 NT_STATUS_OK
ReadX 12438 16 2048 2048 NT_STATUS_OK
ReadX 12438 2064 2048 2048 NT_STATUS_OK
ReadX 12438 257 2048 2048 NT_STATUS_OK
ReadX 12438 385 2048 2048 NT_STATUS_OK
ReadX 12438 513 2048 2048 NT_STATUS_OK
ReadX 12438 641 2048 2048 NT_STATUS_OK
ReadX 12438 769 2048 2048 NT_STATUS_OK
ReadX 12438 897 2048 2048 NT_STATUS_OK
ReadX 12438 1025 2048 2048 NT_STATUS_OK
ReadX 12438 1153 2048 2048 NT_STATUS_OK
ReadX 12438 1281 2048 2048 NT_STATUS_OK
ReadX 12438 1409 2048 2048 NT_STATUS_OK
ReadX 12438 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12440 NT_STATUS_OK
Close 12440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12434 NT_STATUS_OK
Close 12435 NT_STATUS_OK
Close 12436 NT_STATUS_OK
Close 12428 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12443 NT_STATUS_OK
WriteX 12443 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12443 258 NT_STATUS_OK
WriteX 12443 0 10575 10575 NT_STATUS_OK
Flush 12443 NT_STATUS_OK
Close 12443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12444 NT_STATUS_OK
Close 12444 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
Close 12438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12448 NT_STATUS_OK
LockX 12448 2147483538 1 NT_STATUS_OK
UnlockX 12448 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12448 1005 NT_STATUS_OK
ReadX 12448 0 512 512 NT_STATUS_OK
ReadX 12448 512 512 512 NT_STATUS_OK
ReadX 12448 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12448 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12448 1004 NT_STATUS_OK
Close 12448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12449 NT_STATUS_OK
QUERY_FILE_INFORMATION 12449 1005 NT_STATUS_OK
ReadX 12449 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12450 NT_STATUS_OK
LockX 12450 2147483538 1 NT_STATUS_OK
UnlockX 12450 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12450 1005 NT_STATUS_OK
ReadX 12450 0 512 512 NT_STATUS_OK
ReadX 12450 512 512 512 NT_STATUS_OK
ReadX 12450 1024 512 512 NT_STATUS_OK
ReadX 12450 288 20 20 NT_STATUS_OK
ReadX 12450 308 2084 2084 NT_STATUS_OK
ReadX 12450 388 2084 2084 NT_STATUS_OK
ReadX 12450 388 2084 2084 NT_STATUS_OK
ReadX 12437 2157 1386 1386 NT_STATUS_OK
ReadX 12450 2472 399 399 NT_STATUS_OK
ReadX 12450 3072 1536 1536 NT_STATUS_OK
ReadX 12450 544 149 149 NT_STATUS_OK
ReadX 12450 693 485 485 NT_STATUS_OK
Close 12450 NT_STATUS_OK
ReadX 12437 2157 4096 4096 NT_STATUS_OK
ReadX 12437 6253 4096 4096 NT_STATUS_OK
ReadX 12437 10349 4096 4096 NT_STATUS_OK
ReadX 12437 14445 4096 4096 NT_STATUS_OK
ReadX 12437 18541 4096 4096 NT_STATUS_OK
ReadX 12437 22637 256 256 NT_STATUS_OK
ReadX 12437 22893 4096 4096 NT_STATUS_OK
ReadX 12437 26989 4096 4096 NT_STATUS_OK
ReadX 12437 31085 4096 4096 NT_STATUS_OK
ReadX 12437 35181 4096 4096 NT_STATUS_OK
ReadX 12437 39277 4096 4096 NT_STATUS_OK
ReadX 12437 43373 4096 4096 NT_STATUS_OK
ReadX 12437 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12437 2157 1024 1024 NT_STATUS_OK
ReadX 12437 1667 4688 4688 NT_STATUS_OK
ReadX 12437 6355 3516 3516 NT_STATUS_OK
ReadX 12437 9871 16384 16384 NT_STATUS_OK
ReadX 12437 26255 3771 3771 NT_STATUS_OK
ReadX 12437 30026 2048 2048 NT_STATUS_OK
ReadX 12437 32074 1024 1024 NT_STATUS_OK
ReadX 12437 33098 6652 6652 NT_STATUS_OK
ReadX 12437 39750 16384 16384 NT_STATUS_OK
ReadX 12437 56134 10496 10496 NT_STATUS_OK
ReadX 12437 66630 1784 1784 NT_STATUS_OK
ReadX 12437 68414 90 90 NT_STATUS_OK
ReadX 12437 68504 273 273 NT_STATUS_OK
ReadX 12437 68777 1600 1600 NT_STATUS_OK
ReadX 12437 70377 640 640 NT_STATUS_OK
ReadX 12437 71017 1280 1280 NT_STATUS_OK
ReadX 12437 72297 8464 8464 NT_STATUS_OK
ReadX 12437 80761 158 158 NT_STATUS_OK
ReadX 12437 80919 912 912 NT_STATUS_OK
ReadX 12437 81831 1980 1980 NT_STATUS_OK
ReadX 12437 83811 2256 2256 NT_STATUS_OK
ReadX 12437 86067 400 400 NT_STATUS_OK
ReadX 12437 86467 252 252 NT_STATUS_OK
ReadX 12437 86719 42 42 NT_STATUS_OK
ReadX 12437 86761 725 725 NT_STATUS_OK
ReadX 12437 2009 512 512 NT_STATUS_OK
ReadX 12437 3895 9 9 NT_STATUS_OK
ReadX 12437 3781 46 46 NT_STATUS_OK
ReadX 12437 4059 92 92 NT_STATUS_OK
ReadX 12437 3781 92 92 NT_STATUS_OK
ReadX 12437 3986 184 184 NT_STATUS_OK
ReadX 12437 3987 16384 16384 NT_STATUS_OK
ReadX 12437 3902 16384 16384 NT_STATUS_OK
ReadX 12437 3781 10240 10240 NT_STATUS_OK
ReadX 12437 3821 16384 16384 NT_STATUS_OK
ReadX 12437 3891 935 935 NT_STATUS_OK
ReadX 12437 4060 10240 10240 NT_STATUS_OK
ReadX 12437 4059 184 184 NT_STATUS_OK
ReadX 12437 256 184 184 NT_STATUS_OK
ReadX 12437 256 1026 1026 NT_STATUS_OK
ReadX 12437 3901 326 326 NT_STATUS_OK
ReadX 12437 3899 652 652 NT_STATUS_OK
ReadX 12437 256 2 2 NT_STATUS_OK
ReadX 12437 258 4948 4948 NT_STATUS_OK
Close 12437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12452 NT_STATUS_OK
Close 12452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12455 NT_STATUS_OK
WriteX 12455 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12455 258 NT_STATUS_OK
WriteX 12455 0 65536 65536 NT_STATUS_OK
WriteX 12455 65536 65536 65536 NT_STATUS_OK
WriteX 12455 131072 65536 65536 NT_STATUS_OK
WriteX 12455 196608 65536 65536 NT_STATUS_OK
WriteX 12455 262144 65536 65536 NT_STATUS_OK
WriteX 12455 327680 65536 65536 NT_STATUS_OK
WriteX 12455 393216 65536 65536 NT_STATUS_OK
WriteX 12455 458752 65536 65536 NT_STATUS_OK
WriteX 12455 524288 65536 65536 NT_STATUS_OK
WriteX 12455 589824 35257 35257 NT_STATUS_OK
Close 12455 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12457 NT_STATUS_OK
Close 12457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12460 NT_STATUS_OK
WriteX 12460 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12460 258 NT_STATUS_OK
WriteX 12460 0 65536 65536 NT_STATUS_OK
WriteX 12460 65536 65536 65536 NT_STATUS_OK
WriteX 12460 131072 65536 65536 NT_STATUS_OK
WriteX 12460 196608 65536 65536 NT_STATUS_OK
WriteX 12460 262144 65536 65536 NT_STATUS_OK
WriteX 12460 327680 65536 65536 NT_STATUS_OK
WriteX 12460 393216 65536 65536 NT_STATUS_OK
WriteX 12460 458752 65536 65536 NT_STATUS_OK
WriteX 12460 524288 65536 65536 NT_STATUS_OK
WriteX 12460 589824 57598 57598 NT_STATUS_OK
Close 12460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12462 NT_STATUS_OK
WriteX 12462 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12462 258 NT_STATUS_OK
WriteX 12462 0 12543 12543 NT_STATUS_OK
Flush 12462 NT_STATUS_OK
Close 12462 NT_STATUS_OK
Close 12446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12464 NT_STATUS_OK
Close 12464 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12466 NT_STATUS_OK
ReadX 12466 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12467 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12468 NT_STATUS_OK
QUERY_FILE_INFORMATION 12468 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12468 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12468 1005 NT_STATUS_OK
ReadX 12468 1938 24 24 NT_STATUS_OK
ReadX 12468 1920 276 276 NT_STATUS_OK
ReadX 12468 1918 14 14 NT_STATUS_OK
ReadX 12468 1918 7 7 NT_STATUS_OK
ReadX 12468 1919 12 12 NT_STATUS_OK
ReadX 12468 1919 8 8 NT_STATUS_OK
ReadX 12468 1917 15 15 NT_STATUS_OK
ReadX 12468 0 16 16 NT_STATUS_OK
ReadX 12468 16 2048 2048 NT_STATUS_OK
ReadX 12468 2064 2048 2048 NT_STATUS_OK
ReadX 12468 257 2048 2048 NT_STATUS_OK
ReadX 12468 385 2048 2048 NT_STATUS_OK
ReadX 12468 513 2048 2048 NT_STATUS_OK
ReadX 12468 641 2048 2048 NT_STATUS_OK
ReadX 12468 769 2048 2048 NT_STATUS_OK
ReadX 12468 897 2048 2048 NT_STATUS_OK
ReadX 12468 1025 2048 2048 NT_STATUS_OK
ReadX 12468 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12470 NT_STATUS_OK
Close 12470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12473 NT_STATUS_OK
WriteX 12473 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12473 258 NT_STATUS_OK
WriteX 12473 0 11588 11588 NT_STATUS_OK
Flush 12473 NT_STATUS_OK
Close 12473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12474 NT_STATUS_OK
Close 12474 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12476 NT_STATUS_OK
ReadX 12476 0 4096 4096 NT_STATUS_OK
Close 12468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12478 NT_STATUS_OK
WriteX 12478 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12478 258 NT_STATUS_OK
WriteX 12478 0 11615 11615 NT_STATUS_OK
Flush 12478 NT_STATUS_OK
Close 12478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12480 NT_STATUS_OK
Close 12480 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12482 NT_STATUS_OK
ReadX 12482 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12484 NT_STATUS_OK
Close 12484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12487 NT_STATUS_OK
WriteX 12487 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12487 258 NT_STATUS_OK
WriteX 12487 0 65536 65536 NT_STATUS_OK
WriteX 12487 65536 16050 16050 NT_STATUS_OK
Close 12487 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12467 1939 64 64 NT_STATUS_OK
ReadX 12467 128 248 248 NT_STATUS_OK
ReadX 12467 128 568 568 NT_STATUS_OK
ReadX 12467 3872 1536 1536 NT_STATUS_OK
ReadX 12467 3456 2560 2560 NT_STATUS_OK
ReadX 12467 3136 512 512 NT_STATUS_OK
ReadX 12467 2880 4096 4096 NT_STATUS_OK
ReadX 12467 3264 3072 3072 NT_STATUS_OK
ReadX 12467 320 4096 4096 NT_STATUS_OK
ReadX 12467 1024 4096 4096 NT_STATUS_OK
ReadX 12467 3616 4096 4096 NT_STATUS_OK
ReadX 12467 1939 64 64 NT_STATUS_OK
ReadX 12467 128 248 248 NT_STATUS_OK
ReadX 12467 128 608 608 NT_STATUS_OK
ReadX 12467 2858 1024 1024 NT_STATUS_OK
ReadX 12467 2810 4096 4096 NT_STATUS_OK
ReadX 12467 2826 4096 4096 NT_STATUS_OK
ReadX 12467 2580 2048 2048 NT_STATUS_OK
ReadX 12467 2800 2560 2560 NT_STATUS_OK
ReadX 12467 2100 4096 4096 NT_STATUS_OK
ReadX 12467 2084 4096 4096 NT_STATUS_OK
ReadX 12467 868 4096 4096 NT_STATUS_OK
ReadX 12467 2324 4096 4096 NT_STATUS_OK
ReadX 12467 884 4096 4096 NT_STATUS_OK
ReadX 12467 2604 1024 1024 NT_STATUS_OK
ReadX 12467 580 4096 4096 NT_STATUS_OK
ReadX 12467 596 4096 4096 NT_STATUS_OK
ReadX 12467 2752 4096 4096 NT_STATUS_OK
ReadX 12467 2842 1024 1024 NT_STATUS_OK
ReadX 12467 660 4096 4096 NT_STATUS_OK
ReadX 12467 2720 4096 4096 NT_STATUS_OK
ReadX 12467 2736 4096 4096 NT_STATUS_OK
ReadX 12467 628 4096 4096 NT_STATUS_OK
ReadX 12467 2704 4096 4096 NT_STATUS_OK
ReadX 12467 1556 4096 4096 NT_STATUS_OK
ReadX 12467 576 4096 4096 NT_STATUS_OK
ReadX 12467 3168 1536 1536 NT_STATUS_OK
ReadX 12467 832 4096 4096 NT_STATUS_OK
ReadX 12467 1088 4096 4096 NT_STATUS_OK
ReadX 12467 1344 4096 4096 NT_STATUS_OK
ReadX 12467 1600 4096 4096 NT_STATUS_OK
ReadX 12467 1856 4096 4096 NT_STATUS_OK
ReadX 12467 2112 4096 4096 NT_STATUS_OK
ReadX 12467 1892 4096 4096 NT_STATUS_OK
ReadX 12467 820 4096 4096 NT_STATUS_OK
ReadX 12467 788 4096 4096 NT_STATUS_OK
ReadX 12467 1604 4096 4096 NT_STATUS_OK
ReadX 12467 3648 4096 4096 NT_STATUS_OK
ReadX 12467 2608 4096 4096 NT_STATUS_OK
ReadX 12467 548 4096 4096 NT_STATUS_OK
ReadX 12467 740 4096 4096 NT_STATUS_OK
ReadX 12467 1344 4096 4096 NT_STATUS_OK
ReadX 12467 3392 4096 4096 NT_STATUS_OK
ReadX 12467 3904 4096 4096 NT_STATUS_OK
ReadX 12467 644 4096 4096 NT_STATUS_OK
ReadX 12467 676 4096 4096 NT_STATUS_OK
ReadX 12467 2688 4096 4096 NT_STATUS_OK
ReadX 12467 320 4096 4096 NT_STATUS_OK
ReadX 12467 900 4096 4096 NT_STATUS_OK
ReadX 12467 1908 4096 4096 NT_STATUS_OK
ReadX 12467 852 4096 4096 NT_STATUS_OK
ReadX 12467 724 4096 4096 NT_STATUS_OK
ReadX 12467 2292 4096 4096 NT_STATUS_OK
ReadX 12467 612 4096 4096 NT_STATUS_OK
ReadX 12467 388 4096 4096 NT_STATUS_OK
ReadX 12467 2368 4096 4096 NT_STATUS_OK
ReadX 12467 2624 4096 4096 NT_STATUS_OK
ReadX 12467 500 4096 4096 NT_STATUS_OK
ReadX 12467 35